# Email not allowed

The widget refuses the client's email.

## Symptom

The client enters an email and the widget says "This email isn't allowed to request changes on this site." French: "Ce courriel n'est pas autorisé à demander des modifications sur ce site." Spanish: "Este correo no está autorizado a solicitar cambios en este sitio."

## Causes

### The address is not on the list

An empty **Who can request changes?** list refuses every email. A saved list allows only those entries.

**Confirm.** **Settings → Client access** does not contain the address the client typed. The section mark may say "No authorized email". The API answer is [MDF-AUTH-002](https://www.modifee.com/docs/errors/MDF-AUTH-002).

**Fix.** Press **Add**, enter the address or a domain rule such as `@client.com`, and save. A rule that starts with `@` matches emails that end with that suffix, after both sides are lowercased. See [Allowed emails](https://www.modifee.com/docs/client-access/allowed-emails).

### A typo, or a difference the list does not ignore

Matching lowercases the address and the rule, then compares the whole email. `Sam@Client.com` matches `sam@client.com`. It does not match `sam@client.co` or a missing character.

**Confirm.** The widget shows the same not-allowed sentence, and the list has a near match.

**Fix.** Add the exact address the client uses, or a domain rule. Ask them to request a new code after you save.

### The test session expired

**Send a test request** signs a token for 30 minutes. It skips the allowlist. After that, the same browser falls through to normal sign-in and the allowlist applies. The widget drops the test session on the next refusal.

**Confirm.** The banner was "Test mode — agency", then later the not-allowed sentence appears for the agency email. The inbox row had the **Test** badge. More than 30 minutes have passed.

**Fix.** Press **Send a test request** again, or add the agency email to the list if you want it to work without test mode. See [Allowed emails](https://www.modifee.com/docs/client-access/allowed-emails).

### The widget on the page is another project

Each project has its own list. A snippet from project A checks project A's list, even if the email is allowed on project B.

**Confirm.** **Check installation** says "The widget on this page belongs to another project." The email is present on a different project's **Who can request changes?**

**Fix.** Install this project's snippet, or add the email on the project whose public key is in `data-project`.

### The code email never arrived, or the code was rejected

This is a different sentence from the not-allowed one.

**Confirm.** The widget says "The sign-in email could not be sent." ([MDF-WIDGET-003](https://www.modifee.com/docs/errors/MDF-WIDGET-003)), "That code is incorrect or has expired." ([MDF-AUTH-004](https://www.modifee.com/docs/errors/MDF-AUTH-004)), "Too many attempts. Request a new code." ([MDF-AUTH-005](https://www.modifee.com/docs/errors/MDF-AUTH-005)), or "Too many codes requested. Try again in a few minutes." ([MDF-QUOTA-003](https://www.modifee.com/docs/errors/MDF-QUOTA-003)).

**Fix.** Request one new code and enter it within 10 minutes. The email subject is "Your Modifee code:" plus the code. If codes were requested too often, wait a few minutes first.