Skip to content
Login Contact

Authorized domains for traffic filtering

Authorized domains let you explicitly define the only domains allowed to send traffic to your content. When configured, traffic is accepted only from these domains, and everything else is blocked.

We only recommend using this feature if your are going to use Unique article id. Or you experience a lot of spam sites using your content and code.


Enable authorized domains if you are using the cms_id feature. This is strongly recommended.

The cms_id enables content ownership identification across domains. Without restricted domains in place, unauthorized sites could reuse your cms_id, potentially inflating analytics or misusing your content attribution. Restricting traffic to known domains ensures that only approved sources can represent your content and identity.


  • If no restricted domains are set, then traffic is accepted from everywhere (default behavior).
  • If one or more restricted domains are set, then only traffic from those domains will be accepted. All others will be blocked.

You can configure the restricted domains via the Tracking Rules panel in CompassApp.

Changes take effect immediately and apply to all incoming traffic.


When a domain is not in the restricted list:

  • Its traffic is permanently ignored.
  • It does not count toward analytics, recommendations, or reports.

Only users with Admin or Tracking rules permissions can modify the restricted domains list.


  • No entries = traffic from all domains is allowed.
  • At least one entry = only those listed domains are allowed.
  • Top domain feature included. For example:
    • example.com includes sub.example.com

What happens to traffic from unauthorized domains?

Traffic from domains not on the authorized list is permanently ignored. It does not count toward analytics, recommendations, or reports.

Who can configure authorized domains?

Only users with Admin or Tracking rules permissions can modify the authorized domains list.

Should I use authorized domains with CMS ID?

Yes. Without authorized domains, unauthorized sites could reuse your cms_id, potentially inflating analytics or misusing your content attribution.