Allowed Origins & Domain Security
Allowed origins protect your widget API key. Only listed domains can call ChatLM APIs from the browser.
How to add a domain
- Dashboard → Domain security.
- Enter one origin per line, full URL with protocol, e.g.
https://shop.example.com - Include staging if you test there:
https://staging.example.com - Save settings.
www vs non-www
Browsers treat https://example.com and https://www.example.com as different origins. Add both if you use both.
Wildcard *
* allows any domain — convenient for development, risky in production. Remove before launch.
Local development
Add http://localhost:8080 or your local Vite URL if you test locally.
Ready to set up your widget?