Agent Ready Crawlers

The field guide to every AI crawler and agent at the door, and the vendors who decide who gets in.

Browsing agent from OpenAI

ChatGPT agent (Cloud browser, formerly Operator)

In short

ChatGPT agent (Cloud browser, formerly Operator) is OpenAI's browsing agent. ChatGPT agent has no robots.txt token, so robots.txt cannot address it and the crawl cannot measure a block rate. It signs requests with Web Bot Auth, so a signature can be checked. OpenAI's allowlisting article covers signature verification and allowlisting only; it states no robots.txt behaviour for the Cloud browser.

Operator
OpenAI Vendor profile: OpenAI
Purpose
Task agent All task agent rows. A browsing agent that clicks, fills forms and finishes a job for a person.
User-agent string
No exact string is published. What the operator or a third party says: Requests carry Signature, Signature-Input and Signature-Agent: "https://chatgpt.com" headers (RFC 9421); the user agent string itself is not published as an identifier
robots.txt token
None. No robots.txt line can address this agent.
Respects robots.txt

No statement

OpenAI's allowlisting article covers signature verification and allowlisting only; it states no robots.txt behaviour for the Cloud browser. Source, read 2026-11-04.

Verification

Web Bot Auth signature

Requests carry an HTTP message signature that can be checked against the operator's published key directory. Documentation, read 2026-11-04.

IP ranges
Not published.
Rate behaviour
OpenAI says at launch the Cloud browser cannot sign in to websites or complete payments.
Vendor rule names
  • Cloudflare: Signed agent, bot tag chatgpt-agent, Bot Detection ID 129220581 (listed as ChatGPT Operator in the WAF search)
  • Vercel: ChatGPT Agent entry, id chatgpt-operator, verified automatically
  • Akamai: ChatGPT Agent, Artificial Intelligence bots category
  • HUMAN Security: ChatGPT Agent in Known Bots & Crawlers; AI Agents Permissions in AgenticTrust
Block rate

None: the agent has no token, so a robots.txt block rate does not exist.

Documentation
help.openai.com, read 2026-11-04.

Note. OpenAI's help article was renamed "ChatGPT Work's Cloud browser allowlisting" (updated about 15 days before 2026-11-04). Key directory served 2026-11-04 with one Ed25519 key. Part of Cloudflare's first signed-agents cohort (2025-08-28). Radar lists "ChatGPT agent" as Verified.

Allow and refuse lines

This agent has no robots.txt token, so there are no lines to copy. Verify its signature in your WAF or edge rules instead, then allow or refuse the verified identity.

Refusing or allowing in robots.txt states a preference. For this row the operator or its documentation says robots.txt may not govern the fetch, so enforcement belongs in your WAF.

OpenAI in the Verification Ledger

One IP JSON per crawler plus a Web Bot Auth key directory for the Cloud browser. The most complete set read. All operators.

IP lists
Reverse DNS
publishes nothing
Key directory
https://chatgpt.com/.well-known/http-message-signatures-directory
Cloudflare
GPTBot and ChatGPT agent listed Verified on Radar (read 2026-11-04); ChatGPT agent is a Cloudflare signed agent, detection ID 129220581
Visa TAP registry
no public operator-level registration found (checked 2026-11-04)
Mastercard Agent Pay
no public operator-level registration found (checked 2026-11-04)

Other OpenAI rows

Sources

Last reviewed 2026-11-04