Pay-Per-Crawl — Definition
Pay-Per-Crawl
TL;DR: Pay-per-crawl is Cloudflare’s mechanism that lets a site charge AI crawlers for access, using the long-dormant HTTP
402 Payment Requiredstatus code andcrawler-priceheaders. Instead of “block or allow,” it adds a third option: “allow, for a fee.”
What it means
Pay-per-crawl, launched by Cloudflare in July 2025, reframes AI bot access as a transaction. Rather than only blocking or allowing a crawler, a site can respond to an AI crawler’s request with HTTP 402 Payment Required and a stated price (via a crawler-price header); crawlers willing to pay signal so with a crawler-max-price header, and the access clears. It revives a status code that was reserved in the original HTTP spec but never widely used — repurposed for the machine-to-machine economy of AI crawling.
Why it matters
Pay-per-crawl signals where AI bot access is heading: away from a per-site config problem and toward an infrastructure-layer marketplace. Cloudflare fronts a large share of the web and began blocking AI crawlers by default in 2025, which puts it in a position to broker access at scale. For publishers, it offers a way to be compensated for training crawls that previously took content for free. For site owners generally, it underscores that the real control point is increasingly the CDN, not a text file in your repo.
How it works / examples
The flow is roughly:
- An AI crawler requests a page behind Cloudflare.
- The site (via Cloudflare) returns
402 Payment Requiredwith a price. - A crawler configured to pay (within its
crawler-max-price) completes the transaction and receives the content; one that isn’t gets blocked.
This sits at the firewall/edge layer (see glossary/waf) — the same layer that does enforcement — which is why it can charge non-compliant requests that robots.txt could never have stopped.
Related
- glossary/waf — the enforcement layer pay-per-crawl builds on
- glossary/ai-crawler — the crawler types being charged
- seo/ai-crawler-access — why edge-layer control beats robots.txt