Allowed origins and appearance

The studio is more than a color. Origins are the lock.

Origins

List the real https origins that may load this messenger. No trailing slash. https://www.example.com and https://example.com are different. A copied site key on another domain is rejected.

Localhost is fine for a laptop preview if you add it. Remove it before you treat the key as production-only — anyone who can load the snippet from that origin can start a chat.

What you can change

• Theme: light, dark, glass, brand, or match the visitor’s system.
• Corner radius in pixels, from square (0) to round. It applies to the panel, bubbles, chips, launcher, and badge.
• Launcher: icon or pill, five marks or your own upload. Left or right.
• Home headline and welcome as separate fields. Starter chips, one per line.
• URL-contains + delay page teasers (message + delay). Broadcasts are a separate email campaign screen.
• Show or hide the Help and News tabs. Badge in red or brand color.
• Hide the “We run on Cove” mark (listed on Plus).

Save on the Widget screen. The next load of the iframe picks the new values up. There can be a short cache on the public config endpoint (about a minute), so a hard refresh if you do not see the color yet.

White-label here is appearance. Help custom domains are on the Help center screen. Native apps: add cove-mobile://your.bundle.id here, then follow Install the mobile SDK.