AI bot permission policies
Define allowed, blocked, attribution-required, and review-first behaviors by bot category and known user agent.
BotConsent helps website owners move from scattered crawler rules to managed policies that are readable, publishable, and ready for enforcement workflows.
User-agent: GPTBot Disallow: / User-agent: Googlebot Allow: / Policy: /botconsent.json
The MVP focuses on the public site, policy generation, and dashboard workflow. The product model is ready to grow into monitoring, APIs, and enforcement.
Define allowed, blocked, attribution-required, and review-first behaviors by bot category and known user agent.
Generate familiar crawler instructions and AI-oriented guidance from one source of truth.
Separate search indexing, answer retrieval, training collection, commercial scraping, and public-interest archiving.
Track observed agents, suspicious user agents, and policy outcomes in a dashboard-ready activity model.
Express model-training consent in clear, machine-readable terms that can be referenced by compliant crawlers.
Keep a history of policy versions, site verification events, crawler observations, and exports.
Confirm domain ownership with DNS, meta tag, or file-based verification before publishing hosted policy pages.
Serve a canonical policy URL for every verified site so people, bots, and enforcement tools know where to look.
Expose policies, events, and exports through predictable endpoints for internal tools and edge integrations.
A single bot may perform different tasks. BotConsent keeps the owner's intent attached to the type of access requested.
| Category | Typical preference | Reason |
|---|---|---|
| Search indexing | Allow public pages | Keep canonical discovery healthy |
| AI assistant retrieval | Allow with attribution | Support user-initiated answers |
| AI training crawlers | Block or opt in | Control training-data collection |
| Commercial scrapers | Review first | Reduce low-value extraction |
| Archive/research bots | Allow selected agents | Preserve public-interest access |
GET /v1/sites/example.com/policy
Authorization: Bearer bc_live_...
{
"domain": "example.com",
"ai_training": "disallow",
"assistant_retrieval": "allow_with_attribution",
"commercial_scraping": "manual_review"
} BotConsent can sit in front of a simple website or a larger compliance workflow. The same policy choices can generate static files, hosted pages, dashboard previews, and API responses.
View API overview