Descrição
AI companies crawl your site to train their models and power their answers. But are they crediting you? Unsourced — AI Bot Monitor is the WordPress plugin for the Unsourced platform — the AI search intelligence tool for independent publishers and content creators.
Server-side bot detection — catches bots that skip JavaScript
Most analytics tools are blind to AI crawlers because bots like GPTBot and ClaudeBot never execute JavaScript. This plugin runs inside WordPress at the PHP level, checks every request against 20 known AI bot signatures, and logs each visit to your Unsourced dashboard with zero impact on page load time.
From version 1.1.0 the plugin also automatically injects the Unsourced JS beacon into your site — no copy-paste required. Together, server-side detection and the JS beacon give you complete AI crawler coverage.
AI citation monitoring — are they citing you or a competitor?
Beyond crawl detection, Unsourced runs weekly citation checks across ChatGPT, Claude and Gemini. It generates high-intent questions tailored to your actual content topics — the same kind of questions your audience types into AI assistants — then checks whether the AI cites your domain or sends users to a competitor instead.
Every check is logged: which AI platform, which prompt, whether you were cited, what context surrounded the mention, and which competitor domains appeared instead. You get a clear picture of your AI search presence across all five platforms Unsourced monitors.
Origin Signal — proof of AI ingestion
Unsourced embeds a hidden, unique marker in your page content. If an AI model has ingested your content and recites it verbatim, the marker appears in the AI’s response. This is called an Origin Signal — a proprietary mechanism that creates a timestamped, traceable record of AI content reproduction beyond ordinary citation.
Combined with bot visit logs and citation data, Origin Signal gives you structured evidence for review, licensing discussions, or formal complaint — without ambiguity about whether your specific content was used.
What you see in your dashboard:
- Which AI bots visited, which pages, and how often
- Your citation rate across ChatGPT, Claude, Gemini, ChatGPT (web search), and Gemini grounded search
- Which competitor domains are cited instead of you — and for which topics
- Whether your Origin Signal has been triggered
- Weekly AI Visibility Audit and Evidence Report PDFs, generated from your live data
Detected bots (20 signatures):
* GPTBot & ChatGPT-User (OpenAI)
* ClaudeBot & anthropic-ai (Anthropic)
* PerplexityBot
* CCBot (Common Crawl)
* Google-Extended, GoogleOther, Google-CloudVertexBot
* Bytespider (ByteDance / TikTok)
* cohere-ai, Diffbot, Amazonbot, YouBot
* Meta-ExternalAgent
* Applebot-Extended
* omgilibot, PetalBot, Timpibot, BrightBot
External Services
This plugin sends data to Unsourced (https://unsourced.app), an external service that logs and displays AI bot activity and citation intelligence for your site. A connection to this service is required for the plugin to function.
What data is transmitted:
- Your site URL
- The URL of the page being visited by the bot
- The detected bot name and raw User-Agent string
- The visitor IP address
When data is sent:
Only when a valid Unsourced API key has been configured in the plugin settings. Bot event reporting fires only when a request matches a known AI bot signature. A lightweight GET request is also made once per 5 minutes (cached via WordPress transients) to fetch the site’s current Origin Signal canary token — this transmits only your API key and site URL. Human visitors are not affected by bot reporting.
Service links:
- Website: https://unsourced.app
- Terms of Service: https://unsourced.app/terms
- Privacy Policy: https://unsourced.app/privacy
Instalação
From the WordPress Plugin Directory (recommended):
- In your WordPress admin, go to Plugins Add New
- Search for “Unsourced AI Bot Monitor”
- Click Install Now, then Activate
- Go to Settings Unsourced
- Click Connect to Unsourced — opens unsourced.app in a new tab
- Sign in or start your free trial — the plugin connects automatically, no copy-pasting needed
- Return to WordPress admin — you’ll see the green “Plugin connected” confirmation
Already have an API key? Expand the “Already have an API key?” section and paste it directly.
From a ZIP file:
- Download the ZIP from unsourced.app or the Plugin Directory
- Go to Plugins Add New Upload Plugin
- Upload the ZIP, activate, and follow steps 4–7 above
Perguntas frequentes
-
Does this slow down my site?
