GoRunner docs
Search or askSearch⌘K

Allow a website for one account

Since v2026.10.4

POST/api/embed/v1/accounts/{accountId}/websites

Allows one exact website to show this account’s embed, and no other account’s.

Needs a partner key: Authorization: Bearer gre_…, from Platform › Partner keys. Call it from your server only.

Embed · Self-hosted with an Embed license

Parameters

Path

accountIdRequired · string

Your ID for the customer’s account: 1 to 255 bytes of UTF-8, case-sensitive. URL-encode it: it may contain /.

Headers

Idempotency-KeyOptional · string

Up to 255 characters. The same request with the same key within 24 hours answers the first result again, with Idempotency-Replayed: true.

Body

originRequired · string

https:// and a host, with an optional port. No wildcard.

Only this account

A login code of another account is refused there (ORIGIN_NOT_ALLOWED). It needs no two-factor code, and is recorded in the account’s audit log as your key.

Responses

  • 201Created

    Added.

  • The accountId isn’t valid or isn’t URL-encoded, the body isn’t a JSON object, or origin isn’t text. details.field names it.

  • You have no account with this ID.

  • The list already has it.

  • The account is deleted. Restore it first, within 30 days.

  • A request with this Idempotency-Key is still running. Retry shortly.

  • It can’t be allowed as written, or is a wildcard.

  • The account already has 20.

  • This Idempotency-Key was already used with a different request.

  • Something failed on the installation’s side. Try again.

Any call can also answer: 401 UNAUTHORIZED · 403 EMBED_NOT_LICENSED · 403 IP_NOT_ALLOWED · 413 PAYLOAD_TOO_LARGE · 415 INVALID_CONTENT_TYPE · 429 RATE_LIMITED · 503 BUSY. See Errors.

Request

GORUNNER="https://automations.example.com"
GORUNNER_EMBED_KEY="YOUR_PARTNER_KEY"  # gre_…
ACCOUNT_ID="acct-bakery"

URL="$GORUNNER/api/embed/v1/accounts/$ACCOUNT_ID/"
URL="${URL}websites"
curl -X POST "$URL" \
  -H "Authorization: Bearer $GORUNNER_EMBED_KEY" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{
    "origin": "https://crm.bakery.example"
  }'

Response · 201 Created

json
{
  "data": {
    "origin": "https://crm.bakery.example",
    "addedAt": "2026-10-25T09:00:00Z"
  }
}
Every field

Body

originRequired · string

An origin: https:// and a host, an optional port, nothing after it.

Response · 201 Created

dataobject
originstring
addedAttime