PayMeMerchantBot

PayMeMerchantBot is the website crawler of PayMe, a payment service provider. It reads public pages of merchants' websites (home, about, contact, terms, privacy, shipping and refund policies, robots.txt, sitemaps) and, for online shops, the public product catalog the shop's platform publishes (Shopify storefront JSON, WooCommerce Store API), to check merchants' identity, policies and the goods they sell. It does not log in, submit forms, buy, or collect personal data beyond what the site publishes.

How it identifies itself

User-Agent:

PayMeMerchantBot/1.0 (+https://payme.io/bot)

It signs its requests with Web Bot Auth (HTTP Message Signatures, RFC 9421, Ed25519). Signature-Agent is https://payme.io; the public keys are at /.well-known/http-message-signatures-directory (current key id VvTfCkzNgab3Q9ZF4M4Pk21NiyyrIQwYTV544xMMXlA).

Politeness

• It honours robots.txt for the token PayMeMerchantBot (and *). To keep it out:

  User-agent: PayMeMerchantBot
  Disallow: /

• One request at a time per host, at least 2 s apart (4 s for sitemaps and other site files), and a longer Crawl-delay when robots.txt asks for one.
• It backs off on 429 / Retry-After and on errors, and revisits a site about once a month.
• Source addresses: 52.16.62.222.

Contact

Questions, problems or opt-out requests: support@payme.io.