-
No. The server-side bot check is a lightweight PHP hook that adds negligible overhead. The report to Unsourced is a non-blocking background request — your page renders immediately without waiting for it. The JS beacon is an async script tag that fires after page load.
-
Does this block AI bots?
-
No. Unsourced is a monitoring and intelligence tool, not a firewall. Bots are recorded and reported but served normally. Use your robots.txt or a WAF if you want to restrict access.
-
What is citation monitoring and how does it work?
-
Citation monitoring is the core intelligence feature of the Unsourced platform. Once your site is verified, Unsourced runs weekly checks across five AI platforms (ChatGPT, Claude, Gemini, ChatGPT web search, and Gemini grounded search). It generates a set of high-intent questions based on your actual content topics — the same kind of queries your readers type into AI assistants — and checks whether the AI cites your domain in its response. Every result is logged, including uncited responses (so you can see who the AI recommended instead of you).
-
What is an Origin Signal?
-
An Origin Signal is a hidden, unique marker embedded in your page content by the Unsourced plugin. From v1.2.0 the plugin automatically injects a span element in your page footer containing your site’s unique canary token. If an AI model ingests your content and later reproduces it verbatim in a response, the token appears in the AI’s output — creating a timestamped, traceable record of AI content reproduction beyond an ordinary citation. The token is fetched automatically when you save your API key and a verified site is matched. The settings page shows an Origin Signal Active badge when the token is in place.
-
Does the plugin inject JavaScript automatically?
-
Yes, from version 1.1.0. When you save a valid API key and your site is matched to a verified Unsourced site, the plugin automatically injects the Unsourced JS beacon into your page
<head>. No copy-paste required. The beacon complements the server-side PHP detection by capturing any AI bots that do execute JavaScript. You can confirm it is active — the plugin settings page shows a green “JS Beacon Active” badge once configured. -
Do I need a paid Unsourced plan?
-
No — Unsourced offers a free 14-day trial with full access to bot detection, citation monitoring, and report generation. After the trial, a Standard (£29/mo) or Pro (£49/mo) subscription is required to continue.
-
My site is on WordPress.com — will this work?
-
WordPress.com managed hosting does not support third-party plugins. This plugin is for self-hosted WordPress (WordPress.org sites). If you cannot install plugins, you can still add the Unsourced JS beacon manually via your theme or a custom code block.
-
I saved my API key but the JS Beacon shows as Inactive
-
This means your site URL in Unsourced doesn’t match your WordPress site URL, or the site hasn’t been verified yet. Go to your Unsourced dashboard, add your site, complete the verification step, then return to Settings Unsourced and click Save Settings again. The beacon will activate automatically once the site is matched.
-
Can I use the plugin without an Unsourced account?
-
No. The plugin requires a valid Unsourced API key to record events. Without it, the plugin loads but does not send any data.
Contribuidores e programadores
“Unsourced — AI Bot Monitor” é software de código aberto. As seguintes pessoas contribuíram para este plugin:
ContribuidoresTraduza o “Unsourced — AI Bot Monitor” para o seu idioma.
Interessado no desenvolvimento?
Consulte o código, consulte o repositório SVN, ou subscreva o registo de alterações por RSS.
Registo de alterações
1.3.0
- Origin Signal upgrade — canary token is now fetched live from the Unsourced API and cached locally for 5 minutes via WordPress transients. Token rotates per scan so the Unsourced dashboard can confirm a citation came from a live crawl during the active scan window, not just from training data.
1.2.0
- Origin Signal auto-inject — plugin now automatically embeds a unique hidden span token in every page footer (wp_footer). If an AI model ingests your content and reproduces it verbatim, the token appears in the response — irrefutable proof of ingestion.
- Origin Signal Active / Inactive badge added to the plugin settings page
- canary_token is fetched automatically from Unsourced on settings save and stored locally — no manual steps required
1.1.0
- JS beacon auto-inject — plugin now automatically adds the Unsourced JS beacon to your site page head on save, no manual code required
- Site ID is fetched from Unsourced and stored automatically on settings save
- Settings page shows JS Beacon Active / Inactive status badge
1.0.0
- Initial release — 20 AI bot signatures, non-blocking server-side event reporting, admin settings page with connection test

