{"name":"Generative Metrics audit scanner","description":"Scanner identity for the Generative Metrics AI-access audit. Site owners and CDN/WAF operators can use this to allow the scanner through automated-traffic controls.","userAgent":"GenerativeMetrics/1.0 (+https://generativemetrics.com)","userAgents":{"standard":"GenerativeMetrics/1.0 (+https://generativemetrics.com)","quickCheck":"GenerativeMetricsQuickCheck/1.0 (+https://generativemetrics.com)"},"scanTokenHeader":"X-GM-Scan-Token","egressAddress":null,"egressAddressDeclared":false,"egressNotice":"No dedicated egress address is currently declared. The per-domain token path is the reliable mechanism to allow the scanner.","allowlistUrl":"https://generativemetrics.com/allowlist","protectedSitesUrl":"https://generativemetrics.com/protected-sites","documentationUrl":"https://generativemetrics.com/allowlist","contactUrl":"https://generativemetrics.com/contact?topic=support","note":"Register a domain to receive a scoped scan token, then allow requests carrying the X-GM-Scan-Token header. The token is never forwarded to other hosts during redirects. Each scan also sends one ordinary request as our published scanner identity, under the same crawling rules as every request we send, so we can tell AI-specific blocking from general robot blocking. Every scan arrives as a first-time visitor: we send no cookies, store no consent state, and click nothing, including consent screens. We measure what an unconsented machine visitor receives, which is what AI systems without stored consent experience."}