Website chat embed keys
Create origin-restricted publishable keys for the Infra One website chat widget, then rotate or revoke them safely.
An embed key lets a website initialize the Infra One chat widget for an organization. It is publishable and may appear in page HTML, but it works only from its configured Allowed origins.
Create a key
- Open
https://agents.infra.one/your-organization-slug/embed-keys. - Select New embed key.
- Enter a Name that identifies the site and environment, such as
Marketing website — production. - Enter Allowed origins, one origin per line, such as
https://www.example.com. - Select Create key.
- Use Copy key and configure the website integration that loads the chat widget.
An origin contains scheme, hostname, and optional port. Do not enter paths. Production and local development normally need separate origins and preferably separate keys.
Key states
| State | Meaning |
|---|---|
| Active | The key can resolve when used from an allowed origin. |
| Revoked | The key stops resolving immediately and cannot be used again. |
Rotate a key
Select Rotate when a key must change but the site and allowed origins should remain represented by one record. Rotation mints a replacement and immediately stops the current key working. Deploy the replacement as a coordinated change to avoid an outage.
Revoke a key
Select Revoke when the site should no longer initialize chat. Revocation is immediate. Remove the old value from site configuration, source maps, and deployment variables even though the key is publishable.
Security model
The allowed-origin check is the control. Do not treat an embed key like a server secret, and do not use it as proof that a visitor is authenticated. Visitor identity and authorization must be established by the integration’s supported identity flow, not by hiding this key.