Safe Reported AI & LLM Bots

GrokBot (xAI)

Operated by xAI

Quick Facts

User-Agent:
GrokBot
Category:
AI & LLM Bots
Operator:
xAI
Safety:
Safe
Blocking Impact:
Low - No SEO ranking impact
SEO Impact Score:
2/10
Official docs:
None published by xAI

Reported, not operator documented

xAI has not published a crawler page that names GrokBot. It is listed here because a credible public source does: Trakkr AI Crawler Observatory. xAI Grok crawler token, listed by public registries. xAI publishes no crawler documentation.

What that means for you: the robots.txt rule on this page is the best available spelling, and a well-behaved crawler using this string will honour it, but there is no vendor statement of purpose, crawl rate or robots.txt compliance to rely on. Treat a matching request in your logs as a detection clue, not proof of who sent it, and combine the rule with a firewall rule if the traffic matters to you. If the operator publishes documentation, this profile moves to Official docs.

What is GrokBot?

GrokBot is a user-agent name that public crawler registries link to xAI's Grok assistant. xAI has not published a page that documents it, so its exact purpose is not confirmed.

Registries describe GrokBot as fetching pages for Grok answers. xAI documents a web search tool that lets Grok "search the web in real-time and browse web pages", but that page does not name the user agent the tool sends. Two other names cause confusion:
• xAI-SearchBot is a second Reported xAI name, seen as Mozilla/5.0 (compatible; xAI-SearchBot/1.0; +https://x.ai).
• Grok Bot (two words) is a different thing: an AI agent product xAI launched on 11 August 2026. It browses websites in a cloud browser on behalf of a user, so robots.txt does not govern it.

What happens if you block GrokBot?

✅ No SEO Impact - Blocking GrokBot does not affect your rankings in Google, Bing, or any other search engine. GrokBot is an AI crawler name, not a search indexer. You can block it with User-agent: GrokBot / Disallow: / without any SEO penalty. The trade-off is visibility inside Grok answers, if xAI does use this name.
Generally safe to allow; provides legitimate crawling value.

Is GrokBot safe?

Yes, GrokBot is safe to allow: there are no credible reports of it crawling abusively, and it is rated Safe in this directory. The caveat is proof, not behaviour. xAI has not published a crawler page, user-agent string or IP ranges for it, so anyone can send the name and robots.txt rules for it are best effort. If you want Grok to be able to cite you, allow it; if you do not, block it in robots.txt and at the server. For monitoring, see how do I monitor AI bot traffic to my website?

GrokBot user agent: is there an official xAI crawler string?

No. xAI has not published an official crawler user agent. The strings in circulation come from public registries: GrokBot, and Mozilla/5.0 (compatible; xAI-SearchBot/1.0; +https://x.ai) for xAI-SearchBot. Name both in robots.txt. The Grok crawler is not the same as Grok Bot, xAI's browsing agent, which robots.txt does not control.

User-agent: GrokBot
User-agent: xAI-SearchBot
Allow: /

GrokBot vs xAI-SearchBot vs the Grok Bot agent

xAI-related names compared
NameWhat it isEvidence tierDoes robots.txt apply?
GrokBotReported crawler name linked to Grok answersReportedYes, if the client honours it
xAI-SearchBotReported search crawler, xAI-SearchBot/1.0ReportedYes, if the client honours it
Grok Bot (agent)AI teammate that browses websites in a cloud browser for a userDocumented by xAINo, it acts like a person
TwitterbotX link previews, not GrokOfficialYes
OAI-SearchBotOpenAI's documented equivalent, for comparisonOfficialYes

Because neither xAI crawler name is documented, blocking them by name is a preference that compliant clients will follow, not a guarantee. For enforcement, see spoofed AI crawler user agents.

What is Grok Bot, and can it visit my site?

Grok Bot is an AI agent product that xAI launched on 11 August 2026 (xAI launch post, 11 August 2026). According to the xAI Grok Bot documentation, each Bot works on "a persistent cloud computer with a browser, filesystem, and terminal" and "takes on multi-step work across apps and websites". So yes, it can visit your site, but as a browser acting for a person, not as a crawler.

  • robots.txt does not govern it. Like ChatGPT Agent, it opens pages the way a person would, so a User-agent: GrokBot rule does not stop it.
  • It comes from shared static IPs. The xAI Grok Bot security page says hosted computers use "shared static egress IP addresses", shared across all Grok Bot customers. xAI gives the ranges to customers through its account team; they are not published.
  • It stops at human checks. xAI tells users to complete passwords, two-factor codes and CAPTCHAs themselves, and notes that some services block it because they "flag datacenter IP addresses".

