Fix an unauthorized domain error on Embed

Objective

Fix the Embed message This embed is not authorized for this website. so the widget runs on the correct external host.

What the error means

Noulek compared the browser’s current website host to the External domain saved in WordPress. They did not match.

Noulek only allows the embed on the single authorized domain you configured. This is expected protection — not a bug in your snippet.

Common causes

Cause What to check
Wrong host in WordPress External domain does not match the site where the snippet is installed.
Subdomain mismatch Snippet on portal.example.com but WordPress allows example.com only.
www vs bare host Usually equivalent after normalization; verify the stored host in Install this embed.
Staging vs production Snippet on staging.client.com but WordPress allows client.com.
Embed not active A different message (This embed is not active yet.) means status is inactive — check Active in configuration.

Procedure

1. Identify the live host

On the external page, note the site hostname in the browser address bar (for example portal.university.edu).

2. Update WordPress

  1. Open Noulek AI → Embed Export.
  2. Set External domain to that hostname (you may include https://; Noulek stores the host only).
  3. Ensure Active is checked.
  4. Click Save configuration.

Unauthorized domain troubleshooting context

3. Retry on the external site

Reload the external page (hard refresh if needed). The widget should load the assistant card instead of the authorization error.

4. If you changed domains

Copy the snippet again from Install this embed only if your CMS requires it. The Public embed ID usually stays the same; the authorized host in WordPress is what changed.

Expected result

The external page host matches External domain in WordPress, and the embed loads without the unauthorized-domain message.

For domain rules (subdomains, www, paths), see Authorize an external domain.