Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PCHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk6 min

The Next Hurdle for AI Agents: Getting Websites to Let Them In

AI agents need a website’s permission and compatible access controls. The key is distinguishing search, real-time delegated tasks and model training—and understanding the trade-offs behind identity, blocking and payment.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

AI agents can reach a website only if its owner’s policy, security controls and business rules allow it. For site owners, the practical starting point is to distinguish search indexing from an agent fetching content for a person in real time and from crawling for model training. Those activities may come from the same bot, but they do not have the same purpose or necessarily deserve the same access.

How do I get AI agents to access websites?

There is no single switch that opens the web to every agent. Access is a negotiation: an agent needs useful, timely information for a user, while a website owner must protect content, infrastructure, visitors and the site’s business model.

As an Amazon Associate I earn from qualifying purchases.

For operators, start by deciding what activity to permit, then choose how that decision will be expressed and enforced. For users, a failed agent request may reflect the site’s policy or security checks; changing the agent’s wording does not override those controls.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Separate search, agent tasks and training

Cloudflare’s product vocabulary separates three behaviors: Search, which crawls and indexes content for later answers; Agent, which fetches or interacts with a site in real time for a person, including chat-fetch and browser-use activity; and Training, which gathers content for model training or fine-tuning. These are Cloudflare classifications, not a universal standard, and one bot may perform more than one behavior. Cloudflare’s AI bot controls let customers set different policies for these categories.

#1 Best Overall
ESP32-S3 4.2inch RLCD Development Board, 300 x 400, E-Paper-Like Screen, Supports Wi-Fi & BLE Dual-Mode Communication and AI Voice Interaction, Temperature & Humidity Monitoring, DIY
  • E-Paper-Like Display: 4.2-inch fully reflective RLCD screen (300×400 resolution), low power consumption, no backlight, faster refresh rate, providing an eye-friendly reading experience similar to an e-ink screen.
  • High-Performance Processor: Equipped with an ESP32-S3 dual-core processor (240MHz), supporting 2.4GHz Wi-Fi and Bluetooth 5 (LE) , built-in antenna, easily enabling IoT connectivity and AI applications.
  • Supports AI Voice Interaction: Integrated with an SHTC3 high-precision temperature and humidity sensor and a dual-microphone array (supporting noise reduction/echo cancellation), accurately achieving voice recognition and AI voice interaction, compatible with Xiaozhi AI and large models such as Doubao/DeepSeek/GPT.
  • Long Batt Life and Strong Expandability: Supports 186-50 Li Batt power + R-T-C backup Batt, Micro SD card slot for data storage, and reserved rich interfaces such as UART/I2C/GPIO for easy expansion of DIY projects. (Note: This version doesn't include 186-50 Li Batt)
  • Suitable for DIY Creative Projects and Prototype Development: It can be used to create electronic calendars, smart desktop ornaments, AI intelligent agents, etc., taking into account learning, development and practical application.

This distinction matters because a search crawler might help people discover a page, a task agent might need to read or interact with it on a user’s behalf, and a training crawler may use content for a different downstream purpose. A policy that treats all three as simply “AI traffic” gives owners less control and can block activity they would otherwise permit.

Express preferences, then enforce them

robots.txt is a public text file for communicating crawler preferences. Its common directives include User-agent, Disallow, Allow and Sitemap. The IETF formalized the Robots Exclusion Protocol in RFC 9309, but compliance remains voluntary: the file is not an access-control boundary. A site that needs to prevent access or admit only selected visitors must use server or application configuration, authentication, or security infrastructure as well. Cloudflare’s explanation of managed robots.txt and AI controls describes both the directives and this limitation.

Choose a policy that matches the site

Cloudflare documents options to block AI bots on all pages, block them on pages displaying ads, or allow them. Its documentation says that, beginning September 15, 2026, new domains will default to blocking bots classified as Agent or Training on pages displaying ads while leaving Search allowed. That is a Cloudflare-specific product default, not a rule for all websites or providers. See Cloudflare’s current policy documentation.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
GeeekPi EmbodiQ AI Starter Kit for Arduino UNO Q – 4GB RAM, 32GB eMMC, AI Agent HAT, Soil Moisture & Raindrop Sensors, Servo, Acrylic Mount – Natural Language Control
  • Talk to Your Hardware – Control sensors, servos, buzzers, and OLED displays using natural language. No complex coding required – just tell the AI what you want to do
  • Powerful AI Agent Onboard – Built around UNO Q with 4GB RAM and 32GB eMMC storage. Runs the EmbodiQ AI Agent HAT, enabling real-time reasoning and multi-step task execution with conditional logic
  • Versatile Sensor Suite – Includes soil moisture sensor, raindrop sensor, 9g servo motor, and OLED output. Perfect for smart gardening, weather stations, robotics, and automation projects
  • Flexible AI Provider Support – Works with OpenAI, OpenRouter, MiniMax, and any OpenAI-compatible API. Choose your preferred model and switch easily via the web-based interface or terminal REPL
  • Dual‑Architecture & Ready to Use – Python + Arduino co-processing ensures responsive performance. Comes with acrylic mounting bracket for tidy assembly – ideal for makers, educators, and AI enthusiasts

Why are websites blocking AI agents?

