Docs

Embed & tokens

One script tag. No route changes. Works on custom shops and WooCommerce.

Production snippet

<script
  src="https://api.dyotona.com/widget.js"
  data-token="wgt_YOUR_TOKEN"
  async>
</script>

src must be the Dyotona API host that serves /widget.js (https://api.dyotona.com). Locally use http://localhost:4000/widget.js.

Tokens

  • Widget (wgt_…) — public; goes in the script. Identifies the store.
  • Secret (sec_…) — dashboard only. Never paste it on the storefront.

Rotate from Embed. Confirm, then copy immediately. The dashboard stores hashes, not the full token.

Allowed domains

Widget API calls are locked to hostnames in Settings (for example yourstore.com). Include www if that is what shoppers use. Locally, localhost is always allowed.

Where to paste

HTML / custom: layout or footer file, immediately before </body>.

WordPress / WooCommerce: a footer snippet plugin, or Appearance → Theme File Editor → footer.php before </body>. You do not need a WooCommerce.com app.

Signed-in merchants should use Getting started in the app—it builds the snippet for that store.

← Getting started