Widget

Pin and verify the React Widget against an Andy Agent manifest.

Outcome

Render the released React Widget for one Agent and verify its exact allowed origin.

Prerequisites

• Active reviewed Knowledge and Public Chat.
• A manifest from the target Workspace and Agent.
• A client-only React boundary on an exact HTTP(S) origin.

Install and render

andy widget manifest --workspace <workspace-id> --agent <agent-id-or-slug> --json
bun add andy-widget-react@2.0.5

Render AndyChat and pass the manifest’s Agent ID as embedId. Pin the exact package version returned by the manifest; do not use latest, the retired hosted script, or an iframe.

"use client";

import { AndyChat } from "andy-widget-react";

export function SupportWidget() {
  return <AndyChat embedId="<agent-id>" />;
}

Configure the origin

andy widget configure --workspace <workspace-id> --agent <agent-id> --config ./widget.json --json
andy widget verify --workspace <workspace-id> --agent <agent-id> --origin https://example.com --json

Origins are exact scheme://host[:port] values. Paths, credentials, query strings, fragments, and wildcards are rejected.

Machine-readable verification

Require andy widget manifest ... --json to return the expected Agent, exact package/version, and configuration. Then require widget verify to report identity, origin, Knowledge, Public Chat, and answer checks as successful.

Next step

Connect the same catalog to an agent client through MCP.