Embed page
Returns a small HTML page that loads the builder in a sandboxed iframe. Point an <iframe> or a browser tab at this URL. A page load cannot set headers, so this is the one builder route that takes the key in the query string (ak or sk) instead of the Authorization header. Use a viewer key (sk_) for client-facing embeds, because the URL is visible to anyone who can see the page. The key format is checked here; the key itself is checked by the embedded app through GET /validate.
curl -X GET "https://mythic-analytics.gulp.workers.dev/builder/?ak=example_string&sk=example_string&location_id=example_string&page=dashboards&theme=dark&transparent=example_string&hideHeader=example_string&branding=example_string&theme_primary=example_string&theme_secondary=example_string&theme_heading_font=example_string&theme_body_font=example_string&style=example_string" \
-H "Content-Type: application/json"
import requests
import json
url = "https://mythic-analytics.gulp.workers.dev/builder/?ak=example_string&sk=example_string&location_id=example_string&page=dashboards&theme=dark&transparent=example_string&hideHeader=example_string&branding=example_string&theme_primary=example_string&theme_secondary=example_string&theme_heading_font=example_string&theme_body_font=example_string&style=example_string"
headers = {
"Content-Type": "application/json"
}
response = requests.get(url, headers=headers)
print(response.json())
const response = await fetch("https://mythic-analytics.gulp.workers.dev/builder/?ak=example_string&sk=example_string&location_id=example_string&page=dashboards&theme=dark&transparent=example_string&hideHeader=example_string&branding=example_string&theme_primary=example_string&theme_secondary=example_string&theme_heading_font=example_string&theme_body_font=example_string&style=example_string", {
method: "GET",
headers: {
"Content-Type": "application/json"
}
});
const data = await response.json();
console.log(data);
package main
import (
"fmt"
"net/http"
)
func main() {
req, err := http.NewRequest("GET", "https://mythic-analytics.gulp.workers.dev/builder/?ak=example_string&sk=example_string&location_id=example_string&page=dashboards&theme=dark&transparent=example_string&hideHeader=example_string&branding=example_string&theme_primary=example_string&theme_secondary=example_string&theme_heading_font=example_string&theme_body_font=example_string&style=example_string", nil)
if err != nil {
panic(err)
}
req.Header.Set("Content-Type", "application/json")
client := &http.Client{}
resp, err := client.Do(req)
if err != nil {
panic(err)
}
defer resp.Body.Close()
fmt.Println("Response Status:", resp.Status)
}
require 'net/http'
require 'json'
uri = URI('https://mythic-analytics.gulp.workers.dev/builder/?ak=example_string&sk=example_string&location_id=example_string&page=dashboards&theme=dark&transparent=example_string&hideHeader=example_string&branding=example_string&theme_primary=example_string&theme_secondary=example_string&theme_heading_font=example_string&theme_body_font=example_string&style=example_string')
http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = true
request = Net::HTTP::Get.new(uri)
request['Content-Type'] = 'application/json'
response = http.request(request)
puts response.body
{}
{
"error": "Bad Request",
"message": "The request contains invalid parameters or malformed data",
"code": 400,
"details": [
{
"field": "email",
"message": "Invalid email format"
}
]
}
/
Target server for requests. Edit to use your own host.
Agency key (ak_ followed by 32 to 64 hex characters). Pass ak or sk.
Viewer key (sk_ followed by 32 to 64 hex characters). With ak, scopes the embed to that key's client.
Client to open when the key is an agency key.
Builder page to open. Lowercase letters only; anything else opens insights.
Color theme passed to the embedded app.
Render without a page background.
Hide the builder header.
Branding mode passed to the embedded app.
Primary color override.
Secondary color override.
Heading font override.
Body font override.
Style preset passed to the embedded app.
Request Preview
Response
Response will appear here after sending the request
Query Parameters
Agency key (ak_ followed by 32 to 64 hex characters). Pass ak or sk.
Viewer key (sk_ followed by 32 to 64 hex characters). With ak, scopes the embed to that key's client.
Client to open when the key is an agency key.
Builder page to open. Lowercase letters only; anything else opens insights.
dashboardsRender without a page background.
Hide the builder header.
Branding mode passed to the embedded app.
Primary color override.
Secondary color override.
Heading font override.
Body font override.
Style preset passed to the embedded app.
Responses
HTML wrapper page. Sent with Cache-Control no-store and a strict Content-Security-Policy.