ChatGPT-Commerce
ChatGPT-Commerce is a recognized web agent operated by OpenAI. The exact behavior depends on context, watch the request pattern for a few hours before making a decision.
If volume is significant, rate-limit first and observe. Outright blocks should be reserved for agents that misbehave repeatedly.
See ChatGPT-Commerce on your own site
Match the User-Agent header on incoming requests against the pattern below.
regex
For higher confidence, also verify the source IP against the operator's published ranges. UA strings can be spoofed; IP ownership is harder to fake.
Renders JavaScript
No
IP verification
Published IP ranges
Crawl frequency
Variable
Honors robots.txt
Yes
Honors Crawl-delay
Varies
OpenAI runs 17 bots in total. Each one is a separate user-agent so you can allow or block them independently.
Agentic Browser
8Live-Fetch AI
2Agentic Commerce
2- OpenAI-Commerce
- ChatGPT-CommerceYou are here
AI Search Index
1AI Coding Tool
1Link Unfurler
1Should I let ChatGPT-Commerce through?
Watch your logs for a week first. Observe before acting. Volume and request pattern matter more than the user-agent string.
Does blocking ChatGPT-Commerce affect my Google rankings?
No. ChatGPT-Commerce is not a search-engine crawler. Your ranking on Google or Bing is unaffected by what you do here.
How do I confirm a request is really from ChatGPT-Commerce?
Two checks. The User-Agent header should match a known ChatGPT-Commerce string, and the request's source IP should fall inside OpenAI's published ranges. The User-Agent alone is trivially spoofable, so the IP check is what gives you confidence. OpenAI publishes the ranges so you can validate at the CDN or edge.
What's the best way to understand what ChatGPT-Commerce is doing on my site?
Look at which URLs it hits, how often, and what time of day. The request pattern usually tells you whether it's building an index, watching for a specific change, or trying to pull data in bulk. The User-Agent name alone rarely tells the full story.
How is ChatGPT-Commerce different from OpenAI's other bots?
OpenAI splits work across multiple user-agents so site owners can decide on each one independently. Training crawlers, live-fetch agents, search indexers, and agentic browsers each get their own name. Worth scanning the rest of the OpenAI family above to see which ones actually matter for your site.
What's the cleanest way to control ChatGPT-Commerce?
Two layers. Robots.txt for the polite crawlers that read it, and rules at your CDN or edge for the ones that don't. Rankly's Agent Experience handles both from a single config, so you can allow, block, rate-limit, or serve a stripped-down version per bot. Agent Analytics handles the observation half so you know which bots are actually worth a rule.
Verify everything above against the operator's own documentation.