Kimi-User: what this bot is and how to allow or block it
Kimi-User is a bot from Moonshot AI that opens a page when a person asks: when someone using Kimi asks it to read a link or the assistant looks up an answer right in the chat. It does not crawl the whole site — it reads one page at a time.
Kimi-User User-Agent
This is how Kimi-User identifies itself in requests to your site. In robots.txt you only write the token — Kimi-User.
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Kimi-User/1.0; +https://www.kimi.com/policies/kimi-crawlers
How to allow Kimi-User
Add this group to robots.txt at the site root. Close service sections in the same group: a bot with its own group does not read the «User-agent: *» rules.
User-agent: Kimi-User Allow: /
robots.txt is not everything. If your site uses Cloudflare or other bot protection, it may serve Kimi-User a 403 error or a challenge page even when robots.txt allows everything.
How to block Kimi-User
To block the whole site, add the group below to robots.txt. The rule works for bots that respect robots.txt.
User-agent: Kimi-User Disallow: /
What happens if you block Kimi-User
When someone using Kimi asks it to open your page, the assistant will not be able to read it and will answer without your site.
How to check whether Kimi-User visits your site
Search the web server logs for the token. The User-Agent string is easy to fake, so to be sure, check the IP address against the ranges if Moonshot AI publishes them.
grep "Kimi-User" /var/log/nginx/access.log
Does your site let Kimi-User in
Free 15-second check: we read your robots.txt and request your site as AI bots — you see which ones the server and bot protection let in and which they block.
Questions and answers
Should I block Kimi-User?
Usually not: Kimi-User opens a page only when a person asks. Blocking it stops people using Kimi from reading your site through it.
How do I know whether Kimi-User visits my site?
Search the web server logs for the token. The User-Agent string is easy to fake, so to be sure, check the IP address against the ranges if Moonshot AI publishes them.
Is it enough to allow Kimi-User in robots.txt?
robots.txt is not everything. If your site uses Cloudflare or other bot protection, it may serve Kimi-User a 403 error or a challenge page even when robots.txt allows everything.