On the chat's Restrictions tab, turn on Logged In — the chat then only works for signed-in users, which is the right setting for member areas, intranets, or any content you don't want queried anonymously.
Two companions on the same tab help even on public chats:
- Message Limit caps how long each message can be (in characters, with a notice shown when it's exceeded), which bounds the token cost of any single question.
- History Limit caps how much prior conversation is re-sent with each question, which bounds the token cost of long chats.
Two more protections are on by default: every chat rate-limits each person to 10 messages a minute, and usage limits cap how many queries each role — including guests — can make per day. Together they stop a bot or over-eager visitor from running up your API bill.
Remember the page itself: putting the shortcode on a members-only page hides the widget, and the Logged In switch makes sure the chat can't be used even if the widget is reached another way. See Creating a Chat for the full Restrictions tab.