Wix — install the widget

On Wix the tag goes in through the site’s Custom Code setting — no code editing, one placement. The tag is the same on every platform — Install the widget has the general picture; this page has the exact place on Wix.

The tag

The tag — put your app id in place of app_abc123

<!-- guuey widget. Add this site to the app's allowed domains or the embed is refused. -->
<script src="https://widget.guuey.com/v1.js" data-app="app_abc123" async></script>

Where it goes

1. In your site's dashboard go to Settings, then Custom Code (under Development & integrations), and click + Add Custom Code.
2. Paste the tag, give it a name, choose All pages under "Add Code to Pages" (Wix adds it to every page, including ones you create later) and pick Body – end as the placement.
3. Choose to load the code on each page your visitor opens (so the launcher mounts on every page load), then apply.

• Wix lists two prerequisites for custom code: the site must be published and have a connected domain.
• Wix also offers Head and Body – start placements; the widget belongs at Body – end.

Verified against the vendor's documentation on 2026-09-09: Embedding custom code on your site (Wix Help Center). Vendor interfaces change — if a step no longer matches what you see, the vendor's page above is the source of truth.

Before it shows

Allow your site’s origin (console → Embed → Allowed origins, or guuey apps update <appId> --domains <origin>; about 15 seconds to apply), add the CSP allowances if your site sets a policy, then verify with guuey apps check <appId> --origin <origin> — the steps are on Install the widget.

Give this to your coding agent

Paste into your coding agent

Install the Guuey chat widget on this Wix site. Before changing anything,
read https://docs.guuey.com/embed/wix.md and https://docs.guuey.com/install-widget.md
(the raw markdown of the two pages) and follow them exactly; do not invent options
or steps they do not contain.

1. Put this tag in the site's Custom Code setting (Settings → Custom Code → + Add Custom Code), placed at Body – end on all pages, loading on each page the visitor opens, with my app id <appId> in place of app_abc123:
   <script src="https://widget.guuey.com/v1.js" data-app="app_abc123" async></script>
   Add nothing else to the tag — except your page's CSP nonce, if the site uses
   nonces (step 3).
2. Tell me the exact origin(s) my pages are served from (scheme + host) so I can
   add them to the app's allowed domains in the console (Embed → Allowed origins)
   or with: guuey apps update <appId> --domains <origin>. Remind me that a bare
   hostname covers the apex and every subdomain, while a scheme-prefixed origin is
   an exact match, and that changes take about 15 seconds to apply.
3. If this site sets a Content-Security-Policy, add exactly these allowances and
   nothing more. If the policy uses nonces (script-src 'nonce-...'): render the
   site's per-request nonce on the widget tag the way its other script tags carry
   it — that is what lets the loader run, and the loader puts the same nonce on the
   one <style> it injects; then allow https://widget.guuey.com in frame-src and
   connect-src. If the policy uses host allowlists: add https://widget.guuey.com to
   script-src, frame-src and connect-src, and 'unsafe-inline' to style-src.
4. When I've saved the origin, verify with:
   guuey apps check <appId> --origin <origin>
Stop and ask me before any step those two pages do not describe.