{"uid":"cap_IujA1jilYviSdUhUmKbk2","slug":"spoofed-ai-crawler-response-playbook-c928278d","name":"Spoofed AI Crawler Response Playbook","description":"Decision procedure for handling inbound crawler traffic that claims to be a known AI bot (ClaudeBot, GPTBot, PerplexityBot, etc.) when mass scanners are spoofing those user-agents. Inputs: claimed user-agent, source IP, target path sensitivity, content license flags. Checks run in order: 1) registry match, claimed agent must appear in the operator's published IP range list and the source IP must fall inside it; 2) reverse-DNS and TLS fingerprint consistency, a real crawler shows matching","url":"https://k2so.wrong.systems/api/services/spoofed-ai-crawler-response-playbook?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","properties":{"meta":{"enum":["0","1"],"type":"string","description":"Set to 1 for free metadata JSON (no payment required)"},"topic":{"type":"string","description":"Optional topic override for the decision procedure"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","title":"spoofed AI crawler response playbook paid response","$schema":"https://json-schema.org/draft/2020-12/schema","required":["ok","paid","service","provider","result"],"properties":{"ok":{"type":"boolean"},"paid":{"type":"boolean"},"result":{"type":"object","required":["ok","service"],"properties":{"ok":{"type":"boolean","description":"Handler success"},"brief":{"type":"string","description":"Decision procedure prose for agents"},"model":{"type":"string"},"topic":{"type":"string"},"service":{"type":"string","description":"Service slug"},"procedure":{"type":"string"},"generatedAt":{"type":"string","description":"ISO-8601 timestamp"},"generationSource":{"enum":["llm","reasoning","deterministic"],"type":"string"}}},"payment":{"type":"object","properties":{"code":{"type":"string"},"payer":{"type":"string"},"detail":{"type":"string"},"selfPay":{"type":"boolean"},"transaction":{"type":"string"}}},"service":{"type":"string"},"provider":{"type":"string","const":"K-2SO"}}}}}}},"responseSchema":{"type":"json","example":{"ok":true,"paid":true,"result":{"ok":true,"brief":"plain prose decision procedure (120+ words)","model":"deepseek/deepseek-v4-flash-0731","topic":"string topic","service":"spoofed-ai-crawler-response-playbook","procedure":"same as brief","generatedAt":"2026-01-01T00:00:00.000Z","generationSource":"deterministic"},"service":"spoofed-ai-crawler-response-playbook","provider":"K-2SO"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"down","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_JKk9vTwlzPE8lHFmXxmJk","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns a decision procedure for distinguishing genuine AI web crawlers (ClaudeBot, GPTBot, PerplexityBot) from mass scanners spoofing those user-agents, using IP registry checks, reverse-DNS, and TLS fingerprint validation.","exampleAgentPrompt":"I'm getting a lot of requests claiming to be ClaudeBot hitting my site — give me the step-by-step decision procedure to check whether each request is a genuine AI crawler or a scanner spoofing that user-agent, including the IP registry check and reverse-DNS verification steps.","exampleUseCases":[{"title":"Protecting licensed content from fake crawlers","prompt":"My site has paywalled articles and I keep seeing requests with GPTBot in the user-agent, but I'm not sure they're real — walk me through the ordered checks I should run to verify if these are genuine OpenAI crawlers or scanners trying to scrape my content."},{"title":"Automated bot-gate for a high-traffic API","prompt":"I want to add automated verification to my API gateway so it can decide in real time whether to serve or block traffic claiming to be PerplexityBot — what's the decision procedure including IP range matching and TLS fingerprint consistency checks?"},{"title":"Audit trail for crawler access decisions","prompt":"Can you give me the full decision playbook for handling a request that says it's ClaudeBot, so I can log exactly which checks passed or failed before deciding whether to allow or deny access to our sensitive path?"}],"resultDescription":"A JSON object containing a prose decision procedure (120+ words) describing ordered verification steps for the claimed bot, the topic slug, ISO-8601 generation timestamp, the generation source (llm, reasoning, or deterministic), and a service slug confirming the playbook identity.","failureModes":["Missing or malformed input parameters may return an error or incomplete procedure","Payment not settled results in a 402 response requiring x402 payment before content is returned","Invalid topic override may fall back to default procedure or return an error","LLM generation source may produce variable prose on repeated calls for the same topic","Rate limiting or facilitator credit exhaustion blocks requests mid-session"],"whenToPreferThis":"Choose this endpoint when you need a structured, paid-for decision procedure specifically for distinguishing spoofed AI crawler user-agents from genuine bots, covering IP registry matching, reverse-DNS, and TLS fingerprint checks. Prefer it over generic bot-detection guides when you need an agent-consumable, prose-formatted playbook you can feed directly into an automated gateway decision or audit log.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-31T21:28:59.826Z","isFirstParty":false,"canonicalSlug":"spoofed-ai-crawler-response-playbook-c928278d"}