Skip to main content

🧩 Adding Custom Headers for Restricted Environments

Discover how to set up a custom header to bypass any restrictions you site might have in place that could prevent our tool from scanning it.

If your site is protected by Cloudflare, a firewall, or other edge protection that blocks automated scanners, you can let our tool in by adding a custom HTTP header.


🔐 How Custom Headers Work

Some security layers block unknown automated requests. A custom header acts like a shared secret: you add the same header on your side (for example, in Cloudflare rules or your firewall) and in our tool.

When our tool connects with that header, the protection recognizes the request as allowed and lets the scanner browse your site. This avoids making broad “allow all” changes and keeps access tightly controlled.


💡 How to Setup a Custom Header

  • Navigate to the Domain Settings section.

  • Click on Advanced Settings.

  • Scroll to the Custom Headers section.

  • You will now see a custom Header name and Header value field, which you will need to complete.

  • On your side (Cloudflare, firewall, load balancer, reverse proxy, server): create a rule that permits requests containing that header name/value and blocks or challenges others as you normally would.


⚙️ Picking a Header Name and Value

  • Header name (use a non-standard header): X-MyScanner-Auth

  • Header value (random, hard-to-guess): 7f3b9e2a-4c1d-4d2b-9f6e-1a2b3c4d5e6f

Other formats that work:

  • Name: X-Custom-Access

  • Value: scanner-access--2025-09-26--R4nd0m

Tips:

  • Use a header name that starts with X- or is clearly custom to avoid conflicts.

  • Make the value long and random (UUID or cryptographic token).

  • Don’t use sensitive personal info in the header value.

Once you've added these details to your AccessibilityChecker.org Domain Settings and on Cloudflare or your firewall, test the implementation by making a request to your site with the header and confirm it’s allowed.


🛒 Shopify Custom Headers

If your website is set up on the Shopify platform, the process of adding a custom header will be slightly different.

Shopify uses Web Bot Auth to let merchants securely authorize crawlers, scripts, or tools to access their public Shopify online store.

To create a custom header in Shopify:

  1. Login to your Shopify store and go to to Online Store > Preferences under Shopify admin

  2. Find the Crawler access section and click on Create signature.

  3. Give the signature a name, select the domain, and set an expiration period (up to 3 months)

  4. Copy all three Signature-Input and Signature values

These are the values you will need:

Header Name

Value

Signature-Input

(copied from Shopify admin)

Signature

(copied from Shopify admin)

Signature-Agent

To add your custom headers to AccessibilityChecker.org:

  1. Login to your AccessibilityChecker.org dashboard

  2. Click on the kebab menu to access Domain Settings

  3. Click on Advanced Settings and scroll down to Custom Request Headers

  4. Click on Add Header three times to insert all of the required Header Names and Values

  5. Click on Update Domain

Did this answer your question?