Overview
If you see "Attention Required | Cloudflare" (or a blank or broken page) when Userled loads your website, Cloudflare's bot protection is blocking Userled's automated requests. This guide shows you how to allow Userled through with one Cloudflare rule.
The rule covers every place Userled loads your pages:
Importing a page into the editor, including creating a template from a live page URL with AI
Page screenshots and previews
Link previews (title, description and thumbnail) in the resources section
How it works
Every request Userled makes to your site carries a userled cookie. Cloudflare sees these automated requests as suspicious, so you add a rule that lets requests with that cookie through.
Create a Cloudflare WAF rule
Step 1: Log into the Cloudflare dashboard
Go to dash.cloudflare.com
Select your website or domain
Step 2: Open the WAF settings
In the left sidebar, click Security
Click WAF (Web Application Firewall)
Click Custom rules
Step 3: Create a new custom rule
Click Create rule
Name it
Allow Userled Bot
Step 4: Configure the rule expression
Field: Cookie
Operator: contains
Value: userled
In the expression builder, it should look like:
(http.cookie contains "userled")
Step 5: Set the action
Under Then take action, select Skip → All remaining custom rules. Alternatively, select Allow.
Step 6: Deploy
Click Deploy to activate the rule
Try the import again in Userled (see Verification below)
Need a specific cookie value?
For extra security, Userled can give you a unique cookie value for your domain. Contact Userled support with your domain and we'll set up a bypass token for you. Then update your rule to:
(http.cookie contains "userled=[YOUR_SPECIFIC_TOKEN]")
Verification
After deploying the rule, try whichever import you were using:
Page import: re-import your page into the editor, or re-run AI template creation from the page URL. Your page should load instead of the Cloudflare challenge.
Link previews: add your link to the resources section again. You should see the title, description and thumbnail.
Troubleshooting
Still seeing "Attention Required"? Check that the rule is deployed and not paused.
Rule not working? Check you selected the right action (Skip or Allow).
Multiple domains? You may need a rule per domain, or a rule at the Cloudflare account or zone level.
Security considerations
The rule only lets through requests that carry the Userled cookie, and Userled only loads the pages you ask it to import or preview. It doesn't bypass login or authentication on your website, so anything behind a login stays protected.