Verify AI crawler requests to your pages

Use server or CDN request logs to identify candidate AI crawlers, verify their identity where the provider supports it and classify the purpose of each request. Record URLs, times and response status. Compare those access records with sampled citations without treating a fetch as proof of recommendation or human exposure.

By Rankfor.AI · Updated

Which records do you need?

Choose the pages whose access matters: a product fact page, a newsroom statement or an original report. Ask the site operator for the server or CDN logs covering an agreed period. Include timestamp, requested URL, request method, response status, user-agent string and enough network evidence to verify identity. Handle raw IP data according to the organization’s access and retention rules.

Check where logging happens. A request served at the CDN may never reach the origin server, and a sampled log may omit requests. Record those coverage limits. A missing row is a missing observation until you establish what the logging system captures.

How do you distinguish real crawlers?

Treat the user-agent string as a starting label. For Google, use the provider’s published IP ranges or perform reverse DNS followed by a matching forward lookup. The steps are documented in Google’s request-verification guide. Keep the verification result beside the request, including “unverified” when evidence is insufficient.

OpenAI publishes different agents and IP lists for search, possible training use and user-triggered fetching. Its crawler documentation distinguishes OAI-SearchBot, GPTBot and ChatGPT-User. A GPTBot hit should not be labeled a buyer search. Mark a deliberate test that triggers ChatGPT-User as your own test and exclude it from independent audience activity.

Google-Extended requires special care: it is a robots.txt control token and has no separate HTTP request user agent. Google’s documentation describes its Gemini-related uses and separates it from Google Search controls. Do not create a “Google-Extended visits” metric from a guessed log label.

What does a request actually establish?

A verified successful request establishes that a particular resource was served to that requester at that time. Record status codes and distinguish requests for the article from requests for robots.txt, images or other assets. Preserve redirects and failures so a raw request total does not conceal an access problem.

Use a simple ledger:

FieldExample entry
ResourcePublic newsroom correction page
Request purposeDocumented search crawler
Identity checkMatches provider IP range
ResponseSuccessful article response
LimitationCDN log excludes another hostname

The example illustrates the fields, not a real campaign result. None of these fields measures whether an answer quoted the page or a customer saw it.

Which stage does the evidence describe?

Chapter 12 of Become the Answer separates the checks that can otherwise disappear inside a crawler total. Keep evidence rows for requesting a URL, delivering useful content, index inclusion where observable, source selection for a query and support in the resulting answer. Add an action check when an agent is expected to operate a page function.

Mark stages without evidence as unobserved. These are diagnostic distinctions; assistants can implement them differently. A successful request establishes none of the later stages by itself.

How should access and citations be compared?

For a configured Rankfor publishing surface, Publishing > Statistics provides recorded requests and available user-agent classifications. Keep the serving surface and date range with the count. Those classifications use declared user-agent signatures, so independently verified identity requires the additional log checks described here.

Separately collect relevant saved answers and their visible citation links. Match normalized URLs, retaining the original links and dates. A fetched-and-cited page has two observations; it does not prove that this particular fetch caused that answer. A fetched-but-uncited page can still be useful to readers or appear outside the sampled questions.

For newsroom pages, investigate a factual correction and its technical availability on their own merits. Avoid concluding that an absent citation means the newsroom is globally invisible. The citation-verifiability research also shows why a visible link needs a claim-level support check before it is used as evidence.

Check access and answer use separately

Verified request
Check the requester's identity, the resource, the response and the time. A verified successful request establishes that the resource was served.
Readable content
Inspect the returned content or a supported rendering path. A successful response alone does not establish that the useful text was available.
Search inclusion
Use provider-specific inclusion evidence where available. A crawler request alone does not establish inclusion in a provider's search index.
Retrieval
Inspect disclosed retrieval records where available. A visible citation is not a complete record of every resource considered.
Answer use
Save the answer and check each visible citation against the claim it accompanies. Record recommendations separately from citations.

Adapted from Become the Answer, Chapter 12. This simplified diagnostic distinguishes evidence for access from evidence for answer use. Implementations vary; these checks do not describe a mandatory sequence for every AI service.

Source: Become the Answer, Dmitrij Żatuchin

Download diagram (SVG)

Steps to follow

  1. Define log coverage

    List the relevant pages, hostnames, period and whether requests are captured at the CDN, origin or both.

  2. Verify and classify candidates

    Check documented identity evidence and separate search, training-related and user-triggered purposes.

  3. Inspect responses

    Retain page URLs, response statuses, redirects, duplicates and test traffic in the ledger.

  4. Compare separate citation evidence

    Match visible cited URLs from a defined answer sample while preserving the distinction between fetching and citation.

A verified request ledger for important public pages

A blank CSV worksheet for your own evidence and decisions.

Download worksheet (CSV)

Sources

Put the guide to work

A verified request ledger for important public pages

See public pricing

Common questions

Does no logged request mean my site is blocked?

Check log coverage, observation period and technical access before drawing that conclusion. Missing data alone does not identify the cause.

Should I allow every crawler?

Set access according to your publishing, licensing and technical policy. Search, training and user-triggered retrieval controls serve different purposes.

Related guides