Tool

AI Crawler Access Matrix

Fetch any URL in parallel as ten AI crawlers and a default browser. See exactly which agents your site allows, blocks, redirects, challenges, or serves a different body to. Real HTTP fetches, real verdicts.

Tool

https://klarna.com10 crawlers tested5 allowed5 different

agentverdictstatusbyteslatencysimilaritynote

GPTBotallowed · diff200781,811692ms0.00OpenAI training crawler

ChatGPT-Userallowed · diff200781,8571052ms0.00ChatGPT browsing for a user

ClaudeBotallowed · diff200781,797473ms0.00Anthropic crawler

Claude-Userallowed · diff200781,824456ms0.00Claude browsing for a user

PerplexityBotallowed · diff200781,828664ms0.00Perplexity citation crawler

Google-Extendedallowed200806,7791107ms1.00Google AI training opt-out crawler

Googlebotallowed200806,8961091ms1.00Google search index crawler

Bingbotallowed200806,8691123ms1.00Bing search index crawler

CCBotallowed200806,6781369ms1.00Common Crawl, feeds many AI training datasets

Browserallowed200806,9331074ms1.00Vanilla desktop Chrome, control row

What each row means

GPTBotallowed · diffAllowed (2xx) but the body differs substantially from the browser baseline. Possible cloaking, agent-aware rendering, or paywall variant.
ChatGPT-Userallowed · diffAllowed (2xx) but the body differs substantially from the browser baseline. Possible cloaking, agent-aware rendering, or paywall variant.
ClaudeBotallowed · diffAllowed (2xx) but the body differs substantially from the browser baseline. Possible cloaking, agent-aware rendering, or paywall variant.
Claude-Userallowed · diffAllowed (2xx) but the body differs substantially from the browser baseline. Possible cloaking, agent-aware rendering, or paywall variant.
PerplexityBotallowed · diffAllowed (2xx) but the body differs substantially from the browser baseline. Possible cloaking, agent-aware rendering, or paywall variant.
Google-ExtendedallowedAllowed (2xx) and the body matches the browser baseline.
GooglebotallowedAllowed (2xx) and the body matches the browser baseline.
BingbotallowedAllowed (2xx) and the body matches the browser baseline.
CCBotallowedAllowed (2xx) and the body matches the browser baseline.
BrowserallowedBaseline browser response, used as the comparison anchor.

Result summary

Copyable summary for sharing with infra owners or filing an issue with your CDN.

AgentSpeed AI Crawler Access Matrix
Target: https://klarna.com
Run: 2026-07-27T12:16:29.543Z

Per-agent verdict:
  - GPTBot           allowed · diff status=200 sim=0.00 bytes=781811
  - ChatGPT-User     allowed · diff status=200 sim=0.00 bytes=781857
  - ClaudeBot        allowed · diff status=200 sim=0.00 bytes=781797
  - Claude-User      allowed · diff status=200 sim=0.00 bytes=781824
  - PerplexityBot    allowed · diff status=200 sim=0.00 bytes=781828
  - Google-Extended  allowed        status=200 sim=1.00 bytes=806779
  - Googlebot        allowed        status=200 sim=1.00 bytes=806896
  - Bingbot          allowed        status=200 sim=1.00 bytes=806869
  - CCBot            allowed        status=200 sim=1.00 bytes=806678
  - Browser          allowed        status=200 sim=1.00 bytes=806933

Run again at: https://agentspeed.com/tools/ai-crawler-access-matrix

Watch this URL — get alerted when this changes

Turn this one-off check into a scheduled watch. We re-run it, diff the result, and alert you on a regression through the same channels as your agent alerts. Watches are a paid feature.

Manage watches at /watches. You’ll be asked to sign in if you haven’t already.

Examples

Click an example to run the tool with pre-filled inputs.

Why this matters for AI agents

Most agent-readiness problems show up here first. A site that blocks GPTBot at the WAF, redirects ChatGPT-User to /login, or serves a different body to PerplexityBot than to a browser will never show up in agent answers, and the only way to find out is to actually fetch as those agents.

This is the live equivalent of the journey.primary_probe check on a public scan, run on demand against any URL.

Common fixes

WAF blocks GPTBot

In Cloudflare bot management, allow GPTBot, ClaudeBot, and PerplexityBot explicitly. Their UA strings are documented and IPs are fixed.

Different body for bots than browser

If similarity drops below 0.80 between an agent and the Browser baseline, your CMS or edge layer is likely rendering a different variant. Audit any UA-conditional rendering rules, since agents often get the worst one.

Redirected to /login

Render server-side preview content for unauthenticated requests on landing pages. Agents cannot authenticate; they cite the auth wall.

Cloudflare challenge fires

Add the bot to Cloudflare’s allowed-bots list, or whitelist the published IP ranges for OpenAI, Anthropic, Perplexity.

Different canonical per UA

Canonical drift confuses agent dedupe. Audit any UA-conditional canonical rules; the canonical should be identical across all UAs.

Linked rubric checks

journey.primary_probe
End-to-end agent probe; runs the same multi-UA fetch under a public scan.
journey.primary_probe
robots_txt.allows_known_agents
Whether each AI crawler is explicitly allowed (or at least not disallowed by wildcard).
robots_txt.allows_known_agents
reachability.status
Whether the page returns 2xx to AgentSpeedBot from a public client.
reachability.status

FAQ

Is this the same as the Agent UA tester?

Same backend pipeline, broader UA list. The UA tester runs 6 UAs to focus on cloaking detection. The Crawler Access Matrix runs 10, adding Claude-User, Google-Extended, Googlebot, Bingbot, and Common Crawl, to give a full picture of who can and cannot reach your site.

Why include Googlebot and Bingbot?

Because misconfigured WAFs frequently block them too. If your search visibility tanks, the matrix tells you whether the cause is your robots.txt, your bot manager, or your CDN, without you having to spelunk through logs.

What does "allowed-different" mean?

The agent got a 200 OK but the body content differs from the browser baseline by more than 20% (Jaccard similarity < 0.80). This is usually cloaking, paywall variants, or "render lite for bots" rules. Agents see worse content than humans.

Do you store the responses?

No. Each run is fetched live and discarded. The result page is rendered server-side; nothing persists.

How do redirects show up?

fetchWithHostPolicy follows up to 5 hops. The "redirected" column shows whether any redirect happened; the final URL column shows where it ended up. SSRF-protected, so every redirect is re-validated against the host policy.

Run a full agent-readiness scan

Full scan

Score the entire site against 30 agent-readiness checks across discoverability, readability, structured data, actionability, and performance.

Get the full report for klarna.com →