Where do I find the public key?

Widget, after you create a workspace. It is data-website. Origins next to it are the lock.

Do I put theme in the snippet?

No. Theme, radius, launcher, and copy are saved on the Widget screen. The snippet only carries the public key.

Will the script slow the page?

The loader is small. The panel loads in an iframe. Put the script at the end of body if you care about LCP.

Cove

Install snippet

One tag before the closing body

data-website is the only required attribute. Allowed origins are the lock. Theme, radius, and launcher live in Widget — not as snippet attributes. Shopify, WordPress, and Webflow: theme footer or custom code.

Paste this

The snippet is the install.

Shopify, WordPress, and Webflow: theme footer or custom code. Paste the tag — there is no marketplace listing to wait on. Mobile apps use the official WebView SDK. Appearance is not in the tag, so you are not shipping theme CSS on first paint. See /sdk.

Paste before </body>. Replace YOUR_PUBLIC_KEY from Widget.

<script src="https://coveinbox.co/widget.js" data-website="YOUR_PUBLIC_KEY" async></script>

Copy into the page, then set the look in Widget

Origin lock

Real https origins, no trailing slash. www and apex are different. A copied key on another domain is rejected. data-website is public — it is not a secret API token.

What loads

widget.js writes an iframe to /w/{key}. Look is fetched from public config — about a minute of cache. Theme, radius, and launcher live in Widget studio.

If the launcher never appears

The origin is usually missing — including www. If the console says Refused to load, add script-src and frame-src for coveinbox.co.

Content-Security-Policy:
  script-src 'self' https://coveinbox.co;
  frame-src 'self' https://coveinbox.co;
  connect-src 'self' https://coveinbox.co wss://coveinbox.co;

One script. A mobile SDK. A PWA inbox.

Paste the tag in Shopify, WordPress, or Webflow. Install the iOS / Android / React Native SDK. Operators install the inbox as a PWA. See /sdk.

FAQ

Frequently asked questions

Public key, theme (not in the tag), and whether the loader hurts LCP.

: Widget, after you create a workspace. It is data-website. Origins next to it are the lock.
: No. Theme, radius, launcher, and copy are saved on the Widget screen. The snippet only carries the public key.
: The loader is small. The panel loads in an iframe. Put the script at the end of body if you care about LCP.

Blog

After the tag is on the page

Paste it. Then open Widget.

Fourteen-day trial. The snippet does not set the look. The studio does.