Fix an unauthorized domain error on Embed
Objective
Fix the Embed message This embed is not authorized for this website. so the widget runs on the correct external host.
What the error means
Noulek compared the browser’s current website host to the External domain saved in WordPress. They did not match.
Noulek only allows the embed on the single authorized domain you configured. This is expected protection — not a bug in your snippet.
Common causes
| Cause | What to check |
|---|---|
| Wrong host in WordPress | External domain does not match the site where the snippet is installed. |
| Subdomain mismatch | Snippet on portal.example.com but WordPress allows example.com only. |
www vs bare host |
Usually equivalent after normalization; verify the stored host in Install this embed. |
| Staging vs production | Snippet on staging.client.com but WordPress allows client.com. |
| Embed not active | A different message (This embed is not active yet.) means status is inactive — check Active in configuration. |
Procedure
1. Identify the live host
On the external page, note the site hostname in the browser address bar (for example portal.university.edu).
2. Update WordPress
- Open Noulek AI → Embed Export.
- Set External domain to that hostname (you may include
https://; Noulek stores the host only). - Ensure Active is checked.
- Click Save configuration.

3. Retry on the external site
Reload the external page (hard refresh if needed). The widget should load the assistant card instead of the authorization error.
4. If you changed domains
Copy the snippet again from Install this embed only if your CMS requires it. The Public embed ID usually stays the same; the authorized host in WordPress is what changed.
Expected result
The external page host matches External domain in WordPress, and the embed loads without the unauthorized-domain message.
For domain rules (subdomains, www, paths), see Authorize an external domain.