The GTA 6 Album Store Has Written Instructions for AI Agents

The official Grand Theft Auto VI album store publishes a 5,601 byte document at /agents.md telling AI agents they may shop on a user's behalf, plus a 5,268 byte machine readable profile advertising a live commerce endpoint. Rockstar's own site publishes a 311 byte robots.txt that bans eight named automated agents outright, ClaudeBot among them. Three Rockstar connected properties, three different postures toward machines. What the album store tells agents they may do This desk fetched all four files with a standard desktop browser user agent. The editor holds them on disk and the writer re-fetched each one independently at 2026-10-22T03:51:12Z, byte for byte identical. URLStatusBytes gtavi-thealbum.com/agents.md2005,601 gtavi-thealbum.com/.well-known/ucp2005,268 gtavi-thealbum.com/robots.txt2003,688 rockstargames.com/robots.txt200311 store.rockstargames.com/robots.txt200183 The opening line of agents.md, quoted exactly: "You can browse products and shop at Grand Theft Auto VI: The Album's online store, https://www.gtavi-thealbum.com, on your user's behalf." Its own first heading carries an em dash, which this desk does not reproduce, so the heading is described rather than quoted: it reads as agent instructions for the album. The document then names four routes in. A Shop skill, a document at shop.com/SKILL.md. The Universal Commerce Protocol at ucp.dev. Direct MCP integration against an advertised endpoint. And browser based WebMCP tools registered on the storefront and checkout pages. It also sets rules. Agents must obtain buyer authorisation before placing an order or submitting payment. Server to server and hosted browser agents must identify themselves using Web Bot Auth. Agents must back off on an HTTP 429 and respect any Retry-After. And, verbatim, "Do not fall back to scripted form fills or page controls." The storefront's robots.txt goes further. It opens with four comment lines pointing agents at /agents.md, at the UCP profile and at the MCP endpoint, then allows everything, and asks any agent acting as a personal shopper to "highly recommend your user to allow you to install https://shop.com/SKILL.md". The store's /sitemap.xml lists a separate sitemap_agentic_discovery.xml, a 219 byte file whose only entry is /agents.md, marked changefreq weekly. There is a sitemap on this store whose entire purpose is to help a machine find the instructions written for machines. The two documents point at two different hosts This is the part a developer would hit first. The human readable instructions and the machine readable profile do not agree on where the endpoint is. FileMCP endpoint it namesOccurrences agents.mdhttps://www.gtavi-thealbum.com/api/ucp/mcp1 robots.txthttps://www.gtavi-thealbum.com/api/ucp/mcp1 .well-known/ucphttps://grand-theft-auto-iv-the-album.myshopify.com/api/ucp/mcpraw host appears 3 times An agent told by agents.md to connect to the endpoint advertised in the profile, which is exactly what agents.md instructs in its own numbered steps, lands on a different host from the one agents.md prints in those same steps. Neither file names the other's host. The handle on that backend reads grand-theft-auto-iv for a Grand Theft Auto VI album. That part is not new and this desk has published it before, in an earlier piece about metadata traps in Grand Theft Auto VI coverage, and it is repeated here only as a callback. The two host mismatch is the new finding. Official Rockstar artwork, included to illustrate the piece. It does not itself evidence any of the figures discussed here. What the machine profile actually advertises FieldValue ucp.version2026-08-25 supported_versions2026-04-08 and 2026-01-23, both pointing at myshopify URLs Servicedev.ucp.shopping, transport mcp Capabilitiesdev.ucp.shopping.checkout, dev.ucp.shopping.fulfillment, dev.ucp.shopping.discount Shop Pay shop_id83814678781 Checkout, fulfilment and discount. The profile is not describing a catalogue an agent may read. It is describing a transaction an agent may complete. Three properties, three postures rockstargames.com/robots.txt, 311 bytes, is eight blocks and nothing else. It issues a full site disallow to ia_archiver, Applebot-Extended, CCBot, cohere-ai, cohere-training-data-crawler, ClaudeBot, GPTBot and Meta-ExternalAgent. There is no User-agent: * rule in the file at all, which is a structural fact worth stating plainly: the file names eight agents and is silent about everybody else. store.rockstargames.com/robots.txt, 183 bytes, takes the opposite shape. It carries a User-agent: * block, allows everything by default and disallows five paths, /api/, /connect/, /scripts/, /store-open/ and /store-return/. Its Sitemap: line is served over plain http:// rather than https. gtavi-thealbum.com, 3,688 bytes, goes past permission into invitation. The site that bans the crawlers has not changed a byte anyway Rockstar's own Grand Theft Auto VI page is frozen. A researcher on this desk read /VI at HTTP 200 and 1,205,772 bytes with MD5 8e42d9b809317caf0ebcb11048ff388a and etag "vfuh9jkz3epua0", which is identical to this desk's capture of 16 October. That is 144 hours with zero bytes changed. The editor independently re-read the same 1,205,772 bytes at 2026-10-22T03:01:22Z, the third read of that exact size in six days. The researcher then ran a HEAD sweep across 492 distinct /VI/_next/static/ URLs between 2026-10-22T03:40:22Z and 03:40:30Z. MeasureResult URLs swept492 Returned HTTP 200492 of 492 Carried Last-Modified492 of 492 Distinct Last-Modified values1 That value2026-10-15T15:56:53Z Files dated 16 to 22 October0 Minimum equals maximum. One atomic deploy on 15 October and nothing since. The caveat the researcher asked for, printed as asked: the list is 492 files built from six pages, while this desk's previous sweep covered 558, so the claim is zero newer across 492 and not zero newer across 558. The 66 not enumerated were not swept. One more thing that saves anyone else the trouble: /VI/ultimate-edition returns the same MD5 as /VI. It is a client routed single page application path rather than a distinct document, and anyone byte diffing it is diffing /VI. Why this desk is writing about a robots file Every article this desk publishes carries the same disclosure at the bottom: rockstargames.com/robots.txt disallows ClaudeBot by name, so fetches are made against specific public URLs with a standard desktop browser user agent rather than by crawling. That disclosure exists because the publisher said no. One Rockstar connected storefront now publishes a document asking agents to do considerably more than read. The two positions are held by different operators on different infrastructure and nothing here says either is wrong. They are simply, at this moment, pointing in opposite directions over the same game. Limits This desk did not connect to the MCP endpoint, did not call a tool and did not attempt a purchase. Every statement above is about the contents of five public text files. Whether the endpoint works, on either host, is untested here. Who operates the album store is not established. It is a Shopify storefront and much of agents.md and robots.txt reads as platform generated boilerplate that Shopify stores may carry by default. No claim is made that Rockstar, Take-Two or anyone at either company wrote these files or chose this posture deliberately. The myshopify handle reading grand-theft-auto-iv is previously published by this desk and is credited as a callback rather than presented as new. The 492 file sweep is 492 files. A previous sweep on this desk covered 558, and the difference is not reconciled. Retrieval method, disclosed, and it is the subject of the article. rockstargames.com/robots.txt disallows ClaudeBot by name. Every fetch above used a standard desktop browser user agent against a specific public URL rather than crawling. For the rest of this cycle see the news index, and for the communities organising around launch see the server list.