Allowed domains

The Access → Allowed domains tab holds the list of sites where the verification widget works.

KYC SDK works only on the domains added here. Add the domains where you embed the widget.

Domain rules

• The widget runs only on https sites.
• You can add a mask: *.example.com allows every subdomain of example.com, but not example.com itself. To allow the domain itself, add it as a separate entry.
• Changes take effect within two minutes.
• Until at least one domain is added, Web SDK settings in the scenario are unavailable.

Only the account owner or a user with the delegation right can change domains.

Add a domain

1. Open Access → Allowed domains.
2. Enter the domain in the Domain (e.g. app.example.com) field.
3. Click Add. The message "Domain added" appears and the domain shows up in the list.

While the list is empty, the tab reads "No domains added yet".

Delete a domain

1. Click Delete in the domain's row.
2. Confirm: "Delete the domain «…»? Within two minutes the widget stops working on it, and verifications in progress there will be interrupted."
3. The message "Domain deleted" appears.

Error messages

Message	What to do
Enter a domain	The field is empty — enter a domain.
Enter a domain, e.g. app.example.com, or a mask *.example.com	Check the spelling: a domain name or a mask only, no path.
The widget runs only on https sites	Enter the domain of a site that opens over https.
This domain has already been added	The domain is already in the list.
The domain is too long (255 characters at most)	Shorten the domain.
This domain has already been deleted. Refresh the page	The list was changed in another tab or by another user — refresh the page.
You have no right to change domains	Contact the account owner.

What's next

• Access — API keys.
• Web SDK — embedding the widget on your website.