Free SEO audit for new clients — claim yours
Home/Blog/AI Search/Detecting AI Agent Visits in Your Analytics
AI Search

Detecting AI Agent Visits in Your Analytics

Detecting AI Agent Visits in Your Analytics
Table of contents
  1. Key Takeaways
  2. Three Kinds of AI Agent Visit
  3. 1. User-Initiated Fetchers
  4. 2. Cloud Browser Agents
  5. 3. AI Browsers on the User's Device
  6. Step-by-Step: Segment Agent Traffic
  7. Where to Flag Agent Traffic
  8. Signals That Suggest an Agent (Use With Care)
  9. Common Mistakes
  10. Related Guides
  11. Frequently Asked Questions
    1. Does ChatGPT agent show up in Google Analytics?
    2. What is the difference between ChatGPT-User and GPTBot?
    3. Can I tell if a visitor used an AI browser like Atlas?
    4. Should I block AI agents from my site?
    5. What is Web Bot Auth?
  12. Know Who, and What, Is Visiting
  13. References

Not every visit from AI is a person clicking a link in a chatbot answer. Increasingly, the "visitor" is software acting for a person: an assistant fetching your page to answer a question, a cloud browser filling in a form, or an AI browser that looks exactly like Chrome. These agent visits are real, often useful and usually invisible in standard reports, or worse, mixed in with your human traffic.

This guide explains the three kinds of AI agent visit, how each shows up (or does not) in server logs and analytics, and how to segment or flag them so your conversion rates and audience reports stay trustworthy. If you want the strategic background first, read our explainer on what agentic search is.

Key Takeaways

  • There are three kinds of AI visit to separate: user-initiated fetchers (no JavaScript), cloud browser agents (full browsers on the AI company's servers) and AI browsers on the user's own device.
  • Fetchers such as ChatGPT-User, Claude-User and Perplexity-User appear in server logs but usually not in GA4.
  • OpenAI's ChatGPT agent signs its requests with HTTP Message Signatures and a Signature-Agent header of "https://chatgpt.com", which you can log at your CDN or server.
  • AI browsers that run on the user's device can look like ordinary Chrome; you can usually only see their referrer, not the agent.
  • Flag agent traffic at the edge (CDN or server) and pass the flag into analytics, rather than trying to guess from behaviour alone.

Three Kinds of AI Agent Visit

TypeExamplesRuns JavaScript?Where you see itHow to identify
User-initiated fetcherChatGPT-User, Claude-User, Perplexity-UserGenerally noServer/CDN logsUser-agent token; IP lists where published
Cloud browser agentChatGPT agent's cloud browserYes (full browser)Logs, and possibly GA4 as a sessionSigned request headers (Web Bot Auth); CDN bot labels
AI browser on user's deviceChatGPT Atlas and similar AI browsersYesGA4 and logs like a normal browserOften only the referrer (for example chatgpt.com)
Crawlers (not agents)GPTBot, OAI-SearchBot, ClaudeBot, Claude-SearchBot, PerplexityBotVariesServer/CDN logsUser-agent token; verify IPs

Crawlers are covered in detail in our posts on AI bots in server logs and whether to block or allow AI crawlers. This article focuses on the first three rows: visits triggered by a person's request.

1. User-Initiated Fetchers

When someone asks an assistant about a page, it may fetch that page in real time. OpenAI documents ChatGPT-User as the agent for user-initiated actions in ChatGPT and Custom GPTs. Anthropic describes Claude-User as supporting Claude users who ask questions, and Perplexity documents Perplexity-User for user-requested fetches. Each has a distinct user-agent token, and OpenAI and Perplexity publish IP lists (for example openai.com/chatgpt-user.json and perplexity.com/perplexity-user.json) so you can confirm a request is genuine. Anthropic does not publish IP ranges.

“Because these actions are initiated by a user, robots.txt rules may not apply.”

— OpenAI, Overview of OpenAI crawlers, Overview of OpenAI crawlers

Perplexity says something similar about Perplexity-User. In practice these fetchers rarely execute your analytics script, so they will not appear in GA4. Your server or CDN logs are the only place to count them. See how to verify AI crawlers for the IP-checking process.

2. Cloud Browser Agents

Agents such as ChatGPT agent run a real browser on the AI company's servers. They load pages, run JavaScript, click buttons and fill in forms. That means they can trigger your GA4 tag and show up as sessions, which can distort engagement and conversion data.

OpenAI's ChatGPT agent allowlisting page explains how to identify these requests. They are signed using HTTP Message Signatures (RFC 9421) and include Signature, Signature-Input and Signature-Agent headers, with the Signature-Agent value "https://chatgpt.com". Public keys are published at chatgpt.com/.well-known/http-message-signatures-directory. The same page lists how major bot-management providers label it, including a Cloudflare bot tag of chatgpt-agent.

“A Verified bot is a bot or agent that Cloudflare has confirmed is transparent about who it is and what it does.”

— Cloudflare Docs, Verified bots and signed agents

Cloudflare's documentation also notes that since 1 July 2026, "signed agents" are part of its Verified category, with a metadata field that marks a bot as Intermediary (an agentic service many users operate) or Direct. If you use Cloudflare, that field is a ready-made way to segment agent traffic; our post on Cloudflare AI Crawl Control covers Cloudflare's AI bot settings.

3. AI Browsers on the User's Device

AI browsers are the hardest to separate. A test published by Analytics Playbook in October 2025 found ChatGPT Atlas used a user agent identical to Chrome on a Mac, appeared under "Chrome" in GA4, and attributed search clicks to chatgpt.com / referral, the same as ChatGPT on the web. Browser behaviour can change, so re-test, but plan on the assumption that you cannot isolate these visits. Our post on AI browsers and SEO covers what this means for content.

