Starting a new store that AI assistants can find on day one

Launching AI-Visible: The New Store Checklist. A Visibility Mesh infographic for ecommerce AI visibility.

AI assistants can find a new online store from its first day, as long as you undo the settings that kept everyone out while you built it. On Shopify that means making the store Public and submitting the sitemap, and on WordPress it means unchecking the setting that asks search engines to stay away and reading any firewall rules in front of the site.

By Margareta Petrovic, CISA, CISSP, founder of Visibility Mesh. Updated November 9, 2026.

In security work, a new system gets an access review before it goes live, and a new store needs one too. While you build, the store keeps visitors and crawlers out, which is correct. On launch day those settings also keep out the assistants you want to be found by.

How do I open a Shopify store to search engines and AI crawlers?

Shopify's help page on the password page says that in private mode, all of your online store's pages are hidden from visitors and search engines. Opening the store takes four clicks.

  1. In your Shopify admin, open Online Store.
  2. Click the Private label in the access setting.
  3. Select Public.
  4. Click Launch store the first time, or Update after that.

Then tell Google where your pages are.

  1. Open yourstore.com/sitemap.xml in a browser and confirm it lists your products, collections and pages. Shopify builds this file for you.
  2. In Google Search Console, add the store as a property, then go to Indexing > Sitemaps and submit sitemap.xml.
  3. Open yourstore.com/robots.txt and read it once. Shopify's help page says the default file works for most stores. If your theme carries an old robots.txt.liquid template, Shopify says it can print outdated rules, and deleting the template restores the current default.

Shopify also sends product data to AI channels through Shopify Catalog. Its help page says agentic storefronts cover ChatGPT, Google AI Mode and Gemini, Microsoft Copilot and Meta. Shopify says the feature is active by default for eligible stores, and that using it means agreeing to its supplemental terms. Go to Sales channels > Agentic in your admin to see which channels are on. The guide to agentic storefronts being on by default explains what each one does.

How do I open a WordPress site on launch day?

WordPress keeps a box called Discourage search engines from indexing this site under Settings > Reading. It is easy to check during the build and forget. WordPress's documentation says the checked box adds a noindex, nofollow robots tag to every page.

  1. In your WordPress dashboard, go to Settings > Reading.
  2. Uncheck Discourage search engines from indexing this site, and click Save Changes.
  3. Open yoursite.com/wp-sitemap.xml, the sitemap WordPress has built in since version 5.5, and submit it in Google Search Console.
  4. If the site sits behind Cloudflare, go to Security > Settings > AI Crawler and Agent access policies and read what your domain shows. Cloudflare's page, last updated November 2, 2026, says new domains allow Search, Agents and Training by default. An older domain may still carry a setting someone chose years ago.
  5. Open your security plugin's bot settings and look for rules that block crawlers by name. The guide to WordPress security plugins blocking AI crawlers lists where the common plugins keep them.

Which AI crawlers should a new store let in?

OpenAI runs separate crawlers for separate jobs. OpenAI's crawler page says sites that block OAI-SearchBot will not be shown in ChatGPT search answers, although they can still appear as navigational links. Blocking GPTBot tells OpenAI the content should not be used for training. The two settings are independent. OpenAI also says its systems take about 24 hours to adjust after a robots.txt change.

Perplexity's crawler page asks site owners to allow PerplexityBot in robots.txt and to permit its published IP addresses in any firewall. The full list of names is in the AI crawler user agents guide, and robots.txt for AI crawlers shows how to read each rule.

What should the first product pages say?

Once crawlers get in, they need facts they can read. Put the product type, material, sizes, price and shipping terms in the page text near the top of each product page, and check that your theme prints Product structured data with the same price. Product titles AI can read covers the name, and product descriptions for AI covers the text below it.

Google's guide to generative AI features says you do not need new machine readable files, AI text files or special markup to appear in Google Search, and crawler access matters for every assistant, so put an llms.txt file after it.

What does launch day look like for a real kind of store?

A handmade jewelry store on Shopify with 24 products launches on a Monday. On Sunday night the owner switches the store to Public, opens sitemap.xml and counts 24 product addresses, and submits it in Search Console. Robots.txt shows Shopify's default rules. Sales channels > Agentic shows ChatGPT and Copilot on. The first three product pages say "sterling silver", the chain length in inches and the shipping time in their first two sentences. Monday morning goes to the launch email. Finding the password page still up at noon is a Monday nobody needs.

What is my launch day checklist?

  1. Make the Shopify store Public, or uncheck Discourage search engines in WordPress.
  2. Open robots.txt and read the rules for OAI-SearchBot, PerplexityBot and the asterisk group.
  3. Submit sitemap.xml on Shopify, or wp-sitemap.xml on WordPress, in Google Search Console.
  4. On WordPress, read your Cloudflare AI Crawler and Agent access policies and your security plugin's bot rules.
  5. On Shopify, open Sales channels > Agentic and note which channels are on.
  6. Put the type, material, sizes, price and shipping terms in the text of your first product pages.
  7. Run the free scan and write down the date of the result.

If the scan points at your theme templates, AI Visibility Setup: Foundation fixes duplicate or broken markup, sitemaps and canonical tags on Shopify or WordPress for $2,500, and you approve every change.

Questions owners ask

Can AI assistants find a brand new store?

Assistants can find a new store once it lets their crawlers in and has pages they can read. No assistant publishes a date for when it will first mention a new store. OpenAI says its search systems adjust about 24 hours after a robots.txt change.

Should I launch my Shopify store with the password page on?

Keep the password on while you build, and make the store Public on launch day. Shopify says that in private mode all of the store's pages are hidden from visitors and search engines.

Do I need an llms.txt file for a new store?

Google says you do not need new machine readable files or AI text files to appear in Google Search. Spend launch week on crawler access and clear product pages instead.

Should I block GPTBot on my new store?

Blocking GPTBot is your choice, and it does not decide whether ChatGPT search shows your store. OpenAI says blocking GPTBot means your content should not be used for training, while OAI-SearchBot finds pages for ChatGPT search.

Does my new Shopify store show up in ChatGPT automatically?

Shopify says agentic storefronts, which include ChatGPT, are active by default for eligible stores. Go to Sales channels > Agentic to see what is on for yours. Your own pages are a second route, through crawlers such as OAI-SearchBot.

Sources

We opened every source below on November 9, 2026.
See whether this applies to your site

The free scan reads your own pages and shows which of these problems it finds on your site.

The free Visibility Mesh scan checks whether AI crawlers can reach your website and reads the structured data and text of 5 key pages. The scorecard has 3 complete findings, and each one names the page and the fix. No install, no call, no card.

Run the free scan