Subchapter 9.8
references/FEEDBACK.mdMarkdown8 KBView on GitHub
A tiny, optional capability: send the user’s feedback about the experience of building with Wix to Wix, attributed to the authenticated user. Use it to close the loop when the skill itself, the APIs, the docs, or the tooling got in the user’s way — the signal is how Wix improves the building flow.
This is not support, and not for the user’s own site content. It is meta-feedback about building with Wix.
Sending is always the user’s call, but offering is not — default to offering, don’t wait to be asked or for the user to complain first. Offer once, in plain prose, in any of these situations; send only after an explicit yes:
Bias toward offering over staying quiet: a redundant offer costs the user one “no thanks”; a friction point that goes unreported is a signal Wix never gets. Only skip the offer when the run was genuinely clean end to end.
When you offer, invite the user to add anything in their own words — whatever they give you goes into the message verbatim, in its own “In the user’s words” section.
Do not send on a single transient error, on the user’s behalf without a yes, or more than once for the same issue. When unsure, ask rather than send.
Wix receives only free text, so a bare sentence is low-signal. Send a summary of the whole run, not just the last error — you have the full session context that Wix does not. Structure it in three layers — provenance → narrative → attribution — so Wix can triage and route without chasing you.
1. Provenance — labelled lines. A starting point, not a schema: omit lines that don’t apply, add any field or value that would help Wix understand the run:
Agent / model: <e.g. Claude Code · Opus, Cursor, … / whatever you are>
Wix tooling used: <MCP tools, Wix CLI, REST via curl, … or other/none>
Platform / hosting: <headless, Velo, Wix-hosted, self-hosted, …>
Wix areas / APIs: <account & site management, CMS, media, auth, … — whatever the run touched>
Wix products: <stores, bookings, events, blog, … or none — plain API work is a valid answer>
Project type / frontend: <managed | self-managed | stripe | other> · <Astro, Next.js, …>
Metasite / siteId: <id> · Public clientId (app id): <id>
Links: <any relevant URL helps — dashboard/editor, live or preview site, a docs page you read, a GitHub repo/PR, anything else useful>
Skill area(s): <recipe/file(s) involved, e.g. inline-recipes/setup-bookings.md STEP 5>
Other ids: <service / product / checkout / etc. ids created this run, as relevant>2. Narrative:
3. Attribution — for each significant friction point, your best diagnosis of where the fault lives, tagged with one of: API behavior (does the wrong thing) · API schema (shape/types wrong or misleading) · API reference docs · docs articles / examples (missing, wrong, or no working example) · Wix harness (CLI, MCP tools, auth flow…) · this skill’s recipes · other / unsure — plus whether you confirmed it or are assuming. Don’t force a tag; a wrong route is worse than “unsure”.
Bottom line — one or two sentences naming the single most important problem and its impact. Lead with what was worst and don’t soften it, bury it under what worked, or hedge diplomatically — but keep a professional register: a concise engineering assessment, not a persona, jokes, or theatrics.
Write it as a scannable few paragraphs or a short bulleted list — thorough on the friction, distilled from the conversation rather than a raw transcript dump, and professional throughout. Confirm the final wording with the user before sending. Never include secrets — no bearer tokens, refresh tokens, API keys, or credentials — and no personal data beyond what the feedback needs.
This call identifies you (the human account), so it needs a user-scoped bearer — mint it
with the bare command: npx @wix/cli@latest token. The site-scoped bearer AUTHENTICATION.md
mints for the content APIs (token --site …) carries a metaSiteId, so the feedback service
resolves it to the site’s app/visitor identity and rejects the send as anonymous (the 500 case
below). Send the bearer alone — the Authorization header is the only one this call needs beyond
Content-Type. If the CLI isn’t logged in yet (e.g. feedback comes up before any site exists),
authenticate first (AUTHENTICATION.md §1), then run token.
TOKEN=$(npx @wix/cli@latest token) # bare token command → user-scoped bearer
curl -sS -w "\nHTTP_STATUS:%{http_code}" \
-X POST "https://www.wixapis.com/mcp-serverless/v1/headless-feedback" \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json" \
-d '{"message":"<composed feedback>"}'HTTP_STATUS:200 with an empty body {}. Tell the user it was sent.500 "Unable to determine target user id, anonymous messages are not allowed" — the token
was site-scoped. Re-mint user-scoped (npx @wix/cli@latest token, bare) and retry once.401/403 — the CLI session expired or the token isn’t user-identifiable; re-authenticate
(AUTHENTICATION.md §1), re-mint user-scoped, retry once. If it still fails, surface the response
and stop — do not loop.