Title: Verify AI Agents & Block Fake AI Bots | AxioRank Author: kamenzy Published: 10. juli 2026 Last modified: 19. juli 2026 --- Søk gjennom innstikk ![](https://ps.w.org/axiorank-agent-verification/assets/banner-772x250.png?rev=3613346) ![](https://ps.w.org/axiorank-agent-verification/assets/icon.svg?rev=3602714) # Verify AI Agents & Block Fake AI Bots | AxioRank Av [kamenzy](https://profiles.wordpress.org/kamenzy/) [Last ned](https://downloads.wordpress.org/plugin/axiorank-agent-verification.0.4.0.zip) * [Detaljar](https://nn.wordpress.org/plugins/axiorank-agent-verification/#description) * [Omtalar](https://nn.wordpress.org/plugins/axiorank-agent-verification/#reviews) * [Installasjon](https://nn.wordpress.org/plugins/axiorank-agent-verification/#installation) * [Utvikling](https://nn.wordpress.org/plugins/axiorank-agent-verification/#developers) [Hjelp](https://wordpress.org/support/plugin/axiorank-agent-verification/) ## Skildring Verify that ChatGPT, Claude, Perplexity, and other AI agents are genuine before serving premium content or executing AI actions. AxioRank checks each automated visitor’s cryptographic signature, so you know whether an AI agent is the real thing or a fake AI bot wearing its name. A new kind of visitor is showing up on WordPress sites. Alongside people and the familiar search engine crawlers, there are now AI agents and bots like GPTBot, ClaudeBot, and PerplexityBot: automated tools that use the web on someone’s behalf. They do not just read your public pages. They log in, run searches, submit forms, and talk to the behind-the-scenes connections that power your plugins, themes, and mobile apps. Some are genuine. Some are scrapers. And some are impostors: a script that simply typed «GPTBot» into a user agent header, because anyone can. Here is the problem: WordPress has no built-in way to tell who these automated visitors really are. The traditional method is to look at the «user agent», the name a visitor gives for itself. That name is easy to fake. Anyone can write a script that claims to be ChatGPT, and anyone can write a bot that claims to be an ordinary Chrome browser. AxioRank gives you a trustworthy answer. It uses a new open web standard called Web Bot Auth, in which reputable AI companies cryptographically sign the requests their agents make. Think of a signature as a passport rather than a name tag: it can be checked, and it cannot be forged. The plugin checks those signatures through the [AxioRank](https://axiorank.com) service, so for every automated visit to the working parts of your site you can see whether the visitor is genuine, unknown, or pretending to be something it is not, and block the fakes. #### Block fake AI bots and scrapers Fake AI crawlers and scrapers are checked too. When a bot-like request reaches WordPress on a cache miss, AxioRank matches it against the known-agent directory (GPTBot, ClaudeBot, PerplexityBot, and more) and verifies its signature, and in Enforce mode a spoofed or unwanted agent gets a clean access-denied response instead of getting through. One honest note: pages served straight from a full-page cache or a CDN never reach WordPress, so the plugin cannot see those. To challenge crawlers on fully cached pages, verify at the edge, in front of the cache. Everything that reaches PHP, your dynamic pages, login, search, forms, and REST API, is covered. #### Running a store? Stop AI agent checkout fraud If you sell with WooCommerce, AI shopping agents are already adding to cart and checking out. Pair this plugin with the companion [AxioRank for WooCommerce](https://axiorank.com/inbound-verification/woocommerce) extension to verify AI agents at add to cart and checkout, block unverified agents before an order is created (the moment card testing and account takeover happen), and see at a glance which orders came from a verified agent, an unverified one, or an impostor. #### How it works, in plain terms 1. You install the plugin and connect it to your AxioRank account with a site key, a long code that identifies your site. 2. The plugin quietly watches the sensitive parts of your site: the login page, search, and the technical doorways that apps and integrations use to talk to WordPress ( the REST API, admin-ajax, and XML-RPC). 3. When a request looks automated, because it carries an agent signature or a bot- style user agent, the plugin asks AxioRank one question: who is this, and are they really who they claim to be? 4. In Monitor mode, which is the default, the answer is simply recorded. Nothing is blocked. Your AxioRank dashboard builds up a picture of which AI agents visit your site, what they touch, and which of them are verified, unknown, or impostors. 