[🚧 Bug]: Shadcn installation not working

[jwyce]

Description

Installing from shadcn registry commands gives an authentication error.

---

Steps to Reproduce

run

bunx shadcn@latest add @svgl/sanity

Something went wrong. Please check the error below for more details.
If the problem persists, please open an issue on GitHub.

Message:
You are not authorized to access the item at https://svgl.app/r/sanity.json. If this is a remote registry, you may need to authenticate.

Suggestion:
Check your authentication credentials and environment variables.

---

Expected Behavior

Components get pulled in with no issue

[pheralb]

I'm working on it.

Thanks for creating the issue 🙂

[rvillanueva]

Hi @pheralb FYI I think this is a Cloudflare issue -- it's flagging programmatic access as bot activity.

Suggested solution (albeit AI generated):

In Cloudflare dashboard, create a WAF rule to skip the bot challenge for the registry path:

Go to Security → WAF → Custom Rules

Create a rule:

Expression: (http.request.uri.path matches "^/r/.*\\.json$")

Action: Skip → All remaining custom rules (or disable Bot Fight Mode for this path)

Alternatively, use a Page Rule or Configuration Rule to set Security Level to "Essentially Off" for /r/* paths.

This allows CLI tools to fetch registry JSON while keeping the rest of the site protected.