Integration
Publishable key, allowed origins, identity secret.
The Integration page in the console has everything you need to embed the widget or call chat from your backend — no need to leave the console to look up an API key or publishable key.
Publishable key
Your public key (pk_live_...), safe to put in your web page's source —
it only opens token exchange, and only from the domains you allow below.
Click Regenerate key to revoke the old one immediately (say, you
suspect it leaked) — every widget still using the old key stops working
right away.
Allowed domains
The list of origins (scheme + host + port, e.g. https://shop.example.com)
allowed to use your publishable key. A publishable key with no domain
in this list is refused entirely — this is the first thing to set up
before embedding the widget.
Identity secret
The secret used to sign your signed-in end-users' identity (produces
the user-hash for the widget's user-hash attribute — see
Authentication). The full value is shown
once, right after it's created or regenerated — save it to your
backend immediately; it must never reach a browser.
Ready-made snippets
The page also generates copy-paste HTML/JS, pre-filled with your
publishable key and the correct API host — ready for the widget or a
server-side call to /v2/chat. See Widget and
Server-to-server for the detail.