// AI NEWS · PLATFORM

OpenAI Says robots.txt May Not Apply to ChatGPT's Fetch Bot When a User Asks It to Read a Page

OpenAI's crawler documentation now states that because ChatGPT-User fetches a page only when a person asks, robots.txt rules "may not apply" — leaving a Disallow line unable to stop live ChatGPT browsing, unlike GPTBot and OAI-SearchBot.

2026-08-15 · by Moe Ameen

What happened

OpenAI's crawler documentation now separates ChatGPT's page-fetching bot from its automatic crawlers and tells site owners that a robots.txt block may not stop it. The company lists four distinct agents: GPTBot, which crawls the open web to train foundation models; OAI-SearchBot, which surfaces sites inside ChatGPT's search feature; OAI-AdsBot, which checks pages submitted as ads; and ChatGPT-User, which fetches a page in real time when a person asks ChatGPT or a Custom GPT to read it. The user-agent string for the fetch bot is ChatGPT-User/1.0, and its IP ranges are published at openai.com/chatgpt-user.json.

The line that drew attention, flagged in an August 14, 2026 Search Engine Journal report, is OpenAI's own wording for ChatGPT-User: "Because these actions are initiated by a user, robots.txt rules may not apply." The docs add that ChatGPT-User "is not used for crawling the web in an automatic fashion" and steer anyone who wants to manage automatic crawl opt-outs toward OAI-SearchBot instead. The framing treats a user-triggered fetch as closer to a person opening a browser tab than to a crawler indexing the site, which is why the usual crawl-directive file is presented as not necessarily binding on it.

The practical gap is that GPTBot and OAI-SearchBot remain fully controllable through robots.txt, while ChatGPT-User is the one many sites most want to gate — reporting cited by the piece notes ChatGPT's fetch bot is disallowed by more sites than any comparable AI agent. If robots.txt does not govern it, a publisher who wants to keep ChatGPT from reading a page during a live session has to move the control to the server: a firewall, WAF, or user-agent rule that returns a 403 for ChatGPT-User, ideally verified against OpenAI's published IP list rather than the spoofable user-agent alone. This mirrors how Google handles its own user-triggered fetchers, which its documentation likewise says generally ignore robots.txt.

Why it matters for creators

  • The lever most publishers reach for does not work here. A Disallow rule in robots.txt is the standard way to keep bots out, and OpenAI is saying it may do nothing against the exact agent — ChatGPT-User — that reads your page while a person is chatting.
  • Blocking and being cited are now a single tradeoff. To keep ChatGPT out you would block ChatGPT-User at the server; but that same fetch is often what lets ChatGPT pull, quote, and link your page in an answer, so hard-blocking can cost you the citation.
  • The controls are split across three bots, not one switch. GPTBot (training) and OAI-SearchBot (search visibility) obey robots.txt; ChatGPT-User may not. Managing AI access is now three separate decisions, and confusing them leaves the wrong door open or shut.
  • Server-side enforcement is a heavier lift than a text file. Matching a user-agent and verifying it against OpenAI's IP ranges at the firewall or WAF is real infrastructure work, which puts meaningful control out of reach for creators on hosted platforms they do not fully own.
  • It reframes the goal from keeping AI out to being the source AI reads. If your content will be fetched during live sessions regardless, the winning move for most creators is to be the clearest, most citable answer on the page rather than to fight the fetch.

How to act on this with Kompozy

The instinct on a story like this is defensive — how do I block the bot. For most creators the more valuable read is the opposite: if ChatGPT-User is going to fetch and quote your pages whenever someone asks about your topic, the return is on giving it a lot of clear, on-brand, well-published content to find. Earlier reporting already showed [ChatGPT's search index surfaces small sites the same way it does big publishers](/news/chatgpt-search-indexes-small-sites), so visibility is a coverage-and-clarity game, not a domain-authority one. That is a production problem, and production is what [Kompozy](/) does. It generates net-new content across [18 formats](/glossary/output-buckets) — [blog articles](/glossary/output-buckets), newsletters, carousels, quote cards, and persona video — all governed by one [Persona Brief](/glossary/persona-brief) so the voice ChatGPT reads back is consistently yours, then publishes the set across the eight social platforms plus blog and email on [Autopilot](/glossary/autopilot).

The distinction that makes this OpenAI change matter is worth keeping straight: robots.txt still governs GPTBot and OAI-SearchBot, so you keep your normal crawl and training opt-outs; ChatGPT-User is the live-fetch agent you may not be able to gate with a text file, which is exactly why owning your published footprint beats trying to wall it off. Kompozy turns one idea into a week of citable pages and posts — a blog explainer, a LinkedIn take, a carousel, a short — each a surface ChatGPT can fetch, quote, and link back to. Unlike the Google-side case, where the equivalent [Gemini Notebook fetcher also ignores robots.txt](/news/gemini-notebook-crawler-ai-scraping), the practical answer is the same across engines: publish more of the right thing, in your own voice, on a schedule, so that when an AI reads your work it reads the version you shipped.

Quick takeaways

  • OpenAI's crawler docs list four agents: GPTBot (training), OAI-SearchBot (search), OAI-AdsBot (ads), and ChatGPT-User (user-triggered fetches).
  • For ChatGPT-User the docs state, "Because these actions are initiated by a user, robots.txt rules may not apply."
  • GPTBot and OAI-SearchBot remain fully controllable via robots.txt; ChatGPT-User is the one most sites want to gate and reportedly may not be.
  • To restrict ChatGPT-User you need a server-side rule (firewall, WAF, or user-agent block) verified against OpenAI's published IP ranges, not robots.txt.
  • Blocking the fetch can also remove the citation, so for most creators the better play is publishing clear, on-brand content that ChatGPT can read and cite.

Frequently asked questions

Does robots.txt block ChatGPT from reading my site?

Not reliably for user-triggered fetches. OpenAI's documentation says that because ChatGPT-User visits a page when a person asks, "robots.txt rules may not apply." A Disallow line still governs GPTBot (training) and OAI-SearchBot (search), but it may not stop ChatGPT-User from fetching a page during a live chat session.

What is ChatGPT-User and how is it different from GPTBot?

ChatGPT-User (user-agent ChatGPT-User/1.0) is OpenAI's fetch bot that loads a page in real time when a person asks ChatGPT or a Custom GPT to read or browse it. GPTBot is the automatic crawler that collects data to train models. OpenAI treats them differently: GPTBot obeys robots.txt, while ChatGPT-User is framed as user-initiated and may not.

How do I actually stop ChatGPT-User from fetching my pages?

Move the control off robots.txt and onto the server. Add a firewall, WAF, or user-agent rule that returns a 403 for ChatGPT-User, and verify requests against OpenAI's published IP ranges (openai.com/chatgpt-user.json) rather than trusting the spoofable user-agent alone. Note that blocking the fetch can also stop ChatGPT from citing or linking your page.

Should creators block ChatGPT or try to be cited by it?

For most creators, being cited is the better outcome. The same fetch that reads your page is often what lets ChatGPT quote and link it in an answer, and ChatGPT's index surfaces small sites alongside large publishers. Publishing clear, on-brand, well-structured content across platforms — the kind Kompozy generates and schedules — makes you the source the model reads back.

Related news

← All AI news · Get started →