hammadtq

<p><strong>OpenBotAuth</strong> helps publishers control automated access from AI crawlers and agents. It verifies requests using RFC 9421 HTTP Message Signatures (via a configurable verifier) and applies per-site or per-post policies like allow, deny, teaser previews, and 402 payment-required responses. It also publishes AI-friendly endpoints like llms.txt, a JSON feed, and per-post Markdown.</p>
<p>Instead of blocking all bots or allowing unrestricted access, you can:</p>
<ul>
<li><strong>See AI bot traffic</strong> – Local-only analytics showing which bots are crawling your site</li>
<li><strong>Verify bot identity</strong> using cryptographic signatures (RFC 9421)</li>
<li><strong>Show teasers</strong> to unverified bots (first N words)</li>
<li><strong>Rate limit</strong> bot access per agent</li>
<li><strong>Whitelist/blacklist</strong> specific bots</li>
</ul>
<h4>Key Features</h4>
<ul>
<li><strong>Bot Traffic Analytics</strong> – See which AI bots (GPTBot, ClaudeBot, PerplexityBot, etc.) are visiting your site</li>
<li><strong>Signature Verification</strong> – Verifies RFC 9421 HTTP Message Signatures using Ed25519 cryptography</li>
<li><strong>Content Teasers</strong> – Show first N words to unverified bots with customizable per-post settings</li>
<li><strong>Rate Limiting</strong> – Per-agent rate limits with configurable time windows</li>
<li><strong>Access Control</strong> – Whitelist/blacklist with wildcard pattern matching</li>
<li><strong>Local Analytics</strong> – Visual dashboard with charts, stats cards, and decision breakdowns (no external tracking)</li>
<li><strong>AI-Ready Endpoints</strong> – Serve llms.txt, JSON feed, and markdown for AI crawlers</li>
<li><strong>Tabbed Admin Interface</strong> – Clean organization with Analytics, AI Endpoints, and Configuration tabs</li>
</ul>
<h4>AI-Ready Endpoints</h4>
<p>OpenBotAuth provides machine-readable endpoints for AI systems:</p>
<ul>
<li><strong>/llms.txt</strong> – Standardized AI feed discovery (also at /.well-known/llms.txt)</li>
<li><strong>/.well-known/openbotauth-feed.json</strong> – JSON list of all published posts</li>
<li><strong>/.well-known/openbotauth/posts/{ID}.md</strong> – Per-post markdown content</li>
</ul>
<p>Configure which post types to include (posts, pages, or custom types) and set the feed limit (up to 500 items). All data is served locally from your WordPress database. No external tracking or telemetry. Only published, non-password-protected posts are exposed.</p>
<h4>How It Works</h4>
<ol>
<li>AI agent signs HTTP request with its private key (RFC 9421 signature)</li>
<li>WordPress plugin extracts signature headers and sends them to a verifier service</li>
<li>Verifier fetches agent’s public key from registry and verifies signature</li>
<li>Plugin applies policy: allow full content, show teaser, require payment, or deny</li>
</ol>
<h4>External Service Disclosure</h4>
<p><strong>This plugin connects to an external verifier service.</strong> When a signed bot request is received, the plugin sends the following data to your configured verifier URL via <code>wp_remote_post</code>:</p>
<ul>
<li>HTTP method (GET, POST, etc.)</li>
<li>The accessed URL (including query string, if present)</li>
<li>HTTP signature headers (Signature, Signature-Input, Signature-Agent)</li>
