NarrativePublish

NarrativePublish delivers blog posts from Narrative Publish to WordPress sites that have the Narrative Publisher plugin installed. It only contacts a site when that site's owner publishes or updates a post from the Narrative Publish app.

How to recognise it

• User-Agent: NarrativePublish/1.0 (+https://api.getnarrativeapp.com/api/publish/bot)
• Source IP address: 54.158.186.100
• Requests are signed with HTTP Message Signatures (Web Bot Auth), with Signature-Agent: "https://api.getnarrativeapp.com". The key directory is at /.well-known/http-message-signatures-directory.
• Requests: POST /wp-admin/admin-ajax.php?action=narrative, with type=info (connection check) or type=post (deliver a post)
• Every request carries a time-based one-time code derived from the secret key the site owner entered in the plugin. The plugin rejects requests without a valid code.

If your firewall blocks it

If posts published from Narrative never appear in WordPress, your site's security may be blocking these requests. On Cloudflare, add an IP Access Rule (Security → WAF → Tools) with the value 54.158.186.100, the action Allow and the zone This website. Other firewalls can allow the same IP address, or requests to /wp-admin/admin-ajax.php?action=narrative.

Contact

Questions or concerns: support@narrative.so.