Skip to main content
Update site-level settings (tenant domain). 
POST /api/settings
{
  "google_code": "UA-12345678-1",            // string; empty/null to remove
  "noindex": 1,                              // 1|"1"|true to enable; 0|"0"|false to disable
  "statistics_iframe": "https://.../embed"   // url; empty/null to remove
}

​
Security considerations

  • Validate statistics_iframe against an allowlist of domains server-side.
  • Enforce Content-Security-Policy for iframes if used.