---
title: Implementing the X-SiteSpect-Cookie Header
description: "Your web server must send the following response headers: You can configure your server to do this or have SiteSpect add them. To use SiteSpect: Header 1: Header 2:"
---
[Skip to content](https://doc.sitespect.com/knowledge/implementing-the-x-sitespect-cookie-header#main-content)
English
Show submenu for translations
- [A/B Testing](https://www.sitespect.com/testing-and-experimentation/)
- [Personalization](https://www.sitespect.com/personalization-targeting/)
- [Recommendations](https://www.sitespect.com/recommendations/)
Open main navigation
Close main navigation
- [A/B Testing](https://www.sitespect.com/testing-and-experimentation/)
- [Personalization](https://www.sitespect.com/personalization-targeting/)
- [Recommendations](https://www.sitespect.com/recommendations/)
- English
Show submenu for translations
How can we help you?
- There are no suggestions because the search field is empty.
1. [Knowledge Base](https://doc.sitespect.com/knowledge?hsLang=en)
2. [Site](https://doc.sitespect.com/knowledge/site?hsLang=en)
# Implementing the X-SiteSpect-Cookie Header
Your web server must send the following response headers:
- Access-Control-Allow-Origin
- Access-Control-Allow-Headers
You can configure your server to do this or have SiteSpect add them. To use SiteSpect:
1. Select **Site**, **Configuration**, **Domains**, then click **Edit** (little pencil icon) in the Actions column to edit the Domain you want to work on.
2. Select the **Header Control** tab.
3. In the **Response Header Manipulation** section of the page, use the two Header fields to enter the headers as follows:
- Header 1:
- Rule: set
- Name: Access-Control-Allow-Origin
- Value: Use an asterisk “\*” to mean all or enter the domain that is making the request.
- Header 2:
- Rule: set
- Name: Access-Control-Allow-Headers
- Value: A comma-delimited list of the names of the headers to submit on requests
- X-SiteSpect-Cookie
- The name of your Robot Disabling Cookie: To prevent the third-party site’s AJAX requests from being identified by SiteSpect as originating from a robot, the request must send an additional header that includes parameters for disabling robot detection. SiteSpect allows you to name and configure this header by selecting **Site**, **Configuration**, **Domains**, **User Tracking**. Scroll down to the bottom of the page to locate the **Disable Robot Detection Header Name** and **Disable Robot Detection Header Value** fields. Include the Robot Detection Header Name found here as one of the entries in the Value field for Access-Control-Allow-Headers.
4. Have the third-party request resources from your site using AJAX.
**Note:**
- You must add a function that parses the custom X-Set-SiteSpect-Cookie header and saves the values in the correct cookies.
- The AJAX requests to your site must have an additional request header that contains your SiteSpect cookies: xhr.setRequestHeader('X-SiteSpect-Cookie', document.cookie);
- You must send the **Disable Robot Detection Header Name** and **Value** with this request.
- Upon successfully receiving the response to your AJAX request, you must parse the cookies from the header “X-Set-SiteSpect-Cookie” and save the values. We recommend using cookies under the third-party domain for this purpose.
