Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Pass a target site’s custom headers through the screenshot API’s documented browser or rendering options—not merely as headers on your request to the screenshot provider. The provider’s API credential and the credential intended for the target page have different destinations. The field name, request format, and header scope vary by service.

Separate the two kinds of authorization

A screenshot request can involve two different HTTP exchanges:

  1. Your application to the screenshot provider: authenticates your use of that provider’s API. For example, Cloudflare’s outer Authorization: Bearer ... header contains a Cloudflare API token.
  2. The provider’s rendering browser to the target website: carries any target-page header needed to load or authorize the page. In Cloudflare’s example, this is the separate Authorization value inside setExtraHTTPHeaders.

Putting a target-site token in the outer API request does not mean it will be forwarded to the page being captured. Configure it using the target-header option documented by the selected provider.

Cloudflare Browser Run: send a target Authorization header

Cloudflare documents a POST request with a JSON property named setExtraHTTPHeaders. Substitute your account ID, Cloudflare API token, target URL, and target-site token:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Elebase USB to USB C Adapter for iPhone 18 Pro Max,USBC Car Charger Adapter
  • Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
  • Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
  • Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
  • Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
  • 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
curl -X POST 'https://api.cloudflare.com/client/v4/accounts/<accountId>/browser-run/screenshot' 
  -H 'Authorization: Bearer <cloudflare-api-token>' 
  -H 'Content-Type: application/json' 
  -d '{
    "url": "https://example.com/protected-page",
    "setExtraHTTPHeaders": {
      "Authorization": "Bearer <target-site-token>"
    }
  }' 
  --output "authenticated-screenshot.png"

The first bearer token authenticates the API call to Cloudflare. The second is supplied to the rendered browser for the target page. Cloudflare’s documentation describes this option as a way to add custom authorization headers: Cloudflare Browser Run documentation. This request shape is specific to Cloudflare; it is not a universal screenshot API schema.

Use the authentication method the target expects

Cloudflare’s page-authentication examples also show cookies and an authenticate object for HTTP Basic Auth. These mechanisms are not interchangeable with an arbitrary custom header: use the one required by the target application and supported by the provider.

Rank #2
Anker USB-C Hub, 5-in-1 USB Hub for Laptops, 4K HDMI Multiport Adapter
  • 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
  • 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
  • Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
  • 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
  • What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.

Provider-specific header formats

Do not copy a parameter name from one screenshot API into another without checking its documentation. The documented examples differ:

Provider Target-header format Relevant qualification
ScreenshotNeo Its API supports custom headers as a capture option; see the ScreenshotNeo API documentation for request parameters. ScreenshotNeo’s API base is https://api.screenshotneo.com/v1/shot. Follow its documented parameter format for the request you are making.
Cloudflare Browser Run POST JSON property setExtraHTTPHeaders, represented as a name/value object. Cloudflare also documents cookies and an authenticate object for Basic Auth. Cloudflare documentation
Screenshot API (screenshot-api.net) POST body with a headers object. Its documentation says custom headers are sent only to the target host, do not follow redirects to another host, and excludes Host, Cookie, and hop-by-hop headers. It recommends POST for credentials because query strings may be written to access logs. Provider documentation
ScreenshotCenter A header array, with each header represented as an object, such as [{"X-Request-Id":"abc123"},{"Authorization":"Bearer token"}]. The help page separately lists referer, user_agent, cookie, and post_data. It was last updated March 27, 2026; verify the endpoint’s accepted method and body before using the shape. ScreenshotCenter help
Screenshot API (screenshot-api.org) The cited documentation describes outer API-key authentication using Authorization: Bearer ... or X-API-Key and POST JSON capture parameters. The listed capture parameters do not document a target-page headers option. Do not assume the API-key header is forwarded to the target. Provider documentation

For ScreenshotCenter, the cited help page describes its option shape but advises verifying the specific endpoint’s request method and body. Its general format alone is not enough to establish that every deployment accepts the same request.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Sale
Anker USB C Hub, 7in1 Multi-Port USB Adapter, 4K@60Hz USBC to HDMI Splitter
  • Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
  • Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
  • Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
  • Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
  • What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.

