Does Retool respect robots.txt?

The metadata leaves that behavior unconfirmed, while Cloudflare's bot record marks it as not following robots.txt. Use server-side controls for a reliable block.

Does Retool crawl content for AI search or training?

No such role is documented for this user agent. It identifies Retool platform HTTP calls, not a search indexer or training-data crawler.

Can the Retool/2.0 header authenticate a request?

No. It identifies the expected client format but can be copied. Continue to require credentials and authorization on every protected endpoint.

What can break if I block Retool?

A Retool app or workflow that depends on your endpoint can fail. Check the route, credentials, and responsible team before applying a broad block.

Retool: AI Crawler Guide & robots.txt

What is Retool?

Retool is the platform user agent attached to outbound HTTP requests from Retool. The known pattern is Retool/, and Cloudflare's bot directory records the full example as Retool/2.0 (+https://docs.tryretool.com/docs/apis). Retool has also described this value as a hardcoded header added before a request is sent.

The header does not identify one fixed job. A Retool app or workflow can call an external HTTP endpoint for a task configured by the team that built it. The URL, method, frequency, credentials, and expected response all depend on that configuration, so two Retool requests can have unrelated purposes.

A server log entry therefore means that Retool's platform claims to have made an HTTP call. It does not mean Retool is crawling the surrounding website or discovering links. Start with the requested endpoint and the owning integration when investigating why the traffic exists.

This user agent has no direct effect on AI search visibility. It does not index pages for an answer engine, and the available operator description gives it no model-training role. Blocking it can break a Retool integration that calls your service, but it does not opt a site out of search results or training data.

The robots status is not confirmed in the bot metadata. Cloudflare's entry marks Retool as not following robots.txt, even though the Retool token is stable enough to write a group for it. Use that group only to express a preference; secure an API with authentication and enforce denials in the application or at the edge.

Cloudflare categorizes this identity as a bot and links to Retool's API documentation. It provides no signature directory, and there is no verified IP identity in the record. The cataloged agent is verified, but the header on an individual request is not proof that Retool sent it because any HTTP client can reproduce the string.

Relevant for AI search

Is Retool relevant for AI search?

Yes. Retool collects pages for an AI product, so what it can crawl influences how AI systems describe your brand.

Retool crawls and indexes pages so the AI search or assistant behind it can retrieve them at answer time. A page it has never fetched cannot be quoted, summarized, or linked in that product's answers, so most sites keep it allowed to stay citable. Blocking it removes your pages from that AI surface and hands those citations to competitors.

How to handle Retool

Before blocking Retool, check whether an internal app, customer workflow, or other expected integration calls the affected endpoint. A robots rule can document your preference:

User-agent: Retool
Disallow: /

Do not rely on that rule for enforcement. Retool has no published robots commitment in the metadata, and Cloudflare's bot directory marks the agent as not following robots.txt. Require the normal API credentials, scopes, and rate limits regardless of the user agent. If the request is unwanted, deny it at the API gateway, WAF, or application.

Examples

An operations dashboard built in Retool calls a supplier API when an employee submits a form. The supplier sees the Retool/2.0 header on that configured request.
An API owner finds repeated Retool traffic without valid credentials. The API rejects it through its authentication policy instead of trusting or blocking solely on the header.

Frequently asked questions about Retool

Learn about AI visibility monitoring and how Promptwatch helps your brand succeed in AI search.

An outbound HTTP call made through the Retool platform. The exact purpose comes from the app, query, or workflow configured to call your endpoint.

Related bots

Amazon Kendra

Amazon Kendra is a managed information retrieval and intelligent search service that uses natural language processing and advanced deep learning model.

AI Assistant