5. When you have watched for a while and feel confident, you flip one switch to Enforce mode. From then on, agents that fail verification or break your rules receive a standard «access denied» response instead of getting through. #### What you get * A clear picture of the AI agents using your site, based on verifiable identity instead of easily faked names. * Monitor mode by default: watch first, decide later. Nothing is blocked until you say so. * Enforce mode when you are ready: verified agents pass, impostors and unwanted agents are turned away. * A dedicated AxioRank menu in your WordPress admin with four tabs: an Overview, a live Activity log, a Rules manager, and Settings. * A per-request activity log that shows each automated visit, its verdict, its risk score, the reason it was flagged, and the endpoint it reached, all without leaving WordPress. * Rules you can set from WordPress: allow, challenge, or block a specific agent, a whole category, a verification status, or a risk threshold. One click on the activity log turns any agent into an allow or block rule. * Simple scope controls: tick boxes decide which parts of the site are covered, and the recommended set is preselected. * A branded, customizable page for blocked requests, with your own message. * A dashboard glance widget, a Site Health check, and WP-CLI commands (wp axiorank status, test, activity, posture) for people who like the command line. * A safety-first design: if AxioRank is ever slow or unreachable, your site keeps serving visitors as if the plugin were not there. #### Manage agents right from WordPress Version 0.3.0 turns the plugin from a quiet monitor into a control room. The new Activity tab lists the most recent automated visits with the details you need to make a decision: who the agent claims to be, whether that claim checks out, a risk score, the specific signal that raised a flag, and the exact endpoint that was hit. Next to each one, a single click creates an allow or block rule. The new Rules tab manages the real rules on your AxioRank surface, so you do not need to open the dashboard for everyday decisions. Set the surface to monitor or enforce, then add rules that allow, challenge, or block by agent, by category (such as scrapers or training crawlers), by verification status, or by risk. Rule management uses a site key with the management permission, which the keys AxioRank issues already include. #### What this plugin does not do Honesty helps here, so two things up front. First, this is not a general firewall, malware scanner, or comment spam filter. It does one job well: verifying the identity of automated visitors on the parts of your site that do real work. Second, pages served straight from a full-page cache or a CDN never reach WordPress, so the plugin cannot see or block those. It stops fake AI bots and scrapers that reach the origin: a cache miss, your dynamic pages, login, search, form handlers, and app connections, which is where logins, form submissions, and data access actually happen. To police crawlers on fully cached pages too, verify at the edge, in front of the cache. #### What information is sent to AxioRank? The plugin is a small connector for the AxioRank service, so this deserves a plain answer. For each request the plugin decides to check, it sends AxioRank the basics needed to verify identity: the address that was requested, the request type (such as GET or POST), the visitor’s stated user agent, the visitor’s IP address, and the technical headers that carry the agent’s signature. It never sends cookies, passwords, login credentials, or the contents of forms and posts. Ordinary logged-out page reads by people are not checked at all. Verification is provided by [AxioRank](https://axiorank.com). See the [terms of service](https://axiorank.com/terms) and the [privacy policy](https://axiorank.com/privacy). #### Requirements You need an AxioRank account and a site key for your website (it starts with axr_site_). The free plan is enough to get started. ## Skjermbilete [⌊The Overview tab: setup progress, connection status, and a summary of recent agent activity.⌉⌊The Overview tab: setup progress, connection status, and a summary of recent agent activity.⌉[ The Overview tab: setup progress, connection status, and a summary of recent agent activity. [⌊The Activity tab: a per-request log of automated visits with verdict, risk score, the signal that was flagged, and one-click allow or block.⌉⌊The Activity tab: a per-request log of automated visits with verdict, risk score, the signal that was flagged, and one-click allow or block.⌉[ The Activity tab: a per-request log of automated visits with verdict, risk score, the signal that was flagged, and one-click allow or block. [⌊The Rules tab: allow, challenge, or block agents by name, category, verification status, or risk, managed right from WordPress.