> ## Documentation Index
> Fetch the complete documentation index at: https://paperlinkai.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Lock the widget to your sites

> Allow the widget to run only on the sites that you own.

Allowed origins are the sites where your widget can run. Set them so that a copied key does not work on other sites.

> [!NOTE]
>
> Only workspace Admins can change this. Members see the current values without edit controls.

## Set your allowed origins

**1. Open the widget settings**

Select **Settings** in the dashboard sidebar. Find the Widget card.

**2. Enter your sites**

Find **Allowed origins**. Enter one site on each line. Commas also work.

**3. Save**

Select **Save widget settings**.

The helper text in the dashboard says:

> One per line. The widget only works on these sites. Leave empty to allow any site (fine for testing, not for production).

## Rules for origins

| Rule | What it means |
| - | - |
| Exact match | The origin must match the site exactly. Wildcards do not work. |
| Scheme and port matter | `https://example.com` and `http://example.com` are different origins. A different port is also a different origin. |
| `www` is separate | `https://example.com` does not cover `https://www.example.com`. Add both. |
| No paths | Enter only the host, for example `https://example.com`. Do not add a path. |
| Bare hosts | If you enter a host with no scheme, Paperlink AI adds `https://`. |
| Maximum | You can add up to 50 origins. |
| Empty list | An empty list allows any site. |

## What a blocked site shows

When a site is not in your list, the widget shows this message:

> This website isn't allowed to use this assistant.

> [!TIP]
>
> Add your staging host to the list too. Then the widget also works when you test before launch.

> **[Allowed origins and Turnstile](https://paperlinkai.com/docs/developers/security/allowed-origins-and-turnstile.md)**
>
> Learn how origins and Turnstile protect your key.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.