Kimi-User

User agent

Kimi-User

MetricRaven matches this token anywhere in the request's user agent, ignoring case. Operators add version numbers and browser text around it, for example "Kimi-User/1.0".

IP verification

Verified when the user agent and the IP range both match

1. 1User agent

   The request's user agent contains Kimi-User.

2. 2Request IP

   Your server-side tracker sends the IP that made the request.

3. 3Range check

   The IP is compared with the ranges Moonshot AI publishes, refreshed twice a day.

Range sources

• Kimi-User IP ranges

  https://www.kimi.com/policies/kimi-user.json

Control it in robots.txt

User-agent: Kimi-User
Disallow: /private/

Fetchers that act for a person may not follow robots.txt; block them at your server or firewall if you need to.

Questions

What is Kimi-User?

Handles user-initiated actions in Kimi, such as summarizing an article or answering with live web results. MetricRaven groups it under AI answers: assistants opening a page because a person asked about it.

How do I verify that a request really comes from Kimi-User?

Check both the user agent and the IP. Requests from Kimi-User contain "Kimi-User" in the user agent and come from the IP ranges Moonshot AI publishes (https://www.kimi.com/policies/kimi-user.json). A request with the name but another IP is likely spoofed.

How do I block or allow Kimi-User?

Add a robots.txt group for "Kimi-User" with the paths to allow or disallow. Fetchers that act for a user may ignore robots.txt; block those at your server or firewall instead.

How can I see when Kimi-User visits my website?

Most crawlers never run JavaScript, so browser analytics miss them. MetricRaven's @metricraven/ai-crawl package reports crawler requests from your server, verifies their IPs against published ranges, and shows which pages each crawler reads.