Website chat widget

On this page: Set up · The snippet · Allowed domains · Which key · Errors · Troubleshooting

Set up

1. Allow your website. Open Security (under Embed & API) and add your domain, for example yourshop.com. An empty list allows nothing.
2. Style it. Open Widget and choose the colour, title, welcome message and corner.
3. Copy the snippet from the same page and paste it into every page of your site, just before </body>. Most site builders have a “custom code” or “footer scripts” box for this.
4. Test it on your live site. The chat button appears in the corner you chose.

The snippet

This is its shape. Copy yours from the Widget page: it carries your own key and settings.

<!-- Central AI Chatbot Widget -->
<script>
  window.CentralAI = {
    widgetKey: 'YOUR_WIDGET_KEY',
    primaryColor: '#6366f1',
    title: 'AI Assistant',
    welcomeMessage: 'Hello! How can I help you today?',
    position: 'bottom-right'
  };
</script>
<script src="http://centralai.daffodil-bd.com/static/js/widget.js" async></script>

The widget sends your key as X-Widget-Key, and gives each visitor’s browser its own conversation token (X-Shopper-Token), so one visitor can never open another visitor’s chat. You never create that token yourself. When the chat starts, the widget asks each visitor for a name, an email address (required) and a phone number (optional); pressing Enter starts the chat. So every conversation belongs to a contact, and the AI Sales Agent does not ask again for what the visitor gave. Conversations appear in Chat Logs.

Allowed domains

Because the widget key is visible in your page source, your allowed domains are what protect it: the widget answers only on pages whose origin is on your list. Manage the list on Security.

• Enter a domain without https:// or a path; the page removes them for you. http and https count as the same site.
• Matching is by whole name: yourshop.com does not let in yourshop.com.other-site.net or myyourshop.com.
• The same list also protects the Chat API and the lead capture tracker.

Widget key or external API key?

What the widget can answer

You do not call the widget’s routes yourself; these codes help you read your browser’s console.

Troubleshooting

The chat button does not appear.

Check the snippet is on the page (view the page source) and that nothing blocks widget.js. Open the browser console and look for an error code.

NO_DOMAINS_CONFIGURED or ORIGIN_NOT_ALLOWED.

Add the exact domain the page is served from on Security. Remember *. entries do not cover the bare domain.

LEGACY_AUTH_RETIRED.

Your snippet is an old one that sends your company name. Copy the snippet again from the Widget page.

QUOTA_EXCEEDED.

Your chat credits are used up for this period. See Billing & Usage.

I regenerated my widget key and the chat stopped.

The old key stops working at once. Paste the new snippet on every page.