Widget

Choose which sites can use the widget

Staging has its own domain. Add it, for example staging.acme.com , or use a wildcard.

Add the local address you use, for example localhost or http://localhost:3000 .

Your widget's key is public: it's in your page's HTML. Allowed sites makes sure only your sites can use it.

2 min readUpdated 18 Oct 2026

Three steps

Open Allowed sites
Choose Widget in the sidebar and scroll to Allowed sites.

Add every domain the widget runs on, one per entry:

Entry	Allows
`acme.com`	acme.com and www.acme.com
`app.acme.com`	that subdomain only
`*.acme.com`	every subdomain of acme.com, but not acme.com itself
`https://app.acme.com`	that subdomain over https only

You're done when

The widget works on each domain you listed, and nowhere else.

The list is empty

While it's empty, the widget works on any site. That's handy while you test, but add your domains before you launch.

It works on production but not on staging

Staging has its own domain. Add it, for example staging.acme.com, or use a wildcard.

I'm testing on my own computer

Add the local address you use, for example localhost or http://localhost:3000.

Was this helpful?