Whitelist Trove in Cloudflare
If your WooCommerce store sits behind Cloudflare, its bot-protection features (Bot Fight Mode, Super Bot Fight Mode, or WAF managed rules) can block or rate-limit the automated requests our integration makes to sync your products — showing up as sync failures or timeouts even though your credentials are correct.
We make these requests with an identifying user agent, and Cloudflare recommends allowlisting by user agent rather than by IP address (our IPs aren't static):
Trove/1.0 (+https://gotrove.ai)
To allowlist it in Cloudflare:
- Log in to the Cloudflare dashboard for your store's domain.
- Go to Security > WAF > Custom rules (or Rules > Configuration Rules, depending on your Cloudflare plan).
- Click Create rule.
- Set the field to User Agent, operator contains, value
Trove/1.0 (+https://gotrove.ai). - Set the action to Skip and choose the protections to bypass for matching requests (Bot Fight Mode / Super Bot Fight Mode / Managed Rules), or use Allow depending on which rule type you're in.
- Deploy the rule.
For a walkthrough of Cloudflare's user-agent allowlisting UI, see this YouTube guide and this Cloudflare community forum post.
If you're not sure whether your site is behind Cloudflare, or you don't manage Cloudflare yourself, pass this guide to whoever administers your store's DNS/CDN before connecting.