Normally you don't need this page — click the toolbar icon and press Sign in to CrawlBrain. These settings are for staging endpoints and awkward sites.
https://api.crawlbrain.com, https://api.crawlbrain.com/v1, https://app.crawlbrain.com, or a localhost URL for staging.
Content-Security-Policy that blocks scripts from cdn.crawlbrain.com, where the widget lives. The extension prefers a locally-bundled copy of the widget (see README) which loads from the extension's own origin and bypasses strict CSPs automatically. This toggle is a secondary fallback for sites whose CSP is set via response headers. Enable only during demos. It disables CSP on every page you visit.