Support
Troubleshooting · FAQ
Common problems and how to fix them. If you are still stuck, use the form on the contact page or email sean@okitour.com.
#The widget does not appear
- Check that the project ID in the install code is correct.
- Check that the site domain is listed under Allowed domains, including whether it uses www.
- If you use a Content-Security-Policy, add
https://app.cliptalk.nettoscript-srcandframe-src. - Check the Console and Network tabs in the browser developer tools.
Content-Security-Policy:
script-src 'self' https://app.cliptalk.net;
frame-src https://app.cliptalk.net;
connect-src 'self' https://app.cliptalk.net wss://app.cliptalk.net;#The AI bot does not reply
- Confirm the AI bot is enabled and saved (it can take up to 20 seconds to apply).
- On Free, after the 30-session trial the customer is connected straight to an agent. Check usage on the Subscription tab.
- The AI does not reply in a conversation an agent has already joined.
#The AI is not calling my API
- Confirm the connector is My API and the studio shows “Connected to the AI bot”.
- Confirm the operation is enabled and the description is specific enough to match customer questions.
- Operations that need the customer require a successful identity check first. Add an identity-check hint so the customer provides the details up front.
- An API rule such as “use get_order for shipping questions” makes this more reliable.
#The API test fails
| Symptom | Check |
|---|---|
401 / 403 | Secret value, auth type (Bearer vs header), header name, key permissions, IP allowlist |
404 | Whether base URL + path matches the real address, and whether a version path such as /v1 is duplicated |
bad_json | A login page or HTML error page came back — check the path and auth |
timeout | API latency and firewall |
blocked_address | Private-network addresses cannot be used. Expose a public address or put a gateway in front |
secret_origin_mismatch | Re-enter the secret after changing the base URL domain |
#Can Cliptalk staff see our keys?
Keys are stored encrypted and are not shown in the dashboard, the admin screens, or API responses. Decryption happens only in server memory at the moment of a real API call. Even so, use a bot-only key with minimum permissions.
#Where are API responses stored?
API responses are used only while the AI is writing a reply, and are not stored separately. The conversation keeps the reply sent to the customer and a short result summary of action operations (the AI action log).