Shopify Web Bot Auth

Shopify provides Web Bot Auth — an official way to authorize crawlers using cryptographic signatures. You can create signatures directly from your Shopify admin.

Web Bot Auth lets you securely authorize crawlers, scripts, and tools to access your public Shopify store. Create a signature in Shopify and add it to your Pixel Harbor account to enable authenticated scanning.

Create a Web Bot Auth Signature

Recommended

Create a signature in your Shopify admin and add it to your Pixel Harbor account:

Step 1: Create signature in Shopify

Go to Online Store → Preferences in Shopify Admin
Scroll to the Crawler access section
Click Create signature
Name it something like "Pixel Harbor Bot"
Select your domain from the dropdown
Set validity to 3 months (maximum)
Click Create
Copy the Signature and Signature-Input values

Step 2: Add to Pixel Harbor

Go to Settings → Integrations
Click Add Credential
Enter your domain and paste the signature values
Set the expiration date to match Shopify
When creating a scan, select your credential from the dropdown

Important: Signatures expire after the validity period and cannot be renewed. You'll need to create a new signature in Shopify before it expires and update it in Pixel Harbor.

Go to Integrations Shopify's official documentation

Alternative: Cloudflare DNS

If your custom domain DNS is managed by Cloudflare, you can whitelist at the Cloudflare level instead:

Ensure your custom domain DNS is managed by Cloudflare (not just connected to Shopify)
Follow our Cloudflare whitelisting guide
Cloudflare rules apply before Shopify's protection layer

Note: This only works if Cloudflare is your DNS provider, not just if Shopify routes through Cloudflare.

Alternative: Direct Upload

If you prefer not to set up crawler access, upload images directly:

Export your product images from Shopify Admin
Go to Settings → Files in Shopify
Download your images
Upload them directly to Pixel Harbor as a ZIP file

Tips for Shopify Stores

•Set the maximum validity (3 months) to minimize how often you need to renew signatures
•Each signature is domain-specific — create one for each connected domain you want to scan
•Shopify's CDN doesn't optimize images from older themes or oversized uploads — we handle both

Need Help?

Having trouble creating a signature? Contact us and we'll walk you through it.

Contact Support