--- title: "ChatGPT agent: user agent, token, block rate | Agent Ready Crawlers" description: "ChatGPT agent from OpenAI: no robots.txt token, task agent purpose and what a site can check; no exact user-agent string is published. Read 2026-11-04." canonical: https://agentreadycrawlers.com/crawlers/chatgpt-agent site: "Agent Ready Crawlers" last_updated: 2026-11-04 section: "Crawlers" --- # ChatGPT agent: user agent, token, block rate | Agent Ready Crawlers > ChatGPT agent from OpenAI: no robots.txt token, task agent purpose and what a site can check; no exact user-agent string is published. Read 2026-11-04. Source: https://agentreadycrawlers.com/crawlers/chatgpt-agent Site: Agent Ready Crawlers Last reviewed: 2026-11-04 Browsing agent from OpenAI # ChatGPT agent (Cloud browser, formerly Operator) In short ChatGPT agent (Cloud browser, formerly Operator) is OpenAI's browsing agent. ChatGPT agent has no robots.txt token, so robots.txt cannot address it and the crawl cannot measure a block rate. It signs requests with Web Bot Auth, so a signature can be checked. OpenAI's allowlisting article covers signature verification and allowlisting only; it states no robots.txt behaviour for the Cloud browser. Operator [OpenAI](https://agentreadycrawlers.com/crawlers/operator/openai/) Vendor profile: [OpenAI](https://agentreadycrawlers.com/vendors/openai/) Purpose Task agent [All task agent rows](https://agentreadycrawlers.com/crawlers/purpose/task-agent/). A browsing agent that clicks, fills forms and finishes a job for a person. User-agent string No exact string is published. What the operator or a third party says: Requests carry Signature, Signature-Input and Signature-Agent: "https://chatgpt.com" headers (RFC 9421); the user agent string itself is not published as an identifier robots.txt token None. No robots.txt line can address this agent. Respects robots.txt No statement OpenAI's allowlisting article covers signature verification and allowlisting only; it states no robots.txt behaviour for the Cloud browser. [Source](https://help.openai.com/en/articles/11845367-chatgpt-agent-allowlisting), read 2026-11-04. Verification Web Bot Auth signature Requests carry an HTTP message signature that can be checked against the operator's published key directory. [Documentation](https://chatgpt.com/.well-known/http-message-signatures-directory), read 2026-11-04. IP ranges Not published. Rate behaviour OpenAI says at launch the Cloud browser cannot sign in to websites or complete payments. Vendor rule names - **Cloudflare:** Signed agent, bot tag chatgpt-agent, Bot Detection ID 129220581 (listed as ChatGPT Operator in the WAF search) - **Vercel:** ChatGPT Agent entry, id chatgpt-operator, verified automatically - **Akamai:** ChatGPT Agent, Artificial Intelligence bots category - **HUMAN Security:** ChatGPT Agent in Known Bots & Crawlers; AI Agents Permissions in AgenticTrust Block rate None: the agent has no token, so a robots.txt block rate does not exist. Documentation [help.openai.com](https://help.openai.com/en/articles/11845367-chatgpt-agent-allowlisting), read 2026-11-04. Note. OpenAI's help article was renamed "ChatGPT Work's Cloud browser allowlisting" (updated about 15 days before 2026-11-04). Key directory served 2026-11-04 with one Ed25519 key. Part of Cloudflare's first signed-agents cohort (2025-08-28). Radar lists "ChatGPT agent" as Verified. ## Allow and refuse lines This agent has no robots.txt token, so there are no lines to copy. Verify its signature in your WAF or edge rules instead, then allow or refuse the verified identity. Refusing or allowing in robots.txt states a preference. For this row the operator or its documentation says robots.txt may not govern the fetch, so enforcement belongs in your WAF. ## OpenAI in the Verification Ledger One IP JSON per crawler plus a Web Bot Auth key directory for the Cloud browser. The most complete set read. [All operators](https://agentreadycrawlers.com/verification/). IP lists - [openai.com/gptbot.json](https://openai.com/gptbot.json) - [openai.com/searchbot.json](https://openai.com/searchbot.json) - [openai.com/chatgpt-user.json](https://openai.com/chatgpt-user.json) - [openai.com/adsbot.json](https://openai.com/adsbot.json) Reverse DNS publishes nothing Key directory https://chatgpt.com/.well-known/http-message-signatures-directory Cloudflare GPTBot and ChatGPT agent listed Verified on Radar (read 2026-11-04); ChatGPT agent is a Cloudflare signed agent, detection ID 129220581 Visa TAP registry no public operator-level registration found (checked 2026-11-04) Mastercard Agent Pay no public operator-level registration found (checked 2026-11-04) ## Other OpenAI rows - [GPTBot](https://agentreadycrawlers.com/crawlers/gptbot/) Training token GPTBot - [OAI-SearchBot](https://agentreadycrawlers.com/crawlers/oai-searchbot/) Search index token OAI-SearchBot - [ChatGPT-User](https://agentreadycrawlers.com/crawlers/chatgpt-user/) Live answer fetch token ChatGPT-User - [OAI-AdsBot](https://agentreadycrawlers.com/crawlers/oai-adsbot/) Other token OAI-AdsBot - [ChatGPT Atlas (browser agent mode)](https://agentreadycrawlers.com/crawlers/chatgpt-atlas/) Task agent no token ## Sources - [ChatGPT Work's Cloud browser allowlisting](https://help.openai.com/en/articles/11845367-chatgpt-agent-allowlisting) read 2026-11-04 - [chatgpt.com: http message signatures directory](https://chatgpt.com/.well-known/http-message-signatures-directory) read 2026-11-04 - [Overview of OpenAI Crawlers](https://platform.openai.com/docs/bots) read 2026-11-04 - [Cloudflare Radar: GPTBot](https://radar.cloudflare.com/bots/directory/gptbot) read 2026-11-04 - [Cloudflare: signed agents](https://blog.cloudflare.com/signed-agents/) read 2026-11-04 Last reviewed 2026-11-04