Cloudflare connection and widget installation

What the connection does

Message’s Cloudflare provider integration supports authorized DNS setup. It does not automatically provision a Worker that injects the chat widget into every response.

Install the widget on the site

Add the supported snippet in your website’s template or builder. You do not need to move DNS providers to install chat.

<script async src="https://app.message.com/widget.js"
  data-site-id="YOUR_EMBED_ID"></script>

Custom edge deployments

If your team implements its own Worker injection, you own its route, CSP and caching behavior. Do not inject into non-HTML responses or install twice. That is a custom implementation, not a Message-managed one-click widget installer.

Verify the published installation

Test the published page in a separate browser session. Confirm widget.js loads, the launcher opens, a visitor message reaches Inbox and an agent reply returns. Test with your site’s actual content security policy, consent controls and mobile layout.

The script connects to its own origin by default. With the standard snippet, allow the relevant script and HTTPS/WSS requests to app.message.com. Check image, media and injected-style requirements separately. Do not put an agent JWT or integration secret in the page.