Claimful docs

Universal widget

Universal checkout widget setup, events, tokens, and CSP notes.

Quick start

Add the universal widget script (pinned with an integrity SRI hash and crossorigin="anonymous" per ADR 0031), then render <claimful-widget> with the required data-merchant-id and data-publishable-key attributes plus data-order-amount-cents. The publishable wk_ key is public by design and authenticates the widget; never place a secret mch_ key in page HTML. Configure merchant branding through the frozen Claimful.configure() API.

Contract

The widget exposes six states, five lifecycle events, a closed Shadow DOM, and the --widget-* CSS token namespace. The quote token never appears on window or in lifecycle payloads.