There is no single reason, and the available evidence does not establish a universal share of sites that block agents or an industry-wide success rate for agent access. The decision involves several competing interests:

  • Control and compensation: publishers may want to decide which uses of their content are allowed and whether access should be paid.
  • Infrastructure costs: repeated fetching consumes bandwidth and computing resources. Cloudflare said in 2026 that, in its own observed AI crawler traffic, over 50% was spent re-fetching pages that had not changed. That is Cloudflare platform data, not a universal estimate. Cloudflare’s 2026 announcement describes the figure.
  • Security and abuse: automated traffic can be difficult to distinguish from unwanted scraping or other abusive requests, especially when identification relies on a self-declared user-agent string.
  • Referral value and user utility: search visibility or a useful agent interaction may bring readers or customers, but a website may not consider that benefit equivalent to the value of content used without a visit.
  • Privacy: verification should establish that a bot or agent is legitimate without unnecessarily revealing the user’s identity or activity.

These are trade-offs, not a measured industry consensus. The controls and proposals available today let site owners weigh them differently.

How can a website tell a legitimate agent from a fake one?

A user-agent string is a label supplied with a request; by itself, it does not prove who sent that request. Cloudflare describes Web Bot Auth as a framework for cryptographic bot identity, intended to help publishers make decisions about identified bots and reduce spoofing. Its documented Pay Per Crawl setup uses an Ed25519 key pair, a hosted public-key directory, registration and HTTP Message Signatures. That is Cloudflare’s implementation path, and adoption across the web is not established. Cloudflare’s overview of its agentic-web work discusses Web Bot Auth.

Rank #3
ESP32-C6 2.16inch AMOLED Touch Screen Display Development Board, 480×480
  • High-Performance RISC-V Core and Tri-Mode Wireless Communication---Equipped with an ESP32-C6 32-bit RISC-V processor with a 160MHz clock speed, it features 512KB HP SRAM, 16KB LP SRAM, 320KB ROM, and an external 16MB Flash memory. It supports Wi-Fi 6, Bluetooth 5, and IEEE 802.15.4 (Zigbee 3.0 and Thread), and includes an onboard antenna for excellent RF performance.
  • 2.16-inch AMOLED High-Definition Touchscreen---Features a 2.16-inch capacitive AMOLED touchscreen with a 480×480 resolution and 16.7 million colors. It utilizes a CO5300 driver chip (QSPI interface) and a CST9220 touch chip (I2C interface), minimizing pin usage. AMOLED offers high contrast, wide viewing angles, rich colors, fast response, and a slim, low-power design.
  • AI Voice Dialogue and Sensing Functionality---Designed specifically for the development and functional verification of AI voice dialogue intelligent agent prototypes, it features onboard dual microphones and an audio codec chip, supporting Xiaozhi AI and DeepSeek. The QMI8658 six-axis IMU (3-axis accelerometer, 3-axis gyroscope) supports motion posture detection and step counting. The PCF85063 RTC connects to the batt via the AXP2101 for uninterrupted power supply. (Batt is not included)
  • Power Management and Abundant Interfaces---The AXP2101 power management system supports multiple output voltages, charging management, batt management, and lifespan optimization. It features an onboard 3.7V MX1.25 lithium batt charging/discharging interface. It includes a Type-C interface and programmable side buttons for KEY and BOOT. One I2C, one UART, and one USB pad are provided for easy external connection and debugging. (Batt is not included)
  • CNC Metal Chassis and Development Scenarios---The CNC unibody metal casing is robust and provides excellent heat dissipation. Suitable for AI voice dialogue intelligent agent prototype development and functional verification scenarios.

Private Access Control Tokens (PACT), announced by Cloudflare with Mozilla, Google, Microsoft and Shopify, address another part of the problem: one site can vouch anonymously for a legitimate agent so it can present a token at another site. The described design does not mean the token reveals the user’s identity, nor does it mean every destination site accepts it. It is an approach to reducing friction while preserving privacy, not a universal admission pass. Cloudflare’s announcement describes PACT.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Can websites charge AI crawlers?

They can choose to charge, but no standard price or broadly adopted charging system is established by the sources here. Cloudflare’s July 1, 2025 announcement described Pay Per Crawl as a private beta: a crawler could receive an HTTP 402 Payment Required response with pricing, and a publisher could choose to allow, charge or block it. Cloudflare said it acted as Merchant of Record in that flow. This was a vendor-specific beta description, not evidence that paid crawling is generally available. Read Cloudflare’s Pay Per Crawl announcement.

Cloudflare’s 2026 announcement described a direction from payment per crawl toward Pay Per Use, where compensation would depend on content creating value rather than simply being fetched. Cloudflare said Ceramic.ai would pay when opted-in publisher content appeared in AI search results and return queries, citations and ranking; it said You.com would let agents pay on demand for premium content. The announcement also named beehiiv among platform collaborators on creator access controls. These are descriptions from Cloudflare, not evidence of broad adoption or established terms across the market. See the 2026 announcement.

Rank #4
ESP32-S3 1.28inch Double Eye Round LCD AIoT Development Board, Dual 1.28inch IPS Displays, Dual-Core 240MHz Processor, Supports Wi-Fi & Bluetooth 5 & AI Speech Interaction, Onboard DIY Connectors
  • This is an AIoT microcontroller development board based on ESP32-S3 with double eye LCD displays, designed for makers and electronics enthusiasts, supporting 2.4GHz Wi-Fi and Bluetooth BLE 5.
  • It integrates high-capacity Flash and PSRAM, onboard Dual 1.28inch LCD 240 × 240 resolution displays which can smoothly run GUI programs such as LVGL. Additionally, it also integrates a microphone, speaker header, Lithium battery recharge circuit, and reserves a TF card slot and DIY expansion connectors.
  • It is suitable for the quick development based on ESP32-S3 such as HMI (Human-Machine Interface), double eye robotic agents, and AI voice-interactive toys. Whether you want to build a robot that can "wink", create an intelligent IoT Interface, design touch-controlled games, or develop futuristic wearable devices, this board is an ideal choice.
  • Onboard ES8311 audio codec and ES7210 audio ADC chip, equipped with standard microphone and speaker header, Supports AI speech interaction. Allows access to online large model platforms such as ChatGPT, DeepSeek, Doubao, etc.
  • Onboard TF card slot for convenient local storage expansion, and supports the storing and reading of data, images, audio files, and more. Onboard Lithium battery recharge management module, reserved 3.7V Lithium battery power supply header. Onboard SH1.0 14PIN connector, adapting UART, I2C and some IO interfaces, for easy DIY customization.

Arcep’s January 2026 report also identifies Akamai working with TollBit and Skyfire on content monetization. It surveys proposals including ai.txt, W3C text-and-data-mining work and IETF efforts to signal intended uses such as indexing, training, generation and search. These are competing initiatives and proposals, not a settled consensus. Arcep’s report on generative AI and the open internet provides broader context.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What other standards and tools are taking shape?

Access is not only about whether a bot is admitted. Different projects address how agents read, interact with, identify themselves to, or pay websites. Cloudflare points to Markdown for Agents for more efficient reading, WebMCP for native interaction, and x402 for direct payments. Arcep’s report describes MCP as a way to standardize API calls, execution contexts and access-right management, and surveys other interoperability protocols. This is an evolving collection of approaches, not one integrated standard that guarantees access.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

For a site operator evaluating a control or proposal, compare the parts that affect the actual decision:

Best Value
seeed studio reSpeaker XVF3800 4-Mic Array with XIAO ESP32S3, Bare Board
  • Built for Custom Integration: Keep control of the enclosure, mounting and final device layout. The open-board format fits robots, kiosks, custom voice devices and embedded prototypes where flexible mechanical integration matters.
  • Onboard Voice Processing: XVF3800 performs AEC, beamforming, de-reverberation, DoA, VAD, AGC and noise suppression before audio reaches your application, helping reduce downstream audio preprocessing.
  • 360° Far-Field Voice Capture: Four MEMS microphones in a circular array support speech pickup from different directions at distances up to 5 m, so users do not need to speak toward one fixed microphone position.
  • XIAO ESP32S3 for Embedded Voice: The pre-soldered XIAO adds Wi-Fi, Bluetooth Low Energy and MCU-side control for connected voice interfaces, local wake-word projects and custom embedded applications.
  • Firmware Options: Ships with Standard I2S firmware for XIAO ESP32S3 and is not a USB audio device by default; switch to USB firmware for host audio or use dedicated 48 kHz HA I2S firmware for Home Assistant and ESPHome Voice; configurations are separate.
  • Purpose: Does it govern search, real-time delegated tasks, training, or more than one activity?
  • Enforcement: Is it a voluntary signal such as robots.txt, or is it backed by technical access controls?
  • Identity and delegation: Can the site verify the bot and establish that it is acting for a user without relying only on a self-reported label?
  • Friction and privacy: What must the user or agent do, and what user information is exposed?
  • Operating cost and freshness: Does the mechanism reduce unnecessary repeat fetching while allowing content to be updated efficiently?
  • Payment basis: Is compensation tied to a crawl, or to downstream use such as a citation or search result?

What the current numbers do—and do not—show

Cloudflare reported in 2025 that 37% of the top 10,000 domains it examined had a robots.txt file. Among robots.txt files Cloudflare found among top domains, 7.8% disallowed GPTBot and 5.6% included Google-Extended. These figures describe Cloudflare’s examination and should not be read as the share of all websites blocking AI agents; the named crawler directives also do not measure real-time agent access. Cloudflare’s 2025 post explains the scope of these measurements.

The evidence cited here establishes specific products, proposals and provider-reported figures, but not how widely Web Bot Auth, PACT or paid-crawl systems are deployed. It also does not settle legal questions about scraping, copyright or terms of service, which depend on applicable facts and jurisdiction.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.