Step-by-Step: Segment Agent Traffic

  1. Turn on full request logging. Make sure your server or CDN logs user agent, IP, and (if possible) the Signature-Agent header. Our log file analysis guide covers the basics.
  2. Build a user-agent lookup. List ChatGPT-User, Claude-User, Perplexity-User and the crawler tokens, and tag each log line by type.
  3. Verify, do not trust. Match IPs to published lists where available. User-agent strings alone can be spoofed.
  4. Flag signed agents at the edge. Use your CDN's bot labels or check the Signature-Agent header, and add a flag such as agent_type=chatgpt_agent.
  5. Pass the flag into analytics. With server-side tagging or a data-layer variable set by your edge worker, send the flag as a GA4 custom dimension. You can then build a segment, comparison or exclusion.
  6. Keep humans and agents in separate views. Use the flag to exclude agent sessions from conversion-rate reports, and report agent activity on its own, much as you would exclude internal traffic in GA4.
  7. Review monthly. New agents appear often. Check unknown user agents in logs and update your lookup.

Where to Flag Agent Traffic

LayerMethodStrengthsWeaknesses
CDN / bot managementVendor bot labels (for example Cloudflare's verified bot categories)Verification handled for you; works before the page loadsDepends on the vendor's coverage and plan
Web server logsUser-agent lookup plus IP verification; log Signature-Agent headerComplete record, including non-JavaScript fetchersNeeds log access and regular processing
Server-side taggingSend an agent flag as a GA4 custom dimensionLets you segment GA4 reportsSetup effort; only covers visits that reach your tag
GA4 aloneReferrer (AI Assistant channel) and behaviourNo extra setupCannot see headers; cannot tell agents from people

Signals That Suggest an Agent (Use With Care)

  • Requests from cloud data-centre IP ranges with a mainstream browser user agent.
  • Very fast, linear journeys: landing page, form, submit, with no scrolling.
  • Bursts of identical journeys at odd hours.
  • Form submissions with structured, complete answers but unusual contact patterns.

Behavioural signals are hints, not proof. Use them to investigate, and rely on signatures and verified lists to flag.

Common Mistakes

  • Assuming GA4 shows all AI visits. Fetchers usually do not run JavaScript, and AI browsers look like Chrome.
  • Confusing the AI Assistant channel with agents. GA4's AI Assistant channel groups visits by referrer (people clicking links from assistants), not by whether software made the visit.
  • Blocking all agents by reflex. An agent may be booking, buying or researching for a real customer. Decide per use case.
  • Trusting user agents without verification. Scrapers impersonate well-known bots.
  • Counting agent form fills as human leads. Flag them so sales knows who, or what, submitted.

If you want your site to work well for agents rather than just detect them, see our guides to preparing your website for AI agents and why AI traffic shows up as direct.

Frequently Asked Questions

Does ChatGPT agent show up in Google Analytics?

It can. ChatGPT agent uses a full cloud browser that runs JavaScript, so it may trigger your GA4 tag. Identify it at your server or CDN using its signed headers and pass a flag to GA4 if you want to segment it.

What is the difference between ChatGPT-User and GPTBot?

OpenAI documents GPTBot as a crawler for content that may be used to train its models, while ChatGPT-User handles user-initiated actions such as visiting a page to answer a question. They have different user agents and IP lists.

Can I tell if a visitor used an AI browser like Atlas?

Usually not directly. A third-party test found Atlas used a standard Chrome user agent, so you mainly see the referrer, such as chatgpt.com, when a visit came from a ChatGPT link.

Should I block AI agents from my site?

Not by default. Agents often act for real customers, for example researching or booking. Block abusive traffic, protect sensitive actions and monitor the rest.

What is Web Bot Auth?

It is an approach where bots and agents cryptographically sign their HTTP requests so websites and CDNs can verify who is making them. OpenAI's ChatGPT agent uses HTTP Message Signatures for this.

Know Who, and What, Is Visiting

AI agents are becoming a normal part of web traffic. Identify them at the edge, verify them against official lists and signatures, and keep them in their own segment so your human metrics stay clean. If you would like help auditing your logs and analytics setup, our technical SEO team can help, or you can request a quote.

References

  1. Overview of OpenAI crawlers – OpenAI
  2. ChatGPT agent allowlisting – OpenAI Help Center
  3. Verified bots and signed agents – Cloudflare Docs
  4. Perplexity crawlers – Perplexity Docs
  5. Does Anthropic crawl data from the web, and how can site owners block the crawler? – Claude Help Center
  6. Google Analytics and ChatGPT Atlas – Analytics Playbook (October 2025)
  7. [GA4] Default channel group – Google Analytics Help
Rohit Choudhary
Written byRohit ChoudharyCo-Founder, My SEO Experts

Rohit Choudhary is the co-founder of My SEO Experts and has more than 14 years of hands-on experience in SEO, paid advertising and digital marketing. Since starting out in 2011 he has helped hundreds of businesses grow through practical, data-driven search strategies, and he also serves as a consulting Digital Marketing Director for several US-based companies.

Keep reading

Related articles

Apps in ChatGPT: Should Your Brand Build One?
AI Search

Apps in ChatGPT: Should Your Brand Build One?

What apps in ChatGPT are, who has launched them, the submission rules and costs, and a step-by-step framework for deciding if your brand should build one.

Ads in ChatGPT: What Advertisers Need to Know
AI Search

Ads in ChatGPT: What Advertisers Need to Know

What OpenAI has officially documented about ads in ChatGPT, from placement rules and Ads Manager to measurement, and how ads relate to organic AI visibility.

Ready to grow your business online?

Get a free, no-obligation proposal tailored to your goals and budget.

CallFree Quote