Subpath Hosting (DIY Setup)

Your Pendium agent site is always live at pendium.ai/{your-username}. Subpath hosting lets you also serve it under your own domain — for example yourdomain.com/blog/* — by adding a small reverse-proxy rule on your edge or hosting platform. The content is identical; the difference is that it now lives on your root domain, so the SEO and citation authority accrues to you.

This guide covers the DIY setup the Agent Site → Setup → Domain Connect wizard generates for you. You don't have to copy anything from this page by hand — the wizard mints a snippet bound to your domain, path prefix, and a stable proxy token. This page explains what that snippet does and how to troubleshoot it.

Subpath vs. subdomain

Domain Connect offers two ways to put the agent site on your domain:

Subpath is the recommended option because search engines and AI crawlers treat yourdomain.com/blog as part of your main site. This guide is about the subpath path; for the subdomain path, see subdomain hosting.

How it works

Your edge receives requests for yourdomain.com/blog and anything beneath it, and forwards them to Pendium, which serves your agent site content:

Visitor → yourdomain.com/blog/some-post
            │  (your reverse proxy)
            ▼
          https://pendium.ai/_proxy/{YOUR_PROXY_TOKEN}/some-post
            │
            ▼
          Pendium serves your agent-site page

Only traffic on the prefix is proxied. Sibling paths like /blogger or /blogroll pass through to your own origin untouched.

The contract

Whatever platform you're on, your proxy needs to forward two URL shapes to Pendium:

1. The bare prefix — yourdomain.com/blog → https://pendium.ai/_proxy/{YOUR_PROXY_TOKEN}
2. Anything under it — yourdomain.com/blog/<tail> → https://pendium.ai/_proxy/{YOUR_PROXY_TOKEN}/<tail>

Requirements:

• Preserve the HTTP method, headers, and query string verbatim.
• Do not rewrite the response body — Pendium emits absolute URLs already in your customer-facing shape.
• Recommended: set X-Pendium-Forwarded-Host: yourdomain.com so canonical tags and og:url render with your host instead of pendium.ai.

The {YOUR_PROXY_TOKEN} is minted once when you generate your first snippet and stays stable across regenerations — switching platform tabs or re-generating just refreshes the display, it doesn't rotate the token.

Prerequisites

• A domain you control, with access to its edge/hosting configuration.
• The ability to add one of: a Cloudflare Worker, a Vercel vercel.json rewrite, a Netlify _redirects rule, or a custom reverse-proxy rule (nginx, Apache, Caddy, etc.).
• If you run a WAF or bot filter, allow Pendium's verification probe (user-agent PendiumVerifier/1.0) and normal crawler traffic to the prefix.

Per-platform setup

Open Agent Site → Setup → Domain Connect, enter your domain and path prefix (defaults to /blog), pick your platform, and click Generate snippet. Paste the generated snippet into your platform, then click "I've added it, verify." The snippets below are templates — the wizard fills in your real token.

Cloudflare Workers

1. In the Cloudflare dashboard, open your domain → DNS and confirm the apex record (and www if you use it) shows an orange-cloud Proxied icon. Worker routes only fire on proxied traffic.
2. Open Workers & Pages → Create, pick the "Hello World" template, and name the Worker pendium-subpath.
3. Replace the editor contents with the generated Worker script and click Save & Deploy.
4. On your zone, open Workers Routes and add *yourdomain.com/blog* → pendium-subpath. The leading * matches both yourdomain.com and www.yourdomain.com — important if your site redirects between them.
5. Click "I've added it, verify" in the wizard.

// Pendium subpath proxy worker (the wizard fills in your token + prefix)
export default {
  async fetch(request) {
    const url = new URL(request.url);
    const prefix = "/blog";
    const isPrefixExact = url.pathname === prefix;
    const isUnderPrefix = url.pathname.startsWith(prefix + "/");
    if (!isPrefixExact && !isUnderPrefix) {
      return fetch(request); // outside the prefix — let your origin handle it
    }
    const tail = url.pathname.slice(prefix.length);
    const proxyUrl = "https://pendium.ai/_proxy/YOUR_PROXY_TOKEN" + tail + url.search;
    const proxyRequest = new Request(proxyUrl, request);
    proxyRequest.headers.set("X-Pendium-Forwarded-Host", url.host);
    return fetch(proxyRequest);
  },
};

Vercel

Vercel rewrites preserve method, headers, and query string automatically.

1. Open (or create) vercel.json at the root of your project.
2. Add the rewrites block below, merging with any rewrites you already have.
3. Commit and push — Vercel deploys the rewrite automatically (usually under 60 seconds).
4. Once the deploy lands, click "I've added it, verify."

{
  "rewrites": [
    {
      "source": "/blog",
      "destination": "https://pendium.ai/_proxy/YOUR_PROXY_TOKEN"
    },
    {
      "source": "/blog/:path*",
      "destination": "https://pendium.ai/_proxy/YOUR_PROXY_TOKEN/:path*"
    }
  ]
}

Netlify

Netlify uses status 200 to proxy transparently (vs. 301, which would redirect). Order matters — the exact match must come before the wildcard.

1. Open the _redirects file in your publish directory (commonly public/_redirects or static/_redirects). Create it if it doesn't exist.
2. Add the two lines below, keeping the order.
3. Commit and push — Netlify deploys in under 60 seconds.
4. Once the deploy lands, click "I've added it, verify."

/blog        https://pendium.ai/_proxy/YOUR_PROXY_TOKEN        200
/blog/*      https://pendium.ai/_proxy/YOUR_PROXY_TOKEN/:splat  200

Other (nginx, Apache, Caddy, custom)

Translate the contract above into your edge's reverse-proxy syntax. Example nginx fragment:

location = /blog {
  proxy_pass https://pendium.ai/_proxy/YOUR_PROXY_TOKEN;
  proxy_set_header X-Pendium-Forwarded-Host yourdomain.com;
}
location /blog/ {
  proxy_pass https://pendium.ai/_proxy/YOUR_PROXY_TOKEN/;
  proxy_set_header X-Pendium-Forwarded-Host yourdomain.com;
}

Deploy/reload your edge config, then click "I've added it, verify."

Verification

When you click "I've added it, verify," Pendium round-trips a health check to confirm your proxy is wired correctly:

1. Pendium fetches https://yourdomain.com/blog/_pendium/health?nonce=<random> — a request that flows through your proxy.
2. Your proxy forwards it to Pendium, which signs the response using a hash of your proxy token and the nonce.
3. Pendium verifies the returned signature matches. A match proves the request reached Pendium through your domain using your token.

The probe times out after ~8 seconds per attempt and the wizard polls every few seconds for up to ~90 seconds. Once verification succeeds, the wizard records it and unlocks "Make this my primary destination."

Troubleshooting

Making it your primary destination

After verification passes, click "Make this my primary destination" to tell Pendium your domain is the canonical home for the agent site. Pendium then renders canonical tags and internal links against your domain. Your pendium.ai/{username} URL keeps working as a fallback.

Disconnecting

To stop subpath hosting, clear the proxy configuration in the wizard. Pendium drops the proxy token and verification, and (if the proxy was your primary destination) reverts the canonical home to your pendium.ai agent-site URL. Remove the proxy rule from your edge afterward so the prefix returns to your own origin.