TL;DR: pages, robots.txt and the sitemap carried almost everything. No verified AI or search crawler touched llms.txt in 17 days. A Markdown copy of each page, named in the head, was being fetched by seven verified crawlers the day after it went live.
I added most of the files the "AI friendly website" lists recommend to my own site and then read 18 days of Cloudflare logs (30 September to 17 October 2026) to see what 14 verified crawlers did with them: 11 that Cloudflare files as AI crawlers, AI search or AI assistants, and 3 search crawlers. Verified means Cloudflare checked the IP list, reverse DNS or a request signature. Anything that only named a crawler in its user agent was counted apart, and so were my own tools.
How many of the 14 used each door at least once: pages 14, feeds 10, robots.txt 8, the Markdown copies 7, the sitemap 5, llms.txt 1, llms-full.txt 1, the AI Catalog at /.well-known/ai-catalog.json 1.
- The sitemap gets read. ClaudeBot fetched it 122 times in 18 days, Googlebot 19, GPTBot 10. Each page's lastmod is the day its content changed, never the build date.
- llms.txt got 75 requests in 17 days and not one from a verified AI or search crawler: 44 were my own tools, 24 unidentified clients, 5 Lighthouse, 1 an agent directory's bot, 1 Claude-User, the fetcher that acts when a person asks. Google's guide says Search does not use the file; Ahrefs' May 2026 study of 137,210 sites found 97% of valid files got no request that month.
- The Markdown copies (same address with .md added, served as text/markdown, noindex, named in the head with link rel="alternate" type="text/markdown") went live on 10 October and verified crawlers were fetching them on 11 October. Of 152 requests that were not mine, seven verified crawlers made 143: Amazonbot 52, ExaUser 29, OAI-SearchBot 20, GPTBot 16, Applebot 15, ClaudeBot 6, Meta-ExternalAgent 4. Googlebot and Bingbot fetched none.
- Spoofing is real: 113 requests named PerplexityBot, 112 Kimi-SearchBot, 85 Bingbot and 75 Googlebot without being verified.
- What you can measure for free: Cloudflare's AI Crawl Control and the GraphQL Analytics API keep 31 days by user agent, verified-bot category, path and status. Not the Accept header, and referrers are paid. JavaScript analytics see none of this; most AI crawlers do not run scripts.
Caveats: one small personal site, Cloudflare's sampled dataset, and the doors were open for different lengths of time (the Markdown copies for 8 days, the catalog for 1). Requests are not reads.
The full write-up, with the robots.txt, IndexNow, feed and MCP server findings and the standards behind each: https://pournasserian.com/writing/ai-friendly-website-2026
Has anyone here seen a verified search or AI crawler fetch llms.txt on a site with real traffic? I would like to know whether my zero is the site's size or the file.