frame-ancestors). The list is configuration, not a credential: origins end up verbatim in a public CSP header. It is empty by default, in which case the embed only renders inside Agentcard’s own surfaces.
Origins must be HTTPS. http://localhost and other loopback hosts are allowed for local development. Anything with a path or query is reduced to its origin.