⌉⌊The Rules tab: allow, challenge, or block agents by name, category, verification status, or risk, managed right from WordPress.⌉[ The Rules tab: allow, challenge, or block agents by name, category, verification status, or risk, managed right from WordPress. [⌊An animated walkthrough of the setup, from pasting a site key to switching on Enforce.⌉⌊An animated walkthrough of the setup, from pasting a site key to switching on Enforce.⌉[ An animated walkthrough of the setup, from pasting a site key to switching on Enforce. ## Installasjon 1. Install the plugin from your Plugins screen and activate it. 2. Create an account at [axiorank.com](https://axiorank.com) if you do not have one. In AxioRank, register your site as a website surface and copy the site key it gives you. The key starts with axr_site_. 3. Back in WordPress, open the new AxioRank menu, go to the Settings tab, paste the site key, and save. If you prefer to keep keys out of the database, you can instead add this line to wp-config.php: define( «AXIORANK_SITE_KEY», «axr_site_…» ); 4. Press «Test connection» to confirm everything is wired up. 5. Leave the mode on Monitor for a few days. Watch the Activity tab, and the fuller history in your AxioRank dashboard, to see who is actually visiting. 6. When you are comfortable with what you see, add any rules you want on the Rules tab, then switch to Enforce. ## Vanlege spm. ### What exactly is an AI agent? Software that uses the web on a person’s or a company’s behalf. Examples include the assistants behind ChatGPT and Claude fetching a page to answer a question, shopping assistants comparing products, and automation tools that fill in forms. Some are welcome guests, some are noisy scrapers, and some are impostors dressed up as the welcome ones. This plugin helps you tell the difference. ### Will this block real people visiting my site? No. Ordinary page views by people are never even checked. The plugin looks at requests that appear automated, plus traffic to the sensitive endpoints you selected, and it blocks nothing until you switch from Monitor to Enforce. Even in Enforce mode, blocking is aimed at agents that fail verification or break your rules. A real person going about their day is simply allowed through. ### Will it hurt my SEO or block Google? No. Search engines spend nearly all of their time reading your public pages, which are usually served from cache and never touch this plugin. Nothing at all is blocked in Monitor mode. In Enforce mode, verified crawlers that follow your rules are allowed; blocking targets agents that fail verification or pretend to be something they are not. ### Do I need to be technical to set this up? No. Setup is copy and paste: create an AxioRank account, copy the site key, paste it into the settings page, and press «Test connection». The recommended protection scope is preselected, and the plugin starts in the watch-only Monitor mode. ### Does it work with caching plugins? Yes, happily. Cached pages are served exactly as before. The plugin focuses on the dynamic parts of the site that caching does not cover, so the two do complementary jobs. ### Will it slow down my site? You should not notice it. Most traffic is never checked at all. When a request is checked, the plugin makes one quick call to AxioRank with a strict time limit of about a second. If the answer does not arrive in time, the request is allowed through so nobody is kept waiting. ### What happens if AxioRank is down or unreachable? Your site keeps working normally. The plugin is designed to fail open: whenever it cannot get an answer, it allows the request and steps aside. A verification problem will never take your site offline. ### What data is sent about my visitors? Only the basics needed to verify identity, and only for requests the plugin decides to check: the address requested, the request type, the stated user agent, the IP address, and the headers that carry the agent’s signature. Cookies, passwords, and the contents of forms and posts are never sent. The Description has the full breakdown. ### How much does it cost? The plugin is free. It connects to the AxioRank service, which has a free plan that covers getting started with a website, and paid plans with more capacity and features. ### I switched on Enforce and something I rely on stopped working. What do I do? Switch back to Monitor. That immediately stops all blocking. Then check the Activity tab or your AxioRank dashboard to see what was blocked and why, adjust your scope or rules, and try Enforce again. ### Can I block or allow specific agents from WordPress? Yes. The Rules tab lets you add rules that allow, challenge, or block by agent, by category, by verification status, or by risk score, and the Activity tab has a one-click block or allow next to each visit. These rules live on your AxioRank surface, so they apply wherever