NewAgent-ready
Embed tokens let the pricing snippet run on your own site
A new publishable embed token lets the pricing snippet call the API straight from your storefront, restricted to the sites you list, with your secret key staying on your server.
The embed snippet can now talk to the API directly from a customer's browser. Create an embed token in the dashboard, list the sites it may run on, and paste it into the snippet. It is built to be public, so it is safe in your page source.
- Create, inspect, and revoke tokens on the Embed Snippet page, and the generated snippets come pre-filled
- Each token works only from the sites you register on it, which stops it working if it is copied onto another web page
- Reaches the price lookup and conversion tracking only, and is rate limited per token and client address
- Your secret key keeps whatever access its scopes allow and stays on your server, where a browser cannot reach it
- Revoking a token takes effect on the next request