The X-Robots-Tag is an HTTP header directive that controls how compliant crawlers index and use specific web resources. Unlike the robots.txt file, which offers site-wide path exclusion, or HTML <meta> tags, which require markup access, the X-Robots-Tag operates at the server configuration level. This allows administrators to apply granular indexing rules to non-HTML files like PDFs, images, and videos, or to dynamically generated content, specifying rules such as noindex, nofollow, or noarchive directly in the HTTP response.
Glossary
X-Robots-Tag

What is X-Robots-Tag?
The X-Robots-Tag is an HTTP response header that provides granular, page-level control over indexing and content usage, allowing webmasters to specify directives like `noindex` or `noarchive` for AI crawlers without modifying HTML meta tags.
For AI training data opt-out, the X-Robots-Tag is a critical mechanism for implementing the TDM Reservation Protocol. By serving a X-Robots-Tag: noai or tdm-reservation: 1 header, rights holders signal to compliant AI crawlers that content is reserved for text and data mining. This provides a legally significant, machine-readable preference signal that operates at the protocol level, offering a more robust and enforceable method for content exclusion than relying solely on robots.txt disallow rules for autonomous agents.
Key Features of the X-Robots-Tag
The X-Robots-Tag provides granular, page-level control over indexing and content usage for AI crawlers. Unlike meta tags, it operates at the HTTP response level, allowing webmasters to manage non-HTML resources like PDFs and images.
Granular Path Exclusion
Enables selective blocking of AI crawlers from specific directories or file types without affecting human visibility. Use wildcards and regex patterns in server configuration to target precise content segments.
- Example:
Header set X-Robots-Tag "noindex, noarchive"for/private/directory - Applies to PDFs, images, and other non-HTML files
- Overrides broader robots.txt rules for specific resources
AI-Specific User-Agent Targeting
Directives can be scoped to specific AI crawler user-agents like GPTBot or CCBot, allowing differentiated policies for search engines versus training data collectors.
- Example:
Header set X-Robots-Tag "noindex" "expr=%{HTTP_USER_AGENT} =~ /GPTBot/" - Maintains search visibility while blocking AI training ingestion
- Supports conditional logic based on user-agent strings
Noarchive Directive
The noarchive value prevents compliant crawlers from storing cached copies of content, restricting use in long-term training data repositories.
- Blocks storage in cached corpora and training datasets
- Critical for time-sensitive or proprietary content
- Works alongside
noindexfor comprehensive protection
Non-HTML Resource Control
Unlike HTML meta tags, the X-Robots-Tag controls indexing for binary assets like PDFs, images, videos, and API responses that lack a document head.
- Example:
Header set X-Robots-Tag "noindex, noai"on image directories - Essential for protecting multimedia training data
- Applies to JSON, XML, and other structured data endpoints
TDM Opt-Out Integration
The header supports Text and Data Mining (TDM) reservation signals, explicitly communicating that copyrighted works are reserved and unavailable for AI training ingestion.
- Implements TDM Reservation Protocol at the HTTP level
- Provides machine-readable rights reservation
- Complements robots.txt TDM declarations
Conditional Header Application
Server configurations like Apache mod_headers and Nginx add_header support conditional logic based on URL patterns, file types, or request parameters.
- Apache: Use
Header setwithexpr=conditions - Nginx: Use
add_headerwithinlocationblocks - Enables dynamic, context-aware crawling policies
Frequently Asked Questions
Clear answers to the most common technical and legal questions about using the X-Robots-Tag HTTP header to control AI crawler access and training data ingestion.
The X-Robots-Tag is an HTTP response header directive that provides granular, page-level control over indexing and content usage for automated crawlers, including AI bots. Unlike the robots.txt file, which offers site-wide path exclusion, or HTML <meta name="robots"> tags, which only work on HTML pages, the X-Robots-Tag can be applied to any file type—PDFs, images, videos, and JSON responses. The server sends this header in the HTTP response, and compliant crawlers parse it before processing the content. For AI training opt-out, the directive X-Robots-Tag: noai or X-Robots-Tag: noindex, noarchive signals that the content must not be used for foundation model training or stored in long-term training corpora. This mechanism is critical for enforcing Training Data Opt-Out policies on non-HTML assets that cannot embed meta tags.
X-Robots-Tag vs. Robots.txt vs. Meta Robots
A technical comparison of the three primary mechanisms for controlling AI crawler access and indexing behavior across HTTP headers, file-based protocols, and HTML elements.
| Feature | X-Robots-Tag | Robots.txt | Meta Robots |
|---|---|---|---|
Implementation Layer | HTTP response header | Server file (plain text) | HTML <meta> element |
Scope of Control | Per-resource (URL-level) | Site-wide or directory-level | Per-page (HTML document) |
Non-HTML File Support | |||
AI-Specific Directives (noai, noimageai) | |||
Crawl Budget Management | |||
Indexing Prevention | |||
Snippet/Cache Control | |||
Enforcement Model | Voluntary compliance | Voluntary compliance | Voluntary compliance |
Enabling Efficiency, Speed & Accuracy
Intelligent Analysis, Decision & Execution
We build AI systems for teams that need search across company data, workflow automation across tools, or AI features inside products and internal software.
Talk to Us
Search across company data
Give teams answers from docs, tickets, runbooks, and product data with sources and permissions.
Useful when people spend too long searching or get different answers from different systems.

