By industry
Car dealershipsCar rentalDetailers & valetersGarages & MOT centresFashion retailersFurniture storesPet storesJewellersPlumbersElectriciansHVAC & heating engineersCleanersLandscapers & gardenersRoofersHotels & guest housesRestaurantsCafésGyms & wellness studiosTour operatorsEstate agentsLetting agentsProperty managementServiced accommodationAccountantsLaw firmsInsurance brokersMortgage brokersRecruitment agenciesPrivate schoolsNurseriesChildren's activity clubsTraining providersTutoring centresCharitiesMuseums & attractionsReligious & community centresSports clubs
All guides(35)

Get it live

Allowed domains explained

Allowed domains is the short list of websites that may load your bot and get answers from it.

About 2 minutes. You’ll do three things:

  1. open your bot's settings
  2. type your domain
  3. save

Allowed domains is the list of websites that are allowed to talk to your bot. A visitor on any other website gets turned away, and no answer comes back.

Say your website is example.com. Type example.com into the box and your whole site is covered in one go. The match reads from the dot leftwards, so any address ending in .example.com counts.

One entry of example.com, and what it covers
Address the visitor is onCovered?
example.comYes. An exact match.
www.example.comYes. It ends in .example.com.
booking.example.comYes. It ends in .example.com.
example.co.ukNo. A different domain, so add it as well.
evil-example.comNo. The match starts at the dot.

Where the list lives

  1. In the left sidebar, click Bots.

  2. Click your bot's row in the list.

    That opens General settings for the bot.

  3. Under Bot details, type your domain into Allowed domains (comma-separated).

    The empty box shows the shape it wants: example.com, www.example.com

  4. Click Save.

    Saved. appears beside the button.

The list exists so nobody else can put your bot, and your credit balance, on their own site. Your bot's ID sits in the snippet in plain sight, so this check is what makes copying that snippet useless.

Cases worth knowing about
CaseWhat to do
A staging or test siteAdd its address while you test, then take it back out when you are done.
A site builder's preview addressPreview addresses count as separate sites. Add yourshop.myshopify.com or yoursite.webflow.io while you test there.
Two websites, one botPut both domains in the same box, separated by a comma.
You pasted a full web addressNo harm done. https://example.com/contact is saved as example.com.

If it didn’t work

The widget isn't showing on my site

Check
Read the Allowed domains (comma-separated) box and compare it with the address in your browser bar.
Fix
If your domain is missing, add it, click Save and reload. If it is already there, the cause is elsewhere — the Widget not showing guide covers the rest.
Resolved when
The bubble appears on your site.

The bubble is there, but every message fails

Check
A message fails when the address in the browser bar is not covered by the box. Check for a subdomain or a preview address you forgot.
Fix
Add the address you are actually on, click Save, then reload the page.
Resolved when
The bot answers your test question.

I added the domain and nothing changed

Check
Allowed domains are checked on every request, so a change takes effect straight away.
Fix
Reload the page. If it still fails, read the box back slowly — a misspelt domain saves without any complaint.
Resolved when
The bot answers on that site.

My domain is in the box and the bot still answers nobody

Check
Check Status on the same page. A bot that is not active answers nobody, whatever the domain list says.
Fix
Set Status to active, click Save, then reload your site. If it still fails, email hello@adoomi.ai and tell us the domain and which bot it is.
Resolved when
The bot answers, and the Install page shows the Install code block.

What this can’t do

  • An address with a port number cannot be allowed. Typing localhost:3000 saves as localhost, and the check then never matches — test on a real domain or a staging address instead.
  • Wildcards do nothing. An entry of *.example.com matches no visitor at all, and plain example.com already covers every subdomain.
  • The box holds up to 50 domains.
  • Allowing a domain does not put the bot on it. You still paste the snippet on each site yourself.

Next steps