Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.fitmyvehicle.com.au/llms.txt

Use this file to discover all available pages before exploring further.

​
Required (widget will not function without these)

DomainProtocolPurpose
cdn.fitmyvehicle.com.auHTTPS (443)Widget script + iframe SPA
api.fitmyvehicle.com.auHTTPS (443)API calls (from inside iframe)
cloud.fitmyvehicle.com.auHTTPS + WSS (443)Database queries (from inside iframe)

​
Required for fonts (widget will look degraded without these)

DomainProtocolPurpose
use.typekit.netHTTPS (443)Adobe Fonts CSS
p.typekit.netHTTPS (443)Adobe Fonts files
fonts.googleapis.comHTTPS (443)Google Fonts CSS
fonts.gstatic.comHTTPS (443)Google Fonts files
Font providers are loaded inside the iframe only — they never touch your page.

​
Optional (analytics, non-blocking)

DomainProtocolPurpose
api.ipify.orgHTTPS (443)IP detection for analytics
api64.ipify.orgHTTPS (443)IPv6 IP detection
All traffic is HTTPS. FMV does not use HTTP. All connections are encrypted. Your site must also be served over HTTPS.

​
WAF / Proxy considerations

  • Do not inspect/decrypt SSL on traffic to *.fitmyvehicle.com.au — this breaks JWT token validation
  • Do not strip custom headers — the API uses X-Public-Key, X-Quote-Token, and Idempotency-Key
  • Do not block postMessage — the iframe sends close events and analytics events to the parent window
  • Max POST body: 64 KB (quote submissions) — ensure your WAF allows this