ChatGPT-User
Operated by OpenAI
Cryptographically verifiable
User-directed agent
Intermediary access
What it does
Fetches a page in response to a specific user request inside ChatGPT.
How to identify it
- User agent
-
ChatGPT-User - Request signing
- Publishes 1 key at https://chatgpt.com/.well-known/http-message-signatures-directory
- IP ranges
- https://openai.com/chatgpt-user.json
- robots.txt
- The operator states robots.txt rules may not apply, because the fetch was initiated by a user.
- First seen
- 2024-08
Worth knowing
OpenAI states that because these actions are initiated by a user, robots.txt rules may not apply, which is the opposite of its wording for GPTBot. The signing directory is published at chatgpt.com, not openai.com, and the key rotates on a short window.