PartGrid.ai
Documentation menu

Restrict embeds to approved domains

Allow public PartGrid embeds to load only from approved storefront and portal domains.

Overview

Domain restrictions control which websites can request and display your public PartGrid embeds. Add every storefront, portal, staging site, or development host that should be allowed to load the embed.

When a public embed request comes from a domain that is not on the list, PartGrid denies access.

Add approved domains

Open Integrations → Embed → Behavior and find Whitelisted Domains under Embed Behavior & Access.

  1. Enter a domain or complete HTTP(S) URL.
  2. Add each additional storefront, portal, staging site, or development host separately.
  3. Select Save Changes.
  4. Open the page containing the embed and confirm that it loads.

Accepted domain values

You can enter a domain, a complete HTTP(S) URL, or a local host with a port. PartGrid stores the normalized origin used for matching. Paths such as /parts or /catalog do not need to be added.

  • example.com
  • https://shop.example.com
  • localhost:3000

Add subdomains separately

A domain does not automatically include its subdomains. Add both example.com and shop.example.com when embeds must work on both websites. The same applies to staging, regional, and dealer portals.

Allow all domains

Enter * to allow public embeds to load from any external domain.

Wildcard access requires a plan that supports it. Restricting access to named domains is safer when embeds are intended for a known set of storefronts or portals.

Domain limits

The number of external domains you can add depends on your PartGrid plan. PartGrid shows an error when the saved list exceeds the available limit.

PartGrid-owned embed and preview hosts do not count as external customer domains.

Troubleshooting

Check the following when an embed works in PartGrid but not on the target website:

  • Confirm that the exact hostname and port are listed.
  • Add the subdomain separately, such as www.example.com or shop.example.com.
  • Include the port for local or non-standard environments, such as localhost:3000.
  • Confirm that the target page loads the embed directly in a browser context.
  • Confirm that the schematic or collection is available for public use.
  • Confirm that Public embed connectivity is connected under Integrations → Embed → Behavior.
Restrict embeds to approved domains | PartGrid documentation