Automate internal workflows
Use AI to route work, draft outputs, trigger actions, and keep approvals and logs in place.
Useful when repetitive work moves across multiple tools and teams.

Add AI to products and internal tools
Build assistants, guided actions, or decision support into the software your team or customers already use.
Useful when AI needs to be part of the product, not a separate tool.
Related Terms
Master the full stack of technical signals and protocols that govern how AI agents interact with your web assets.
TDM Reservation Protocol
A machine-readable extension to robots.txt that allows rights holders to declare a reservation of rights for Text and Data Mining. This protocol specifically targets AI training ingestion, moving beyond general search indexing to address generative model data collection.
- Syntax: Uses
TDM-Reservation: 1in robots.txt - Target: AI crawlers performing large-scale content extraction
- Legal Weight: Referenced in EU Copyright Directive Article 4
Noarchive Directive
Prevents compliant crawlers from storing a cached copy of a web page. While traditionally used to block search engine caches, it now serves as a critical control to restrict content from being retained in long-term AI training repositories.
- Implementation:
<meta name="robots" content="noarchive">orX-Robots-Tag: noarchive - Effect: Blocks persistent storage of page snapshots
- Use Case: Time-sensitive or licensed content that must not be retained
User-Agent Blocklist
A server-side configuration that identifies and denies access to specific AI crawler user-agent strings. This operates at the network or application layer, providing a hard block before any content is served.
- Examples:
GPTBot,CCBot,Claude-Web - Implementation: Nginx/Apache rules, WAF policies, or CDN edge functions
- Advantage: Stops requests before they consume bandwidth and server resources
Content Credential
A tamper-evident metadata structure standardized by the C2PA that attaches cryptographically signed provenance information to digital content. This signals ownership and usage rights directly to AI ingestion systems at the asset level.
- Standard: Coalition for Content Provenance and Authenticity (C2PA)
- Contains: Creator identity, creation date, edit history, usage constraints
- Integration: Embedded in image, video, and document file headers
Preference Signal
A standardized digital indicator that communicates a user's or administrator's consent choice regarding AI training data usage. These signals bridge the gap between human intent and machine-readable directives.
- Examples: Global Privacy Control (GPC), Do Not Track (DNT) successor signals
- Transmission: Browser headers, OS-level settings, account toggles
- Challenge: Currently lacks universal legal enforcement across jurisdictions

About the author
Prasad Kumkar
CEO & MD, Inference Systems
Prasad Kumkar is the CEO & MD of Inference Systems and writes about AI systems architecture, LLM infrastructure, model serving, evaluation, and production deployment. Over 5+ years, he has worked across computer vision models, L5 autonomous vehicle systems, and LLM research, with a focus on taking complex AI ideas into real-world engineering systems.
His work and writing cover AI systems, large language models, AI agents, multimodal systems, autonomous systems, inference optimization, RAG, evaluation, and production AI engineering.
Partnered with leading AI, data, and software stack.
How We Work
Custom AI workflows for your Business
One-fit-all AI don't work for modern businesses. At Inferensys, we aim to understand your business & custom requirements; which we use to define most efficient agentic workflows, the data, and the tools for your business.
01
Review the use case
We understand the task, the users, and where AI can actually help.
Read more02
Pick the right approach
We define what needs search, automation, or product integration.
Read more03
Build the first useful version
We implement the part that proves the value first.
Read more04
Improve from there
We add the checks and visibility needed to keep it useful.
Read moreThe first call is a practical review of your use case and the right next step.
Talk to Us