How to use Content Security Policy (CSP) with Merge

Last updated: May 28, 2025

Overview

Many Merge customers use a CSP to provide an added layer of security and restrict which URLs and domains they allow interaction with in the embedded linking flow.

Merge Link requires the following policies:

You can learn more about how to add a CSP here, but below are the URLs and domains Merge requires: