Quick start
protected in ten minutes.

01The ten minutes

1. Install and activate (Plugins → Add New Plugin → Upload Plugin → choose cryptometer.zip → Install Now → Activate). You land on CryptoMeter → Overview.
2. Set up. In the Set up CryptoMeter card pick a preset. Get cited, block training is recommended and already active from the moment you activate. Leave Also let AI agents pay per read (optional) off unless you want Monetize. Press Apply and start.
3. Load the official IP lists. Open Bots & rules → Verification sources and press Refresh now. Each list should show a green tick and a number of IP ranges. (They also refresh by themselves once a day.)
4. Check your cache. Open Bots & rules → Server & cache rules, pick a published post and press Run loopback test. You want "WordPress answered the bot directly." If a cache is reported, see Page caches.
5. Check it from a terminal (replace the address with one of your posts):

   curl -i -A "Mozilla/5.0 (compatible; GPTBot/1.2; +https://openai.com/gptbot)" https://your-site.example/your-post/
   # With the default preset: HTTP/1.1 403 Forbidden and the header  x-cryptometer: block
   
   curl -s -o /dev/null -w "%{http_code}\n" -A "Mozilla/5.0" https://your-site.example/your-post/
   # A normal visitor: 200
   
   curl -s https://your-site.example/robots.txt
   # Shows "User-agent: GPTBot" / "Disallow: /" blocks and a Content-Signal line

   These three results were reproduced on a test install (WordPress 7.1.2, PHP 8.4.25).
6. Wait for data. The Overview and Activity screens fill as real bots visit. Nothing is estimated or made up; empty screens say "No AI visits yet".