<li>Additional HTTP header values explicitly listed in the Signature-Input header (e.g., content-type, accept, user-agent)</li>
</ul>
<p><strong>Privacy protection:</strong> Sensitive headers (cookies, authorization, proxy-authorization, www-authenticate) are NEVER forwarded, even if present in the request. If a bot’s signature covers a sensitive header, verification will fail with a clear error.</p>
<p><strong>No WordPress user accounts or personal data is transmitted.</strong> Only the headers explicitly covered by the bot’s signature are forwarded to enable cryptographic verification. Note that the URL may include query parameters depending on your site’s structure.</p>
<p>You can:<br />
* Use the hosted verifier at <code>https://verifier.openbotauth.org/verify</code><br />
* Self-host the verifier service (see documentation)<br />
* The verifier service may log requests server-side depending on your configuration</p>
<p><strong>Analytics are local-only.</strong> Decision counts (allow/teaser/deny/pay/rate_limit) and bot traffic observations (User-Agent based) are stored in your WordPress database. No analytics data is sent to external servers.</p>
<p>For more information, please review our <a href="https://openbotauth.org/terms" rel="nofollow ugc">Terms of Service</a> and <a href="https://openbotauth.org/privacy" rel="nofollow ugc">Privacy Policy</a>.</p>
<h3>Developer Hooks</h3>
<h4>Filters</h4>
<p><strong>openbotauth_policy</strong><br />
Modify policy before applying:</p>
<pre><code>add_filter('openbotauth_policy', function($policy, $post) {
    if ($post->post_type === 'premium') {
        $policy['price_cents'] = 1000;
    }
    return $policy;
}, 10, 2);
</code></pre>
<h4>Actions</h4>
<p><strong>openbotauth_verified</strong><br />
Triggered when a bot is verified:</p>
<pre><code>add_action('openbotauth_verified', function($agent, $post) {
    error_log("Bot {$agent['jwks_url']} accessed post {$post->ID}");
}, 10, 2);
</code></pre>
<p><strong>openbotauth_payment_required</strong><br />
Triggered when 402 is returned:</p>
<pre><code>add_action('openbotauth_payment_required', function($agent, $post, $price) {
    // Track payment requests
}, 10, 3);
</code></pre>
<h4>AI Endpoint Filters (v0.1.2+)</h4>
<p><strong>openbotauth_should_serve_llms_txt</strong><br />
Disable llms.txt endpoint (e.g., when using Yoast):</p>
<pre><code>add_filter('openbotauth_should_serve_llms_txt', '__return_false');
</code></pre>
<p><strong>openbotauth_should_serve_feed</strong><br />
Disable JSON feed endpoint:</p>
<pre><code>add_filter('openbotauth_should_serve_feed', '__return_false');
</code></pre>
<p><strong>openbotauth_should_serve_markdown</strong><br />
Disable markdown endpoints:</p>
<pre><code>add_filter('openbotauth_should_serve_markdown', '__return_false');
</code></pre>
<p><strong>openbotauth_feed_item</strong><br />
Modify feed items:</p>
<pre><code>add_filter('openbotauth_feed_item', function($item, $post) {
    $item['custom_field'] = get_post_meta($post->ID, 'my_field', true);
    return $item;
}, 10, 2);
</code></pre>
<p><strong>openbotauth_markdown_content</strong><br />
Post-process markdown output:</p>
<pre><code>add_filter('openbotauth_markdown_content', function($markdown, $post) {
    return $markdown . "\n\n---\nCopyright notice here";
}, 10, 2);
</code></pre>


