Embedding

Create an embed

10–20 min

Generate long-lived embed access for a specific dashboard or report. Tokens require at least one allowed origin. After create, copy the secret and snippet from the dialog. Admins with manage embedding can reveal the secret again from the token list — treat it like a share credential, not a warehouse password.

Why it matters

Scoped embeds avoid exposing your whole workspace.

When to use

  • One trusted host (internal portal) will always show the same board.
  • You want a durable token you can deactivate or delete later.

How to use

  1. Enable embedding on the resource.
  2. In Integrate → Embedding, choose Long-lived token.
  3. Add host origins, optional expiry and locked filters, then Create embed token.
  4. Copy Embed code / Embed URL / JS SDK from the dialog and verify on staging.

Success check: The dashboard or report appears in your host page with live data.

Common mistakes

  • Reusing embeds across unrelated sites without reviewing origins.
  • Treating URL filter params as a security boundary — use locked rls_filters for sensitive row limits.
  • Putting a long-lived token in a public marketing site or public repo.