Replace embed origins

curl -X PUT https://api.agentcard.sh/api/v2/embed_origins \
  -H "Authorization: Bearer $ORG_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"origins": ["https://app.example.com", "http://localhost:3000"]}'

{ "object": "embed_origins", "origins": ["https://app.example.com", "http://localhost:3000"] }

PUT

api

embed_origins

curl -X PUT https://api.agentcard.sh/api/v2/embed_origins \
  -H "Authorization: Bearer $ORG_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"origins": ["https://app.example.com", "http://localhost:3000"]}'

{ "object": "embed_origins", "origins": ["https://app.example.com", "http://localhost:3000"] }

The list is replaced, not merged. Send every origin you want allowed.

string[]

required

Web origins. HTTPS only, except loopback hosts for local development. Duplicates are dropped.

curl -X PUT https://api.agentcard.sh/api/v2/embed_origins \
  -H "Authorization: Bearer $ORG_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"origins": ["https://app.example.com", "http://localhost:3000"]}'

{ "object": "embed_origins", "origins": ["https://app.example.com", "http://localhost:3000"] }

Errors. 400 invalid_origin names the value that was refused. 400 invalid_request when the array exceeds the maximum length.

Overview

Access tokens

Connections

Vault

Purchases

Cards

Identity verification

Wallet

Wallet links

Webhook endpoints

Embed origins

Blooio connection

Replace embed origins