OpenBotAuth – AI Crawler Access Control

Verify AI crawlers with HTTP Signatures and enforce allow/deny/teaser policies; also serves llms.txt and AI-ready feeds.

aleemiqbal

<p><strong>The “Advanced Robots.txt Optimizer & Editor” is a WordPress plugin that enhances the functionality of the Robots.txt file on your website by allowing you to edit, optimize, and customize the Robots.txt file to fit your website’s specific needs. The plugin provides various features and options to customize the Robots.txt file to improve website SEO, protect website resources, and manage website traffic by blocking search engines and web crawlers from accessing specific areas of your website.</strong></p>
<h3>Features</h3>
<ul>
<li>Edit, optimize, and customize your website’s Robots.txt file to fit your specific needs.</li>
<li>Protect the backend of your website by blocking search engines and web crawlers from accessing the WordPress administration panel.</li>
<li>Allow dynamic functionality by crawling the admin-ajax.php file for AJAX requests to the server.</li>
<li>Block duplicate content by blocking specific URLs, which prioritizes high-quality, unique content on your website, improving your SEO and visibility in search results.</li>
<li>Prevent the crawling of WordPress JSON API endpoints and search URLs, such as “/search/” and “/?s=” to save crawl budget.</li>
<li>Improve website security and protect website resources by blocking feed directories, spam directories, and WayBackMachine crawler.</li>
<li>Block ChatGPT from using your website content.</li>
<li>Optimize your WooCommerce website by blocking Cart, Checkout, My Account, and Login pages from indexation, as well as blocking WooCommerce parameters to avoid duplicate content issues.</li>
<li>Add sitemap links to the Robots.txt file for quick and efficient crawling and indexing of site content.</li>
<li>Add Yoast Sitemap Link, News Sitemap Link, and WooCommerce Product Sitemap Link to the Robots.txt file.</li>
<li>Block SEO tool crawlers, such as Ahrefs, Semrush, Majestic, and others, from accessing your website for improved website security, privacy, and protection of website resources.</li>
</ul>
<p>The plugin provides a feature to add the default WordPress Robots.txt rules to the Robots.txt file. This feature blocks search engines and web crawlers from accessing the WordPress administration panel, which protects the backend of your website. This feature allows the crawling of the admin-ajax.php file for AJAX requests to the server, which allows dynamic functionality.</p>
<p>The plugin provides options to block crawling of duplicate content by blocking specific URLs, which prevents search engines from indexing this duplicate content and prioritizes high-quality, unique content on your website, improving your SEO and visibility in search results. It also provides options to prevent the crawling of the WordPress JSON API endpoints and search URLs, such as “/search/” and “/?s=”.</p>
<p>The plugin also provides options to block feed directories, spam directories, and WayBackMachine crawler to save crawl budget, improve website security, and protect website resources. The plugin also allows website owners to block ChatGPT from using website content.</p>
<p>The plugin provides options to optimize your WooCommerce website by blocking the Cart, Checkout, My Account, and Login pages from indexation, as well as blocking WooCommerce parameters to avoid duplicate content issues.</p>
<p>Finally, the plugin provides an option to add sitemap links to the Robots.txt file, which allows search engines to quickly and efficiently crawl the site and index its content, improving search engine rankings and visibility. The plugin provides options to add Yoast Sitemap Link, News Sitemap Link, and WooCommerce Product Sitemap Link to the Robots.txt file.</p>
<p>The plugin also provides an option to block SEO tool crawlers, such as Ahrefs, Semrush, Majestic, and others, from accessing your website, which improves website security, privacy, and protects website resources.</p>
<h3>Need any Help?</h3>
<ul>
<li>Please email us at aleemiqbalbhatti@gmail.com</li>
<li>We provide live support</li>
</ul>
<h3>V 1.0.0</h3>
<ul>
<li>Initial release at 02/24/2023</li>
</ul>
<h3>V 1.1.0</h3>
<ul>
<li>Color Scheme Changed,Added option to reset,Default now shows at start</li>
</ul>
<h3>V 1.2.0</h3>
<ul>
<li>Options not saving bug fixed,Robots.txt bugs fixed</li>
</ul>
<h3>V 1.3.0</h3>
<ul>
<li>PHP errors fixed</li>
</ul>
<h3>V 1.4.0</h3>
<ul>
<li>Fixed issue Options not saving,Clear buttons now unchecks</li>
</ul>
<h3>V 1.5.0</h3>
<p>Fixed issue Causing plugin to break</p>


Advanced Robots.txt Optimizer & Editor

The "Advanced Robots.txt Optimizer & Editor" WordPress plugin enhances website functionality, SEO and traffic management by allowing use …

OpenBotAuth – AI Crawler Access Control vs Advanced Robots.txt Optimizer & Editor