Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run Scan×
Skip to content
World desk3 min

Does HTTP 402 Protect Content From Bots, Scrapers, and AI Crawlers?

HTTP 402 is not a built-in anti-bot control. Blocking and paid access depend on crawler detection, enforcement rules, and a compatible payment flow.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

No. HTTP 402 alone does not identify bots, block scraping, or make content inaccessible. The HTTP standard reserves the code for future use; any blocking or payment enforcement comes from a server, firewall, proxy, or compatible payment system configured to act on it.

What does HTTP 402 mean?

RFC 9110, the HTTP semantics standard published in June 2022, says: “The 402 (Payment Required) status code is reserved for future use.” It does not define 402 as a bot-blocking code, a crawler detector, or a universal payment challenge. RFC 9110, section 15.5.3.

As an Amazon Associate I earn from qualifying purchases.

A server can choose to return 402, but the code itself does not authenticate a crawler or compel a client to stop requesting pages. A crawler might comply, retry, ignore the response, or seek another route. Whether access is actually denied depends on controls at the server or an intermediary such as a web application firewall (WAF) or proxy.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Can 402 block AI crawlers?

Only when a system around the response detects a crawler and applies a blocking policy. For example, Cloudflare documents a setting that lets an operator return either 403 Forbidden or 402 Payment Required to a blocked AI crawler. In that case, the configured rule performs the blocking; choosing 402 changes the response, not the underlying enforcement. Cloudflare AI Crawl Control documentation.

Detection quality matters. Cloudflare says its free plan identifies crawlers using user-agent strings, while its documentation describes Bot Management detection IDs as a more thorough option. Since a 402 response cannot identify the requester, it cannot compensate for weak or missing bot detection.

Cloudflare says WAF or Bot Management block rules take precedence over a Pay Per Crawl charge action. A request blocked by those rules does not proceed into the charge flow. Cloudflare Pay Per Crawl documentation.

How does pay-per-crawl use 402?

A payment flow needs more than an HTTP status code: the site or intermediary and the crawler must follow compatible instructions for pricing, payment, verification, and access. Cloudflare’s documented Pay Per Crawl flow is one provider-specific example, not behavior required by RFC 9110.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Offer a price: The initial 402 response includes a crawler-price header.
  2. Request paid access: A crawler can send either a signed crawler-exact-price or crawler-max-price request header as part of its signed Web Bot Auth request.
  3. Verify and serve: If the request succeeds, the response is HTTP 200 and includes crawler-charged. A failed attempt may remain a 402 and include crawler-error.

These headers and outcomes are Cloudflare’s implementation, not standard HTTP requirements. Cloudflare’s crawler guide was last updated April 23, 2026; the documentation described Pay Per Crawl as closed beta, so availability and eligibility may change. Cloudflare recommends tracking charged values. Cloudflare Pay Per Crawl crawler guide.

Cloudflare also documents an x402 proxy template for protected HTTP routes. The proxy can return a 402 with payment instructions, verify payment, and forward the request to the origin afterward. Its example uses Bot Management thresholds to direct crawler traffic to a paywall while leaving human traffic free. This protection comes from the configured proxy and payment flow, not from 402 itself. The x402 documentation was updated June 3, 2026. Cloudflare x402 proxy template.

Which kind of crawler policy fits your goal?

Goal What the response does What must enforce it
Refuse access Returns a denial such as 403, or a configured 402 response to a blocked crawler. A rule at the origin, WAF, or another enforcement point, plus a way to identify the traffic.
Signal that payment is required Uses 402 as a message to the client. A configured response and a client that understands what the message means; the status alone does not charge or grant access.
Grant paid access Can use 402 to present pricing, then serve content after successful payment. A compatible payment and verification flow, such as a configured proxy and supported crawler.

For a policy decision, check where enforcement occurs, what identity or signals are used to distinguish crawlers, and whether the clients you care about support the payment convention. A user-agent string is not equivalent to verified crawler identity, and a custom payment exchange is not automatically interoperable with ordinary HTTP clients.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What are the tradeoffs of pay-to-crawl?

Charging can create a licensing or revenue path, but blanket rules can also restrict legitimate uses of publicly available material. Creative Commons’ November 2025 issue brief warns that overbroad, indiscriminate pay-to-crawl systems could impede access for researchers, nonprofits, cultural heritage institutions, educators, and others working in the public interest. This is the organization’s policy assessment, not a measured estimate. Creative Commons issue brief, November 2025.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Cloudflare reported that its customers generated over one billion 402 responses on an average day in 2025. That company-reported count does not establish how many sites used 402, how many responses targeted crawlers, or whether those responses successfully prevented access. Cloudflare blog, August 28, 2025.

Best Value
Forvencer Server Book, 2 Zipper Pocket, Server Books for Waitress
  • Upgraded Two Zipper Pockets: Forvencer server books feature two secure zipper pockets for better organization of coins, cash, and receipts, ensuring that everything you collect has a safe and secure place
  • Smart Storage & Quick Access: Designed with 8 multi-functional compartments, the right side includes a guest receipt pad, while the left has a money pocket, ticket pocket, and credit card slot. Two small clear pockets store bills, receipts, and other visible items. A stitched pen loop ensures you always have your favorite pen ready
  • High-quality & Easy to Clean: Crafted from high-quality PU leather with heavy-duty stitching, this server book is built to last. It resists tears, scratches, and its waterproof surface makes cleaning easy with just a damp cloth or a non-chlorine sanitizer
  • Perfect Fit for Your Apron: Measuring 5” x 8”, this compact organizer is slightly smaller than other models, making it ideal for bending or sitting while carrying in your server apron. It holds everything a waitress needs—a place for everything
  • What's Included: This server organizer comes with multiple open and zippered pockets to store money, receipts, tips, etc. Clear sleeves are perfect for keeping menus or special lists while serving. Available in a variety of colors, allowing you to express yourself even when in uniform

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.