Allow a website
This page needs your own installation with an Embed license.
POST/
Allows a website to show every customer’s embed.
Needs a partner key: Authorization: Bearer gre_…, from Platform › Partner keys. Call it from your server only.
Parameters
Headers
Idempotency-KeyOptional · stringUp to 255 characters. The same request with the same key within 24 hours answers the first result again, with
Idempotency-Replayed: true.
Body
originRequired · stringhttps://and a host, with an optional port.https://*.bakery.examplecovers every subdomain of a domain you own.
One customer’s own website
For a website that should show only one account, use Allow a website for one account.
Responses
- 201Created
Added, as stored. It applies the next time the embed loads.
The body isn’t a JSON object, or
originisn’t text.The list already has it.
- 409
CONFLICTA request with this
Idempotency-Keyis still running. Retry shortly. It can’t be allowed as written. The message says why.
The list already has 200.
This
Idempotency-Keywas already used with a different request.Something failed on the installation’s side. Try again.
Any call can also answer: 401 UNAUTHORIZED · 403 EMBED_NOT_LICENSED · 403 IP_NOT_ALLOWED · 413 PAYLOAD_TOO_LARGE · 415 INVALID_CONTENT_TYPE · 429 RATE_LIMITED · 503 BUSY. See Errors.
Request
GORUNNER="https://automations.example.com"
GORUNNER_EMBED_KEY="YOUR_PARTNER_KEY" # gre_…
curl -X POST "$GORUNNER/api/embed/v1/websites" \
-H "Authorization: Bearer $GORUNNER_EMBED_KEY" \
-H "Idempotency-Key: $(uuidgen)" \
-H "Content-Type: application/json" \
-d '{
"origin": "https://app.bakery.example"
}'const GORUNNER = "https://automations.example.com";
const KEY = process.env.GORUNNER_EMBED_KEY; // gre_…
const res = await fetch(
`${GORUNNER}/api/embed/v1/websites`,
{
method: "POST",
headers: {
Authorization: `Bearer ${KEY}`,
"Idempotency-Key": crypto.randomUUID(),
"Content-Type": "application/json",
},
body: JSON.stringify({ origin: "https://app.bakery.example" }),
},
);
const { data } = await res.json();import os, uuid, requests
GORUNNER = "https://automations.example.com"
KEY = os.environ["GORUNNER_EMBED_KEY"] # gre_…
res = requests.post(
f"{GORUNNER}/api/embed/v1/websites",
headers={
"Authorization": f"Bearer {KEY}",
"Idempotency-Key": str(uuid.uuid4()),
},
json={
"origin": "https://app.bakery.example",
},
)
data = res.json()["data"]Response · 201 Created
{
"data": {
"origin": "https://app.bakery.example"
}
}Every field
Body
originRequired · stringAn origin:
https://and a host, an optional port, nothing after it.
Response · 201 Created
dataobjectoriginstring