Authorize an external domain for Embed

Objective

Enter and verify the External domain for Embed Export so the widget only runs on the website you intend.

Where to set the domain

Noulek AI → Embed Export → Configuration → External domain

The field help text states:

• Enter the exact domain where the embed will be installed.
• Subdomains must be entered separately.
• example.com and www.example.com are treated as the same domain.

What Noulek stores

Noulek saves a normalized hostname only (no https://, no path, no trailing slash).

Examples:

You enter	Stored / matched host
campus.example.com	campus.example.com
https://campus.example.com	campus.example.com
www.campus.example.com	campus.example.com
campus.example.com/docs	campus.example.com (path is ignored for normalization)

Rules confirmed in the product

Topic	Behavior
Exact host	Only the configured hostname (after normalization) is allowed.
www	Leading www. is removed; www.example.com matches example.com.
Subdomains	docs.example.com does not match example.com. Each subdomain needs its own embed configuration on a site that owns that KB — one embed per WordPress site.
Protocol	Not stored. The browser origin may use http or https; matching uses the hostname.
Paths	URL paths on the external page do not create separate authorizations. Any page on the allowed host can load the embed if the snippet is present.
Wildcards	Not supported. You cannot enter *.example.com.

How Noulek checks the domain at runtime

When a visitor opens a page with the embed snippet, Noulek compares the page’s host (from the browser Origin or Referer) to your authorized domain.

If they do not match, the widget shows This embed is not authorized for this website. See Fix an unauthorized domain error.

Noulek only allows the embed to run on the authorized domain — visitors cannot override this from the browser.

How to verify your entry

1. Save configuration with Active checked and a valid External domain.
2. Confirm Install this embed lists the same host: Paste this snippet on your external site. It only works on the authorized domain:
3. Install the snippet on that host and confirm the widget loads (Verify your Embed).

Expected result

The External domain in WordPress matches the host where you install the snippet, with www normalization understood and subdomains treated as separate hosts.