that surface is used. Nothing is blocked until both this site and the surface are in enforce mode. ### Is there a command-line tool? Yes. If you use WP-CLI, you can run wp axiorank status to see the connection, wp axiorank test to check it, wp axiorank activity to read the recent log, and wp axiorank posture to read or set the mode. There is also an AxioRank check on Tools, then Site Health. ## Omtalar There are no reviews for this plugin. ## Bidragsytarar og utviklarar “Verify AI Agents & Block Fake AI Bots | AxioRank” is open source software. The following people have contributed to this plugin. Contributors * [ kamenzy ](https://profiles.wordpress.org/kamenzy/) [Omset “Verify AI Agents & Block Fake AI Bots | AxioRank” til ditt eige språk.](https://translate.wordpress.org/projects/wp-plugins/axiorank-agent-verification) ### Interested in development? [Les kjeldekoden](https://plugins.trac.wordpress.org/browser/axiorank-agent-verification/), sjekk [SVN-lageret](https://plugins.svn.wordpress.org/axiorank-agent-verification/) eller abonner på [utviklingsloggen](https://plugins.trac.wordpress.org/log/axiorank-agent-verification/) med [RSS](https://plugins.trac.wordpress.org/log/axiorank-agent-verification/?limit=100&mode=stop_on_copy&format=rss). ## Endringslogg #### 0.4.0 * Repositioned the listing around the outcome: verify that AI agents like ChatGPT, Claude, and Perplexity are genuine, and block fake AI bots. No change to how verification works. * Documented that the plugin also blocks bot-like AI crawlers and scrapers that reach WordPress on a cache miss, and clarified that fully cached or CDN pages need edge verification. * Added guidance for WooCommerce stores: pair with AxioRank for WooCommerce to verify AI agents at checkout and stop unverified agents before an order is created. #### 0.3.0 * New AxioRank admin menu with four tabs: Overview, Activity, Rules, and Settings, in place of the single settings page. * New Activity log: a per-request view of recent automated visits with verdict, risk score, verification method, the flagged signal, the endpoint reached, and a copyable request reference. * New Rules manager: set the surface posture and add allow, challenge, or block rules by agent, category, verification status, or risk score, directly from WordPress through the AxioRank surface API. One-click allow or block from the Activity log. * New branded block page for turned-away requests, with an optional custom message you can set in Settings. Blocked responses now honor the server’s challenge status. * New dashboard glance widget, a Site Health check, and WP-CLI commands (wp axiorank status, test, activity, posture). * Old bookmarks to the previous settings page redirect to the new Settings tab. #### 0.2.3 * Rewrote the plugin description, setup guide, and FAQ in plain language, including a new section that spells out exactly what information is and is not sent to AxioRank. No functional changes. * Fixed an internal version constant that had fallen behind the plugin version ( it is used for cache busting of the admin styles and scripts). #### 0.2.2 * The WordPress.org listing now includes an animated walkthrough screenshot of the setup flow. No functional changes. #### 0.2.1 * Endpoint scoping now resolves the real admin-ajax, XML-RPC, and login paths from WordPress instead of assuming their default locations, so sites that relocate wp-admin or run WordPress in a subdirectory are matched correctly. #### 0.2.0 * Renamed to AxioRank Agent Verification. * New branded admin experience: onboarding stepper, connection status, scope cards, guarded enforce switch, and a local activity panel. #### 0.1.0 * Initial release: monitor and enforce modes, scope controls, Web Bot Auth verification through AxioRank, fail-open transport. ## Om * Version **0.4.0** * Last updated **4 dagar sidan** * Active installations **Færre enn 10** * WordPress version ** 5.8 eller nyare ** * Tested up to **7.0.2** * PHP version ** 7.4 eller nyare ** * Language * [English (US)](https://wordpress.org/plugins/axiorank-agent-verification/) * Tags * [ai agents](https://nn.wordpress.org/plugins/tags/ai-agents/)[ai bots](https://nn.wordpress.org/plugins/tags/ai-bots/) [ai-crawler](https://nn.wordpress.org/plugins/tags/ai-crawler/)[AI-Security](https://nn.wordpress.org/plugins/tags/ai-security/) * [Avansert vising](https://nn.wordpress.org/plugins/axiorank-agent-verification/advanced/) ## Vurderingar No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/axiorank-agent-verification/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/axiorank-agent-verification/reviews/) ## Contributors * [ kamenzy ](https://profiles.wordpress.org/kamenzy/) ## Hjelp Har du noko å seia? Treng du hjelp? [Sjå hjelpeforumet](https://wordpress.org/support/plugin/axiorank-agent-verification/)