Skip to main content

NaviBot Integration & Prerequisites

Deploying the NaviBot assistant to your website requires minimal technical effort. This guide outlines the prerequisites, anti-spam configuration, and webhook setup for connecting with your external systems.

1. Client Site Prerequisites​

To ensure seamless operation of the concierge widget, the host website must meet these requirements:

  • HTTPS Mandatory: The parent website must serve pages over valid HTTPS. Modern browser security policies block mixed content scripts on non-secure HTTP pages.
  • Content Security Policy (CSP): If your website issues custom security headers, whitelist the NaviBot CDN and WebSocket endpoints: 
    script-src https://navi.1it.pro;
    connect-src https://navi.1it.pro wss://navi.1it.pro;
    img-src https://navi.1it.pro data:;
  • Single Script Tag Embed: Insert the lightweight snippet before the closing </body> tag on all public pages.

2. Anti-Bot Protection (Cloudflare Turnstile)​

To prevent automated malicious bots or scrapers from exhausting your AI token budget through repetitive spam submissions, NaviBot integrates with Cloudflare Turnstile:

  • Invisible User Verification: Legitimate human visitors experience zero friction (no annoying image puzzles or distorted text challenges).
  • Automated Rate Limiting: High-frequency script abuse is rejected automatically before hitting upstream LLM completions.
  • Enterprise Keys: Turnstile site keys are managed automatically within the hosted platform.

3. Webhook Delivery into External CRMs​

When a visitor submits an inquiry or provides their contact information inside the chat, NaviBot can dispatch a real-time HTTP POST webhook to your endpoint:

{
  "event": "lead.captured",
  "inboxId": "inbox_abc123",
  "timestamp": "2026-11-10T14:30:00Z",
  "contact": {
    "name": "Alex Miller",
    "phone": "+48 500 123 456",
    "email": "[email protected]"
  },
  "summary": "Interested in Business package implementation for veterinary clinic.",
  "sourceUrl": "https://yourcompany.com/services"
}
  • Configure your target webhook URL under Settings ──> Webhooks in your NaviBot dashboard.
  • Deliveries are signed with a cryptographic HMAC secret to verify authenticity.