Dashboard Configuration
Configure Website SDK public keys, website domains, OTP email settings, and session behavior
In the Tiquo dashboard under Settings > Website SDK, you can configure how the DOM Package is allowed to run.
| Setting | Description |
|---|---|
| Public Key | Your SDK public key (pk_dom_xxx). Can be regenerated, which invalidates active SDK integrations. |
| Websites | The websites that can use the public key. Each website has its Allowed Domains, where the SDK is permitted to run, and a sender name and email theme for OTP emails. |
| Session Duration | How long sessions last, in whole days from 1 to 365. Default is 30 days. |
Requests from domains outside the allowed domain list are rejected.
Installation code shows copyable snippets with your public key for installing and initializing the DOM Package. Saved cards embed code has copy-paste embed code for the card form and saved-card manager, in the same formats as a booking flow embed.
Website domains
Under Websites, select Add Website, then add every hostname that serves the website under Allowed Domains. Protocols, paths, ports, and a leading www are removed automatically, so https://www.example.com/pricing is saved as example.com.
Local addresses can't be added as allowed domains: localhost, any *.localhost name, 127.x.x.x, 0.0.0.0, and the IPv6 loopback (::1). The field shows "Localhost can't be added as a website domain. Use your live website's domain instead." and the settings won't save until you remove it. This stops any local development server from using your organisation's live public key against real customer data. The same rule applies to the domains of websites under Content.
To test an integration before it goes live, deploy it to a staging or preview site on a real domain, such as staging.example.com or a preview domain from your hosting provider, and add that domain to the website. Remove it when you no longer need it. See Testing before you go live.
Session duration
Session Duration sets how long a signed-in customer stays signed in before they need a new email code. Enter a whole number of days from 1 to 365. The field accepts digits only and stops at 365; if you clear it, it returns to the last valid value when you leave the field.