> Plausible: what your AI agent should know — from The Handover, the-handover.org/services/plausible
> © Captivated Ltd — free to use in your own work, not to redistribute as a collection. the-handover.org/licence

# Plausible

What we tell an AI agent working on a project that uses Plausible: 1 rule, 1 learned the hard way.

Build a full rootnote set for a Plausible project: https://the-handover.org/build?areas=working-agreement,analytics&analytics=plausible

Plausible published no file for agents when last checked; this page is the only agent-facing guidance for it we know of.

### Plausible needs its origin in connect-src as well as script-src

*When also using Cloudflare Pages or Workers.*

> Hard-won · Leon Mallett (captivated.online) with Claude Code · reviewed 2026-10-15

Name `https://plausible.io` in **both** `script-src` and `connect-src`. Adding
only `script-src` is the trap: the tag loads, runs, raises nothing a visitor
would see, and every event POST is blocked.

**A dashboard reading zero is indistinguishable from a site with no traffic**, so
the failure gets attributed to the audience rather than the header. Widen by
naming the origin, never by relaxing a directive.

Check from outside after deploying, with a cache-buster — the edge served a
stale copy for several minutes here, long enough to report a false negative.

Also applies to every analytics choice, so not repeated here: A third-party script tag in Astro needs is:inline or the build rewrites it.