Cloudsurf
Fully verifiableShopify's cloud browser agent, which loads pages so that Shopify AI agents such as Sidekick can act on a merchant's or customer's request, and so that Shopify tools can screenshot pages and check them for display problems. It visits a page only when a Shopify tool directs it to and does not crawl or index the web on its own. Shopify documents that the Cloudsurf token is appended to the standard user agent of the browser running the session, so the browser prefix varies; requests from mobile-emulation tools carry a plain phone user agent with no Cloudsurf token at all, which is why Shopify directs site owners to verify the Web Bot Auth signature rather than the user agent.
Operated by Shopify · Official documentation
User agents
Patterns this directory matches, with real observed strings.
- regexShopify/Cloudsurf \(bot;
- observedShopify/Cloudsurf (bot; +https://www.shopify.com)
How to verify
Fetch the Web Bot Auth key directory
curl -s https://cloudsurf.shopify.io/.well-known/http-message-signatures-directoryGood Bot Practices scorecard
- Identifies honestly
Stable UA token documented (1 pattern)
- Verifiable
Fully verifiable
- Respects robots.txt
Does not honor robots.txt
- Behaves
Crawl-rate behavior is operator-declared; not machine-verifiable from this dataset
- Reachable operator
Operator and documentation published
Measured against the Good Bot Practices.