Skip to main content

Restrict your AI Agent to a list of approved domains

Safeguard your AI Agent against attack by malicious parties by authorizing all the domains where you'd like your AI Agent to appear. Your AI Agent will only show for your website visitors if you authorize your website's domain URLby adding it to your approved domains list in Ada.

Add a domain​

Add a domain to the Approved domains list:

  1. On the Ada dashboard, go to Channels > web chat, then go to the Privacy & security tab.

  2. Beside Approved domains, click Add domain. The Add An Authorized Domain window appears.

  3. In the Add An Authorized Domain window, in the Domain URL field, enter the domain URL you want to authorize. Use the following formats:

    • Single domain: https://www.yourdomain.com

    • Wildcard URL matching for all subdomains: https://*.yourdomain.com

      • Use the top level domain URL only. Do not include any page paths. If you have many subdomains, but want to include only some of them, you have to add each one individually.

      • Use wildcards for domains with subdomains. The top level domain itself needs to be added separately (e.g., https://domain.com needs to be added separately from https://*.domain.com).

    • All domain variants need to added separately.

      • http://www.yourdomain.com

      • http://yourdomain.com

      • https://www.yourdomain.com
      • https://yourdomain.com

  4. Click Add to add the domain URL to the domain list.

Edit a domain​

You can edit any domains already in your list.

  1. On the Ada dashboard, go to Channels > web chat, then go to the Privacy & security tab.

  2. Under Domain, click the pencil icon next to the domain entry you want to edit.

  3. In the Edit Domain window, make your changes to the domain URL in the Domain URL field.

  4. Click Save.

You'll now see the updated domain in the domain list.

Remove a domain​

  1. On the Ada dashboard, go to Channels > web chat, then go to the Privacy & security tab.

  2. Under Domain, click the trash can icon next to the domain entry you want to delete.

  3. In the Confirm Domain Removal window that appears, click Yes, Remove Domain.

This removes the domain from the list. Your AI Agent will no longer launch on that domain.

Troubleshooting​

If the bot is embedded on a URL but is not displaying as expected, it is likely that it is being blocked from loading on that site. To investigate:

  1. In Chrome, Firefox, or Safari, right-click any part of the page and select Inspect Element.

  2. Access the console from within the inspector tool.

  3. On the webpage, click the chat icon to launch the AI Agent.

  4. Look for errors in the console. It is likely error messages will indicate that it "violates the Content Security Policy directives." In other words, that the URL is not included in the AI Agent's list of approved domains.

  5. Cross-reference your bot's list of approved domains with the URL you are testing, to make sure the domain URL was formatted properly when you added it to your AI Agent.

Have any questions? Contact your Ada team—or email us at .