Website integration

Website integration runs a wizard preset on your own website against your own catalogue. It is a subscription add-on at £49 a month per site, added as a quantity line on your organisation's subscription from the billing page.

Embed keys

Each site uses an embed key with the wze_ prefix. The key is shown once in full when created, then masked. Keys are created, rotated and revoked by organisation admins from Settings under Integrations, and the number of active keys follows the add-on quantity on your subscription.

The domains allowlist

Each key carries a list of allowed domains. Requests are checked against the Origin header, then the Referer host, with an exact host match: subdomains must be listed explicitly. Requests from hosts not on the list are refused.

The embed surface

The wizard renders in embed chrome at /embed/wizard/ followed by your key. The page is public but unlisted: it is excluded from search indexing and from the sitemap, and a missing, revoked or unentitled key returns not found. Embed runs are recorded against your organisation with the source marked as embed.

The events endpoint

Site installs report usage to POST /api/wizard/events. The body carries the key, the preset, the event kind and a small typed meta object; there is no free text and no personal data.

{
  "key": "wze_...",
  "preset": "bandsaw-blade",
  "kind": "run_completed",
  "meta": {
    "material": "mild-steel",
    "shape": "solid-round",
    "engagedWidthMm": 60,
    "pitch": "4/6",
    "family": "bi-metal",
    "matchedCount": 3
  }
}

• Kinds: run_completed, result_selected and no_match.
• Responses: 202 accepted, 401 unknown key, 403 origin not on the allowlist, 429 rate limited.