Shopify limits access for automated scanners that it can't identify. As a result, accessFlow may be unable to scan some pages of your Shopify store, even if previous scans worked.

To allow accessFlow to scan your Shopify store, create a crawler signature in Shopify, and then add the signature values to your accessFlow pre-audit configuration.

Create a crawler signature in Shopify

1. From your Shopify admin, go to Online Store > Preferences.
2. In the Crawler access section, select Create signature.
3. In the Name field, enter a descriptive name for your signature.
4. In the Domain field, select the domain that you want to use this signature for.
5. In the Valid for section, select an expiration period for your signature.
6. Select Create.
7. Select Copy next to each of the following values:
   • Signature
   • Signature-Input
   • Signature-Agent.
8. Repeat these steps for each domain connected to accessFlow.

Important: After a signature expires, you can't renew it. You must create a new signature. Set a reminder to create a new signature before it expires.

For more information see https://help.shopify.com/en/manual/promoting-marketing/seo/crawling-your-store

Configure pre-audit actions in accessFlow

1. In accessFlow go to Settings > Pre-audit configurations.
2. Next to Custom headers, select Add.
3. Create three custom headers, one for each signature key and value you copied from Shopify.

4. For each custom header, enter the corresponding Shopify key and value.

   • Copy each value exactly as Shopify shows it, including quotation marks.
   • All three headers are required. If one is missing, the scan will fail.
   • Example:

   Header key	Header value
   Signature	sig1=:MEYCIQDx7kq3m9Zt2v8Lp4Rn6Ws0Yc5Xe1Bh3Fk8Jm2Pq6StUvXwIhAM伴...:
   Signature-Input	sig1=("@authority" "signature-agent");created=1756687200;expires=1764285600;keyid="shopify-crawler-key-01"
   Signature-Agent	"[<https://shopify.com>](<https://shopify.com/>)"

   

5. Select Apply.
6. When you create new Shopify signatures, replace the expired values in accessFlow.
7. Repeat these steps for each domain connected to accessFlow.

Note: It can take up to one hour for the custom headers to take effect. Scans that run during this update period may fail. Contact your account manager or support to retrigger an audit if needed.