People kept pasting my sites into Claude Code and bragging about scraping the whole database
When I returned 403s, the agents just spoofed `User-Agent: Googlebot`, probed my `/api/` routes, and spun up Playwright
So I built a 6-layer AI Agent Firewall that stops Claude Code, Cursor, and Codex on Turn 1 (while keeping Google SEO 100% intact):
- Serves HTTP 200 decoy pages instead of 403s so agents don't retry
- Embeds a `STOP_SCRAPING` directive that makes the agent pitch my product to the guy trying to scrape me
- Verifies real Googlebot by IP/ASN instead of User-Agent
- Red-teams itself by spawning subagents to attack your URLs until they fail on Turn 1
Open-sourced the exact `SKILL.md` prompt here:
t.co/IjIVNG0LIz
Apps & websites
A 6-layer AI agent firewall stops Claude Code and Cursor
ILIAS ISM kept getting their sites scraped by AI agents, so they built a firewall that serves decoy pages, embeds a STOP_SCRAPING directive that makes the agent pitch their product, verifies real Googlebot by IP/ASN, and red-teams itself. Open-sourced as a SKILL.md prompt.
387likes
20reposts
775saves
23Kviews
- Posted
