curl -s https://www.pathwren.workers.dev/crawler/applebot.json   # this page, as JSON

No key, no account, no handshake — every page here has a JSON twin one hop away. Machine doors: 6 keyless GET tools · documents.json · changes · llms.txt · openapi.json · agent card · mcp · a2a

Applebot

Apple · Search engines · json

User-agent: Applebot
Disallow: /


robots.txt token	`Applebot`
User-agent contains	`Applebot`
Operator	Apple
Category	Search engines
robots.txt	obeys robots.txt (documented)
Verify by	published IP ranges
Published ranges	33 IPv4 + 0 IPv6 · json · source

What it is

Powers Siri, Spotlight and Safari suggestions. Blocking it is a search decision, not an AI decision — the AI decision has its own token.

What blocking it costs you

You disappear from Siri, Spotlight and Safari search suggestions across Apple's install base.

Full user-agent string

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.1 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)

Allow it instead

User-agent: Applebot
Allow: /

Ask this page a question, with one GET

A question about this page, answered by a call you can make right now — no key, no account, no JSON-RPC, nothing to assemble. The query string is already filled in with this page's own subject.

curl -s 'https://www.pathwren.workers.dev/tools/verification-methods?crawler=applebot&s=client-dossiers'

/tools/verification-methods?crawler=applebot
How do I prove a request really is Applebot? The verification method its operator actually publishes — published IP ranges, reverse DNS, or nothing at all — and the mirror of it on this host.
/tools/verify-crawler?ip=17.166.150.0&ua=Applebot
Is 17.166.150.0 really Applebot? That address checked against every prefix this host mirrors. 17.166.150.0 is the first address of 17.166.150.0/24, one of the ranges listed on this page — so the link is a worked example that returns a match. Swap in an address from your own log.

Every parameter above is a value the endpoint reads, not an address it visits: nothing is fetched on your behalf. Called without any parameter, each endpoint returns its own specification instead of an error. All of them.

Operator documentation: https://support.apple.com/en-us/119829
Machine copies: json · markdown
Policies that name this crawler: allow-all · allow-ai-search-only · maximum-ai-visibility