Deyo developer guide

Install once, then constrain access with origins and CSP.

Deyo does not expose a public management API or SDK. This guide covers the supported website widget interface: installation, placement, origin control, and verification.

Workspace installation code

Copy the actual snippet from Settings > Install. Do not guess a workspace ID or reuse one from another workspace.

<script async src="https://app.deyo.kr/widget/v1.js"
  data-workspace-id="YOUR_WORKSPACE_ID"></script>

Safe framework placement

Plain HTML

Insert the script once before the closing body tag in the shared template. Keep the async attribute.

Next.js or React

Load it after hydration in a customer-facing layout. Exclude authentication, onboarding, and the widget iframe itself.

SPA routers

Load once in the application shell rather than recreating it after every navigation.

Tag managers

Check consent and CSP, and ensure multiple triggers cannot inject duplicate scripts.

Verify after deployment

  1. 1The launcher appears once and opens and closes correctly on the production URL.
  2. 2Desktop, real mobile, and the open software keyboard remain usable.
  3. 3An origin outside the allowlist cannot initialize the widget.
  4. 4Grounded questions cite the right material and out-of-scope questions are not guessed.
  5. 5A handoff reaches Deyo Inbox and each configured notification recipient.