Integration Settings

Configure security, access controls, and usage limits for your widget.

Overview

Integration settings control how your widget operates in production—who can use it, how much they can use it, and from where. These settings help you maintain security and manage costs.

Identity Verification

Requires User Identity Verification

When enabled, users must verify their identity before chatting. The widget will prompt users to enter their email address and confirm via OTP (One-Time Password).

Benefits:
  • Reduces spam and bot abuse
  • Enables user tracking across sessions
  • Provides verified contact information
  • Improves conversation quality
Consideration:

Adding verification creates friction. Use it when quality matters more than volume, such as for lead generation or support.

Usage Limits

Max Allowed User Input Characters

Limit how many characters a user can send in a single message. This prevents abuse and helps control LLM token usage.

Recommended: 500-2000 characters for most use cases

Daily Token Limit

Set a daily allowance of tokens per user. This helps control costs and prevents any single user from consuming excessive resources.

Limit can be applied per:

Client/Session

Browser session

IP Address

User's IP

User Identity

Verified email

Tip: Set to 0 (Unlimited) for internal tools or trusted users. Use limits for public-facing widgets to control costs.

Origin Whitelisting

Allowed Origin URLs

Specify which domains can embed and use your widget. Only requests from these origins will be accepted.

Example allowed origins:

https://yourcompany.com
https://www.yourcompany.com
https://app.yourcompany.com
Security Warning:

Without origin whitelisting, anyone could embed your widget on their site and use your API quota. Always configure this for production widgets.

Recommended Configurations

Public Website (Lead Generation)

  • Identity verification: Optional (ask after a few messages)
  • Max input characters: 1000
  • Daily token limit: 50,000 per IP
  • Origin whitelist: Your domain only

Customer Support Portal

  • Identity verification: Required
  • Max input characters: 2000
  • Daily token limit: 100,000 per user
  • Origin whitelist: Support portal domain

Internal Tool

  • Identity verification: Not required (users already authenticated)
  • Max input characters: 5000
  • Daily token limit: Unlimited
  • Origin whitelist: Internal domains

Next Steps

Embedding Options

Deploy your widget on websites