Settings - Sitecopilot

Update site-level settings (tenant domain).

POST /api/settings
{
  "google_code": "UA-12345678-1",            // string; empty/null to remove
  "noindex": 1,                              // 1|"1"|true to enable; 0|"0"|false to disable
  "statistics_iframe": "https://.../embed"   // url; empty/null to remove
}

Security considerations

Validate statistics_iframe against an allowlist of domains server-side.
Enforce Content-Security-Policy for iframes if used.