Practical meaning: if you want agents like Grok Bot to complete bookings, sign-ups or purchases on your site, avoid putting a CAPTCHA or firewall challenge on those flows. If you want to stop them, use a firewall or bot-management rule, not robots.txt. The full comparison is in Grok Bot vs GrokBot; test a page with the AI Agent Readiness Check, or read can you block Grok Bot?.

GrokBot use cases

Use cases: what to do with this bot
If you are...Recommended setting and why
You want to appear in Grok answersAllow GrokBot and xAI-SearchBot, and keep public pages server-rendered.
You block AI but want X link previewsBlock the xAI tokens; X link previews use Twitterbot, a separate token.
You only allow documented botsBlock both; neither has an operator specification yet.
User-agent: GrokBot
User-agent: xAI-SearchBot
Disallow: /

User-agent: Twitterbot
Allow: /

Confirm with a free AI crawler checker scan and read the Grok crawler user agent guide and the xAI operator page. Seeing these names in your logs? Paste them into the Grok log checker. Want Grok to cite you? Read how to get cited by Grok.

Test xAI crawler access

How to block GrokBot with robots.txt

<code>User-agent: GrokBot</code> - Matching is case-insensitive. Robots.txt is fetched from the root of each subdomain separately.

Block completely (robots.txt)
User-agent: GrokBot Disallow: /
Allow all (robots.txt)
User-agent: GrokBot Allow: /
Block private only (robots.txt)
User-agent: GrokBot Disallow: /private/ Disallow: /api/ Disallow: /admin/ Allow: /
Nginx server block
# Nginx: Hard-block GrokBot if ($http_user_agent ~* "GrokBot") { return 403 "Bot blocked"; }
Apache .htaccess
# Apache: Hard-block GrokBot SetEnvIfNoCase User-Agent "GrokBot" bad_bot Order Allow,Deny Allow from all Deny from env=bad_bot
Meta robots tag
<meta name="robots" content="noindex, nofollow">
X-Robots-Tag header
X-Robots-Tag: noindex, nofollow

Is GrokBot safe to allow?

GrokBot is rated Safe in this directory: there are no credible public reports of it crawling abusively, and allowing it is the only way Grok can read your pages if it does use this name. The caveat is evidence, not behaviour. xAI has not documented GrokBot, publishes no IP ranges for it, and does not state that it reads robots.txt, so you cannot prove that a request carrying the name came from xAI. Allow it if you want to be cited in Grok, block it if you do not, and treat log hits as a clue rather than proof.
There is nothing to verify against yet: xAI publishes no IP ranges or reverse-DNS pattern for GrokBot. Rate-limit unusual volume instead of trusting the name.

What does GrokBot do?

As reported by public registries; xAI has not confirmed any of this.

  • Reported to fetch pages that Grok uses in its answers
  • May supply web results for Grok search and DeepSearch
  • Purpose, crawl rate and robots.txt behaviour are not documented by xAI
  • Not the same as Grok Bot, xAI's browsing agent, which robots.txt does not control
  • Not used for X (Twitter) link previews, which use Twitterbot

Frequently Asked Questions

Is GrokBot safe?
GrokBot is rated Safe in this directory: there are no credible public reports of it crawling abusively, and allowing it is the only way Grok can read your pages if it does use this name. The caveat is evidence, not behaviour. xAI has not documented GrokBot, publishes no IP ranges for it, and does not state that it reads robots.txt, so you cannot prove that a request carrying the name came from xAI. Allow it if you want to be cited in Grok, block it if you do not, and treat log hits as a clue rather than proof.
What is the official GrokBot user agent?
There is no official one. xAI has not published a user-agent string for any crawler. GrokBot is the name public registries report, so use it in robots.txt as the best available match. A second reported xAI name, xAI-SearchBot, should get its own rule.
Is GrokBot the same as Grok Bot?
No. GrokBot is a reported crawler name. Grok Bot is an AI agent product xAI launched on 11 August 2026: it signs into tools and browses websites in a cloud browser on a user's behalf. Robots.txt rules for GrokBot do not apply to it.
How do I block GrokBot in robots.txt?
Add a group naming both reported xAI tokens:
User-agent: GrokBot
User-agent: xAI-SearchBot
Disallow: /

A client that honours robots.txt will stop. Because xAI has not documented either name, add a firewall or CDN rule if you need enforcement.
Will blocking GrokBot hurt my SEO?
No. GrokBot has no role in Google or Bing rankings. The only cost is that Grok may not be able to read or cite your pages, if it uses this name.
Does GrokBot respect robots.txt?
xAI has not said. There is no xAI statement about robots.txt for GrokBot or xAI-SearchBot, so a robots.txt rule is a request that a well-behaved client will follow, not a guarantee.
How do I see if GrokBot visits my site?
Search your access logs: grep -iE "GrokBot|xAI-SearchBot" /var/log/nginx/access.log. A match shows that something used the name. xAI publishes no IP ranges for it, so you cannot confirm the sender.