← AI crawler directory

Microsoft

Copilot

AI answersNo fetched rangesVerified July 2026

What it is

Copilot fetches web content for a Microsoft Copilot interaction rather than performing Bing's general index crawl. Aiola classifies it as AI answers because access happens on demand.

In Aiola's taxonomy, AI answers means fetched to answer a user's question now.

User agent

Look for the match token inside the complete HTTP User-Agent header. Tokens can be spoofed, so use the network checks below for authentication.

Full example User-Agent
Copilot
Case-insensitive match token
Copilot

Official IP ranges

Microsoft has not published official IP ranges that Aiola successfully fetched for Copilot. Aiola does not list cloud-provider ranges or community guesses as if they authenticated this crawler.

Verify authenticity

Start with the source IP recorded by your trusted edge or server, not an untrusted forwarded header.

Reverse- and forward-DNS double lookup
host REQUEST_IP
# Confirm the hostname ends in an official suffix
host RETURNED_HOSTNAME
# The forward lookup must return REQUEST_IP

For production checks, test against every current prefix in the vendor feed. Re-fetch feeds regularly: a July 2026 snapshot is evidence of publication, not a permanent firewall list.

Control it with robots.txt

Copilot is user-triggered. Microsoft's controls may differ from automated crawling, so do not assume a robots.txt block is an authentication boundary.

Allow Copilot
User-agent: Copilot
Allow: /
Block Copilot
User-agent: Copilot
Disallow: /

Read Microsoft's official crawler documentation ↗

Track it

Aiola tracks this crawler on your site — crawls, pages, trends. See when Copilot arrives, which URLs it requests, and how activity changes over time.

Explore Aiola Analytics

FAQ

What is Copilot?

Copilot fetches web content for a Microsoft Copilot interaction rather than performing Bing's general index crawl. Aiola classifies it as AI answers because access happens on demand.

What user-agent token identifies Copilot?

Match the case-insensitive token “Copilot” in the User-Agent header. A matching header alone does not authenticate the sender.

Can I verify Copilot by IP address?

No official Copilot CIDR snapshot was successfully fetched for this verification date. Do not treat an arbitrary cloud IP as proof of identity.

Can robots.txt block Copilot?

Copilot is user-triggered. Microsoft's controls may differ from automated crawling, so do not assume a robots.txt block is an authentication boundary. Use the specific “Copilot” group when you want a rule for this identity without changing rules for every crawler.

Related