Can Mergado download secured feeds?#

Want to make sure nobody unauthorized gets access to your product data, but also need Mergado to reach them? You don’t have to compromise between security and easy data management. Here’s how to make Mergado work with your secured input feed.

Input feed security options#

1. HTTP authentication (username + password)#

If your feed is password-protected, Mergado can load it only if you include the login credentials in the feed URL.

Enter the feed into Mergado in this format: https://username:password@www.your-eshop.com/feed.xml (where the part after the @ sign is your feed URL).

a. Creating a new project

When creating a new project, enter the input feed URL in the format https://username:password@www.your-eshop.com/feed.xml

b. Securing the input feed of an existing project

If you’ve decided to password-protect a previously unsecured input feed of an existing Mergado project, simply replace the original input feed URL with the URL in the format https://username:password@www.your-eshop.com/feed.xml

Replace the input feed in Project Settings:

  • In Mergado, go to the project where you used the feed you’ve now secured with a password.
  • Click on Settings in the left menu.
  • In the General project settings tab, replace the original URL in the Input feed field with the URL in the format https://username:password@www.your-eshop.com/feed.xml
  • Click Save.
  • We recommend regenerating the project afterwards.
    • On the same Settings page, click the Regeneration tab and then Regenerate all and check the output data.

2. IP address restriction (whitelist)#

If your feed is protected by a whitelist — meaning it’s accessible only from specific pre-approved IP addresses — you need to add Mergado’s IP address to the whitelist (the list of allowed IP addresses). Mergado downloads your input feed from this IP address:

81.31.39.112

3. Security via hash (secret key in the URL)#

Your feed might be secured with a hash — a long string of characters that acts as an access key. This means the feed isn’t publicly discoverable, but Mergado can load it without any issues. Just enter the input feed URL containing the hash into Mergado.

For example: https://www.your-eshop.com/feed.xml?hash=8c3b71f08f8b0e3b0a9a7a

If you’ve decided to secure the input feed with a hash on an already existing Mergado project, simply replace the current input feed URL with the URL containing the hash.

Replace the input feed in Project Settings:

  • In Mergado, go to the project where you used the feed you’ve now secured with a hash.
  • Click on Settings in the left menu.
  • In the General project settings tab, replace the original URL in the Input feed field with the URL in the format https://www.your-eshop.com/feed.xml?hash=8c3b71f08f8b0e3b0a9a7a
  • Click Save.
  • We recommend regenerating the project afterwards.
    • On the same Settings page, click the Regeneration tab and then Regenerate all and check the output data.

Securing Shoptet feeds#

Having trouble with Mergado not downloading your input feed from Shoptet? The issue is likely in the security settings.

Shoptet’s admin panel offers two ways to secure XML feeds: a. IP address restriction (whitelist) b. Hash-based security

Mergado can handle either method, but problems occur when both are enabled at the same time. You need to enable only one security method in your Shoptet admin and then either add Mergado’s IP address to the whitelist or enter the feed URL with the hash into Mergado.

How to fix it:

  1. Log in to your Shoptet account.
  2. In the admin panel, click Integrations in the left menu, then XML feeds.
  3. Click the Security tab.
  4. In the Access protection section, check only one security method.
  5. Save the settings.

FAQ#

Can Mergado handle a password-protected feed?#

Yes. Mergado can load a feed protected with a username and password (HTTP authentication). Just enter the input feed URL in the format: https://username:password@www.your-eshop.com/feed.xml

If you added the password after creating the project, replace the original URL with the new one in Project Settings.

Can I add password protection to an existing project’s input feed?#

Yes. If you’ve decided to protect the input feed with a password, you need to replace the original input feed URL with one that includes the username and password. The new URL will be in the format: https://username:password@www.your-eshop.com/feed.xml

Replace the input feed URL as follows:

  1. In Mergado, go to the project where you used the feed you’ve now secured with a password.
  2. Click Settings in the left menu.
  3. In the General project settings tab, replace the original URL in the Input feed field with the URL in the format https://username:password@www.your-eshop.com/feed.xml
  4. Click Save.
  5. In the Regeneration tab, click Regenerate all and verify that the data loads correctly.

Can I secure an existing project’s input feed with a hash?#

Yes. If you’ve decided to protect the input feed with a hash, you need to replace the original input feed URL with one that includes the hash. The new URL will be in the format: https://www.your-eshop.com/feed.xml?hash=8c3b71f08f8b0e3b0a9a7a

Replace the input feed URL as follows:

  1. In Mergado, go to the project where you used the feed you’ve now secured with a hash.
  2. Click Settings in the left menu.
  3. In the General project settings tab, replace the original URL in the Input feed field with the URL in the format https://www.your-eshop.com/feed.xml?hash=8c3b71f08f8b0e3b0a9a7a
  4. Click Save.
  5. In the Regeneration tab, click Regenerate all and verify that the data loads correctly.

My feed only allows access from certain IP addresses. What do I do?#

If you use a whitelist to secure your feed, you need to add Mergado’s IP address. Mergado downloads feeds from IP address: 81.31.39.112

My feed is secured with a hash. Can Mergado download it?#

Yes. Just enter the full URL including the hash into Mergado (e.g.: https://www.your-eshop.com/feed.xml?hash=8c3b71f08f8b0e3b0a9a7a). Mergado will recognize the hash and load the feed without any issues.

Mergado won’t load my feed from Shoptet. What should I do?#

Check the security settings in your Shoptet admin panel. Shoptet offers two types of protection:

  • IP address restriction (whitelist),
  • hash-based security.

If both methods are active at the same time, Mergado can’t access the feed. Keep only one method enabled and then either add Mergado’s IP address to the whitelist or enter the URL with the hash into Mergado.

Steps in Shoptet:

  1. Log in to the admin panel.
  2. Click Integrations → XML feeds → Security.
  3. In the Access protection section, check only one security method.
  4. Save the settings.

Related articles

Backward Can I secure the output feed in Mergado? For Developers Forward
🇨🇿 🇬🇧 🇩🇪 🇭🇺