Embedding overview
Embed Flax charts and dashboards in your own apps with per-resource embed tokens, a domain allowlist, and iframe or static-PNG modes
Embedding puts a Flax chart or dashboard inside another application — a portal, a wiki, a customer-facing product. This page is for developers and org admins setting up embeds.
#Embed tokens
Embeds are authorized by per-resource embed tokens minted by an org admin. A token is scoped to a single chart or dashboard, and data is fetched as the token's service principal under row-level security — viewers see only what the token is entitled to. Manage tokens on the organization's embed settings.
Important
Minting and revoking embed tokens is an org-admin action. Treat tokens as secrets scoped to the surface you embed them in.
#Domain allowlist
A domain allowlist controls where embeds may load. Only origins you add can frame a Flax embed; everything else is refused by the browser. This is enforced with a frame-ancestors content-security policy — see iframe embeds.
#Two modes
| Mode | Use it for |
|---|---|
| Iframe | Live, interactive charts and dashboards on pages you control |
| Static PNG | Surfaces that block iframes, or where a snapshot image is enough |