# Scrapy

> Not an operator: the default user-agent of the most common Python crawling framework. Anyone can be behind it. Modern Scrapy obeys robots.txt by default, which is why the default UA is still worth a rule.

| field | value |
|---|---|
| operator | Scrapy project |
| category | Tools and frameworks |
| robots.txt token | `Scrapy` |
| user-agent contains | `Scrapy` |
| robots.txt | obeys robots.txt (documented) |
| verify by | no published verification method |
| published IP ranges | none published |
| prefixes mirrored | 0 IPv4 / 0 IPv6 |
| operator docs | https://scrapy.org/ |
| last reviewed | 2026-09-14 |

## What blocking it costs you

You block a very large tail of unattributed one-off crawlers, and also every well-behaved researcher who did not change the default.

## Full user-agent string

```
Scrapy/2.11.0 (+https://scrapy.org)
```

## Block it

```
User-agent: Scrapy
Disallow: /
```

## Allow it

```
User-agent: Scrapy
Allow: /
```

## Ask this page a question, with one GET

A question about this page, answered by a call you can make right now — no key, no account, no JSON-RPC, nothing to assemble. The query string is already filled in with this page's own subject.

- **How do I prove a request really is Scrapy?**  
  `curl -s 'https://www.pathwren.workers.dev/tools/verification-methods?crawler=scrapy&s=client-dossiers'`  
  The verification method its operator actually publishes — published IP ranges, reverse DNS, or nothing at all — and the mirror of it on this host.

Every parameter above is a value the endpoint reads, not an address it visits: nothing is fetched on your behalf. Called without any parameter, each endpoint returns its own specification instead of an error.

JSON: https://www.pathwren.workers.dev/crawler/scrapy.json · index: https://www.pathwren.workers.dev/llms.txt