Send credentials without confusing their destination

  1. Identify which page needs the header and whether it is the initial document, a redirected page, or a subresource.
  2. Check the screenshot provider’s documentation for a target-page header option, the required method, and the expected encoding.
  3. Put the screenshot-service credential in the outer request’s documented authentication field. Put the target credential only in the rendering option intended for the target browser.
  4. When the provider supports it, use a POST body for sensitive capture options instead of a URL query string. Query strings can be recorded in access logs.
  5. Keep both credentials out of public browser-side code, committed source, URLs, logs, and error reports. Use an appropriate secret store or server-side configuration in your application.
  6. Inspect the captured image and any available target-page status. A successful response can still contain a login screen, access-denied page, or other error page.

Check redirects, subresources, and header restrictions

Header scope is provider-specific. The screenshot-api.net documentation says its custom headers go only to the target host and are not carried to a different host after a redirect. That behavior should not be assumed for another service—or assumed to be different—without checking that service’s documentation.

Also determine whether the protected content is loaded by the main document or by a separate request, such as an API call made by page JavaScript. A screenshot provider may handle headers differently for redirects or subresources; the cited material does not establish one cross-provider rule. If a provider blocks particular names, such as Cookie or Host, use its supported cookie or authentication mechanism where appropriate rather than trying to bypass the restriction.

Rank #4
Sale
UGREEN USB to USB C Adapter Combo 4-Pack, 10Gbps USB C Converter Space Gray
  • Dual Converters, Infinite Potential:Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
  • Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
  • Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
  • Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
  • Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft

Troubleshoot a screenshot that does not show the protected page

  • The image shows an unauthenticated page: confirm the target token is in the provider’s rendering option, not only in the outer request. Check the exact property name, JSON structure, and whether the token value includes the expected scheme, such as Bearer.
  • The provider rejects the request: check whether the endpoint expects POST JSON, form fields, or another encoding. A valid option name in the wrong request format may not be accepted.
  • The initial page loads but later content is missing: determine whether the protected content comes from a redirect or a separate subresource. Verify the provider’s documented header scope for those requests.
  • The target returns a login or error page despite a successful capture: inspect the screenshot and any returned target status. A successful screenshot API response does not prove that the intended page loaded.
  • A header appears to have no effect: check whether the target expects a cookie or HTTP Basic Auth instead, whether the header name is supported, and whether a redirect changes the destination host.
  • A credential appears in logs or diagnostics: stop placing it in query strings or client-visible code; use the provider’s documented POST-body option where available and review which systems retain request data.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Or skip the browser setup

ScreenshotNeo is a website screenshot API and MCP server for developers. Its API accepts a target URL in one GET request and can return a PNG, JPEG, WebP, or PDF. It supports custom headers and other capture controls; consult the ScreenshotNeo API documentation for the exact request parameters.

curl -G "https://api.screenshotneo.com/v1/shot" -d access_key=YOUR_API_KEY --data-urlencode url=https://stripe.com -o shot.webp

Set your target URL as needed and add any target-page header using the documented capture parameter. ScreenshotNeo removes cookie/consent banners, newsletter popups, and chat widgets before capture; each cleanup step can be turned off. Bot checks, blank pages, timeouts, failed loads, and cache hits are not billed, and responses indicate the page verdict and billing status. Its MCP server offers take_screenshot, get_page_info, and capture_pdf for AI agents. The free plan includes 1,000 shots per month with no card; paid plans start at $5 for 3,000 shots.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Sign up for ScreenshotNeo’s free plan to get 1,000 screenshots a month with no card.

Best Value
Anker USB C Hub, 5-in-1 USBC to HDMI Splitter with 4K Display
  • 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
  • Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
  • Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
  • HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
  • What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.

Frequently Asked Questions

Can I put the target website’s Authorization token in the screenshot API’s Authorization header?

Not unless the provider explicitly documents that it forwards that outer header to the target. Usually, the outer credential authenticates your provider request; use the provider’s separate target-header option for the page credential.

Will a custom header be sent after a redirect?

It depends on the provider. For example, screenshot-api.net says its custom headers do not follow a redirect to a different host. Check the chosen provider’s documented behavior.

Can a successful screenshot response still show an error page?

Yes. Check the screenshot itself and any target-page status the API exposes; a successful capture does not establish that the protected page loaded.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.