Not by force — it's a voluntary convention that well-behaved crawlers respect, but it doesn't technically prevent access. Use proper authentication or server-level blocking for content that genuinely must stay private.
Yes — there's a dedicated section with checkboxes for GPTBot, ChatGPT-User, ClaudeBot, Google-Extended, CCBot, Bytespider, PerplexityBot, and Applebot-Extended.
At your site's root, e.g. yoursite.com/robots.txt.