# Embedding overview

> Embed Flax charts and dashboards in your own apps with per-resource embed tokens, a domain allowlist, and iframe or static-PNG modes

*[View this page in the Flax docs](https://flax-analytics.com/docs/developers/embedding-overview)*

Embedding puts a Flax chart or dashboard inside another application — a portal, a wiki, a customer-facing product. This page is for developers and org admins setting up embeds.

## Embed tokens

Embeds are authorized by **per-resource embed tokens** minted by an **org admin**. A token is scoped to a single chart or dashboard, and data is fetched as the token's service principal under [row-level security](/docs/modeling/row-access-filters) — viewers see only what the token is entitled to. Manage tokens on the organization's embed settings.

> [!IMPORTANT]
> Minting and revoking embed tokens is an org-admin action. Treat tokens as secrets scoped to the surface you embed them in.

## Domain allowlist

A **domain allowlist** controls where embeds may load. Only origins you add can frame a Flax embed; everything else is refused by the browser. This is enforced with a `frame-ancestors` content-security policy — see [iframe embeds](/docs/developers/embed-iframe).

## Two modes

| Mode | Use it for |
| --- | --- |
| [Iframe](/docs/developers/embed-iframe) | Live, interactive charts and dashboards on pages you control |
| [Static PNG](/docs/developers/embed-png) | Surfaces that block iframes, or where a snapshot image is enough |

## Next steps

- [Iframe embeds](/docs/developers/embed-iframe)
- [Static PNG embeds](/docs/developers/embed-png)
- [Row access filters](/docs/modeling/row-access-filters)