Suppress Workflow Header Information while sending back HTTP Response in a Flow | Power Automate

Let’s see how we can suppress critical information about the Flow to the caller HTTP Application while sending back a response.

Scenario

The Flow will send Header information back while sending a HTTP Response to the caller HTTP Request.

Here’s how the Flow will look –

Note, that we are sending a Custom Header along as well.
And along with this info, the follow Header information will also be visible in the calling application. We’ll use Postman to check this scenario.

You’ll see that a lot of Headers have been sent back along with our Custom Header.

And you’ll see whole lot of Headers that expose the Flow details in these Headers.

Let’s see how we can cut this information short and not send back any unnecessary information to the HTTP Request we’ve received.

Let’s see how with a simple tweat, we can avoid sending the Workflow Header information back as HTTP Response.

We go to the Settings of the HTTP Request Trigger itself as shown below –
Now, you see the option, Suppress Workflow Headers, it will be OFF by default.

Your turn it ON,
Now, let’s try to make a call again and see the difference. Going back to the Postman, we Send another request post you’ve saved the workflow changes above.

We see that only 10 Headers are sent as opposed to 24 as seen without suppressing the info.
And if we see what Headers are sent back, we see along with our Custom Header, only the ones which are required will be sent suppressing all the critical information.

This is a good practice to suppress Workflows that don’t give out information in production scenarios which are not required by end application.