User-agent: *
Allow: /
# Server-side endpoints (payment webhooks, licensing, admin) — never indexable.
# Matched by pattern so none is named individually.
# NO trailing "$": an end-anchored /*.php$ does NOT match /buy.php?plan=pro
# (Google matches the pattern against path + query), which left every pricing
# CTA crawlable as an off-site 302. /*.php covers both forms.
Disallow: /*.php

# The metered machine surface (2026-08-24). Priced per call and settled over
# x402; see https://cortexdj.com/licensing.
#
# THIS LINE IS LOAD-BEARING, and /*.php above does not cover it: the paid
# endpoints are served BY api.php but their URLs contain no ".php", so the
# pattern above never matches them. Without this, an indexing crawler reaches
# a 402 on a page it thinks is content — which is a soft-404 in Search Console
# and a blank in an AI answer, for a surface that was never meant for readers.
# Every page a person can reach stays open, and always will.
Disallow: /api/

# Free and deliberately reachable: discovery, the catalogue, and the plain-text
# site guide for language models. Listed so nothing above is read as covering
# them.
Allow: /.well-known/x402
Allow: /llms.txt

Sitemap: https://cortexdj.com/sitemap.xml