Skip to content

Website integration

Show a wizard on your commerce website, built and connected by Kabaido as part of your website build.

Website integration shows a wizard preset on your commerce website against your own catalogue. It is available only on commerce websites built by Kabaido: it is requested as part of your Commerce website build and the Kabaido team builds the wizard into your site and connects it. It is not a self serve iframe and cannot be set up outside a Kabaido build. Commercially it is a subscription add-on at £49 a month per site, added as a quantity line on your organisation's subscription from the billing page.

How it is set up

Request website integration when your commerce website is scoped or at any point after it is live. The Kabaido team creates the site key, locks it to your domain, wires the wizard into your pages against your catalogue and connects the usage events back to your account. Everything below describes what the team configures, visible in your settings once connected.

Embed keys

Each connected site uses an embed key with the wze_ prefix. The key is shown once in full when created, then masked. Keys are created during the build and can be rotated and revoked by organisation admins from Settings under Integrations; the number of active keys follows the add-on quantity on your subscription.

The domains allowlist

Each key carries a list of allowed domains. Requests are checked against the Origin header, then the Referer host, with an exact host match: subdomains must be listed explicitly. Requests from hosts not on the list are refused.

The embed surface

The wizard renders in embed chrome at /embed/wizard/ followed by your key. The page is public but unlisted: it is excluded from search indexing and from the sitemap, and a missing, revoked or unentitled key returns not found. Embed runs are recorded against your organisation with the source marked as embed.

The events endpoint

Connected sites report usage to POST /api/wizard/events. The body carries the key, the preset, the event kind and a small typed meta object; there is no free text and no personal data.

json
{
  "key": "wze_...",
  "preset": "bandsaw-blade",
  "kind": "run_completed",
  "meta": {
    "material": "mild-steel",
    "shape": "solid-round",
    "engagedWidthMm": 60,
    "pitch": "4/6",
    "family": "bi-metal",
    "matchedCount": 3
  }
}
  • Kinds: run_completed, result_selected and no_match.
  • Responses: 202 accepted, 401 unknown key, 403 origin not on the allowlist, 429 rate limited.

Treat the embed key like a credential: it identifies your organisation. Rotate it from settings if it leaks and the Kabaido team updates your site connection; the domains list keeps a copied key useless elsewhere.