- [Get Started](https://doc.sitespect.com/knowledge/get-started?hsLang=en#main-content)
- [SiteSpect Support](https://doc.sitespect.com/knowledge/get-started?hsLang=en#sitespect-support)
- [Overview Information](https://doc.sitespect.com/knowledge/get-started?hsLang=en#overview-information)
- [Intro to SiteSpect](https://doc.sitespect.com/knowledge/get-started?hsLang=en#intro-to-sitespect)
- [Account Setup](https://doc.sitespect.com/knowledge/get-started?hsLang=en#account-setup)
- [Artificial Intelligence](https://doc.sitespect.com/knowledge/get-started?hsLang=en#artificial-intelligence)
- [Dashboard](https://doc.sitespect.com/knowledge/dashboard?hsLang=en)
- [Build](https://doc.sitespect.com/knowledge/build?hsLang=en#main-content)
- [Setting Up a Campaign](https://doc.sitespect.com/knowledge/build?hsLang=en#setting-up-a-campaign)
- [Create a Client-Side Campaign](https://doc.sitespect.com/knowledge/build?hsLang=en#create-a-client-side-campaign)
- [Create a Server-Side Campaign](https://doc.sitespect.com/knowledge/build?hsLang=en#create-a-server-side-campaign)
- [Metrics](https://doc.sitespect.com/knowledge/build?hsLang=en#metrics)
- [Audiences](https://doc.sitespect.com/knowledge/build?hsLang=en#audiences)
- [Triggers](https://doc.sitespect.com/knowledge/build?hsLang=en#triggers)
- [Variations](https://doc.sitespect.com/knowledge/build?hsLang=en#variations)
- [Traffic Management](https://doc.sitespect.com/knowledge/build?hsLang=en#traffic-management)
- [Preview](https://doc.sitespect.com/knowledge/build?hsLang=en#preview)
- [Factors](https://doc.sitespect.com/knowledge/build?hsLang=en#factors)
- [Advanced Settings](https://doc.sitespect.com/knowledge/build?hsLang=en#advanced-settings)
- [Omnichannel](https://doc.sitespect.com/knowledge/build?hsLang=en#omnichannel)
- [Regular Expressions (Regex)](https://doc.sitespect.com/knowledge/build?hsLang=en#regular-expressions-regex)
- [WATTS](https://doc.sitespect.com/knowledge/build?hsLang=en#watts)
- [Recommendations](https://doc.sitespect.com/knowledge/build?hsLang=en#recommendations)
- [Monitor](https://doc.sitespect.com/knowledge/monitor?hsLang=en)
- [Analyze](https://doc.sitespect.com/knowledge/analyze?hsLang=en#main-content)
- [Data Export and Integration](https://doc.sitespect.com/knowledge/analyze?hsLang=en#data-export-and-integration)
- [SiteSpect Reports](https://doc.sitespect.com/knowledge/analyze?hsLang=en#sitespect-reports)
- [Site](https://doc.sitespect.com/knowledge/site?hsLang=en#main-content)
- [Tools](https://doc.sitespect.com/knowledge/site?hsLang=en#tools)
- [Configuration](https://doc.sitespect.com/knowledge/site?hsLang=en#configuration)
- [Developers](https://doc.sitespect.com/knowledge/developers?hsLang=en#main-content)
- [API Reference](https://doc.sitespect.com/knowledge/developers?hsLang=en#api-reference)
- [Code Samples](https://doc.sitespect.com/knowledge/developers?hsLang=en#code-samples)
- [Tips & Tricks](https://doc.sitespect.com/knowledge/developers?hsLang=en#tips-tricks)
- [Mobile](https://doc.sitespect.com/knowledge/mobile?hsLang=en)
- [Implementation, Deployment, and Security](https://doc.sitespect.com/knowledge/implementation-deployment-and-security?hsLang=en#main-content)
- [How does SiteSpect work with CDNs?](https://doc.sitespect.com/knowledge/implementation-deployment-and-security?hsLang=en#how-does-sitespect-work-with-cdns)
- [Single Tenant Implementations](https://doc.sitespect.com/knowledge/implementation-deployment-and-security?hsLang=en#single-tenant-implementations)
- [Security Features](https://doc.sitespect.com/knowledge/implementation-deployment-and-security?hsLang=en#security-features)
- [Deployment and Implementation Overview](https://doc.sitespect.com/knowledge/implementation-deployment-and-security?hsLang=en#deployment-and-implementation-overview)
- [SiteSpect Engine & Admin API](https://doc.sitespect.com/knowledge/implementation-deployment-and-security?hsLang=en#sitespect-engine-admin-api)
- [Third-Party Integration](https://doc.sitespect.com/knowledge/third-party-integration?hsLang=en#main-content)
- [Google](https://doc.sitespect.com/knowledge/third-party-integration?hsLang=en#google)
- [Zuko](https://doc.sitespect.com/knowledge/third-party-integration?hsLang=en#zuko)
- [Troubleshooting](https://doc.sitespect.com/knowledge/troubleshooting?hsLang=en)
- [Releases](https://doc.sitespect.com/knowledge/releases?hsLang=en#main-content)
- [Superfresh](https://doc.sitespect.com/knowledge/releases?hsLang=en#superfresh)
- [Feedback](https://doc.sitespect.com/knowledge/feedback?hsLang=en)
- [A/B Testing](https://www.sitespect.com/testing-and-experimentation/)
- [Personalization](https://www.sitespect.com/personalization-targeting/)
- [Recommendations](https://www.sitespect.com/recommendations/)
[](http://monetate.com)
[mailto:email@email.com](mailto:email@email.com)
Copyright © 2026, Monetate