How to use Content Security Policy (CSP) with Merge Agent Handler

Last updated: April 3, 2026

Overview

Many Merge customers use a CSP to provide an added layer of security and restrict which URLs and domains they allow interaction with in the embedded linking flow.

Merge Agent Handler Link policies:

You can learn more about how to add a CSP here, but below are the URLs and domains Merge requires: