Public anonymous widget
An agent on a public page — a help center, a product site — that anyone can use without signing in. The build is mostly about guardrails, since visitors are anonymous and the page is exposed to the open internet.What you’ll connect
Build it
1
Keep capabilities read-only and public-safe
Connect only what’s safe to expose anonymously. Prefer a knowledge
collection of public help content over integrations that reach internal
systems. Leave privileged and destructive tools off.
2
Set a firm safety profile
On the profile, add boundaries against revealing
internal information, making promises, or going off-topic. This is your main
control on a public surface.
3
Embed anonymously and lock the origin
Add the web widget with Anonymous identity, and
list exactly your site’s origin(s) under Allowed origins — requests from
anywhere else are refused.
4
Turn on the AI disclaimer
Set the AI disclaimer so visitors know they’re talking
to an agent.
5
Test the limits
In Preview, confirm the agent stays on-topic and refuses what it should.
Notes
- Anonymous guardrails are automatic. Cobalt rate-limits uploads, dictation, and voice per visitor and caps anonymous voice per tenant per day, so a public embed can’t run up your usage. See Voice.
- Cross-site cookies. An anonymous visitor is remembered with browser storage; when your page and the widget are on different sites, some browsers partition that storage and a visitor may get a fresh session each visit. This is expected on a public anonymous embed — see the web widget page.