Skip to content

Enhanced 402 Payment Protocol Implementation by Cloudflare for AI-controlled Web Crawler Interaction

Cloudflare extends AI Crawl Control feature on August 28, 2025, allowing personalized HTTP 402 replies for AI crawler monetization on approximately 20% of websites.

Expansion of 402 payment protocol for AI crawlers' communication with Cloudflare
Expansion of 402 payment protocol for AI crawlers' communication with Cloudflare

Enhanced 402 Payment Protocol Implementation by Cloudflare for AI-controlled Web Crawler Interaction

In a groundbreaking move, Cloudflare, the internet infrastructure provider, announced the general availability of AI Crawl Control during AI Week 2025. The service, led by CEO Matthew Prince, aims to address the breakdown of traditional content-traffic exchange models by integrating with the L402 payment protocol.

The L402 payment protocol, an open-source protocol designed for machine-friendly transactions on the internet, is at the heart of this innovation. The service operates across Cloudflare's global network infrastructure, affecting approximately 20% of internet websites and processing over one billion 402 response codes daily.

The initiative addresses the issue of AI crawlers extracting content without providing adequate compensation. When AI crawlers request content, they now receive either successful access with HTTP 200 status or a 402 Payment Required response containing pricing information and contact details.

Customizable message parameters enable content creators to include specific licensing instructions within 402 responses. This empowers creators to monetize AI crawler usage in a way that was not previously possible.

The AI Crawl Control expansion, announced on August 28, 2025, follows the pay-per-crawl private beta launched on July 1, 2025. The service addresses the binary choice between blocking AI crawlers or allowing unrestricted access without compensation, offering a middle ground that benefits all parties involved.

The technical implementation of the service was detailed by Cloudflare's team, including Will Allen, Pulkita Kini, and Cameron Whiteside. The framework requires three distinct configurations for each AI crawler and operates after existing security measures. Authentication mechanisms prevent crawler spoofing through Web Bot Auth proposals requiring Ed25519 key pair generation and HTTP Message Signatures.

The service operates on a largely unused web standard, HTTP 402 status codes, which signal payment requirements. By leveraging this standard, Cloudflare positions itself as the first internet infrastructure provider to systematically address content creator compensation.

However, it's worth noting that there is no publicly available or referenced information on the development status of the L402 protocol across different platforms and services in the provided search results. The results focus on unrelated topics, indicating that the L402 protocol's development is perhaps a more niche area of focus.

In conclusion, the introduction of AI Crawl Control by Cloudflare marks a significant step towards fair compensation for content creators in the era of AI. By standardizing content monetization through automated HTTP interactions, Cloudflare is set to reshape the landscape of internet usage and content distribution.

Read also: