Full App Embed > Embed Builder

The embed builder is where you set up Full App Embed. It shows a live preview of what your customers will see and generates the backend and frontend code for your settings.

Open the builder

The builder opens with a live preview on the left and Embed Settings on the right. The dashboard you came from is already selected as a shared dashboard.

Preview as user

Enter a user ID to preview the embed as that user. It's sent as userIdentifier and works exactly like the IDs your backend sends: each ID gets its own saved queries, folders and dashboards. Press Enter or click outside the field to update the preview.

On plans without Full App Embedding, this field is replaced by a single sample user for previews.

Shared dashboards

Choose the dashboards every customer sees under Shared Dashboards. Use the search box to find dashboards, or Select all.

Customers can filter, drill into and export shared dashboards, but can't edit them. If you use row-level security, each customer sees them filtered to their own rows.

Permissions

Control what customers can create and which tools they get.

What customers can create

Browse data tools

If no shared dashboards are selected and nothing can be created, the builder warns you that the embed would be empty.

Row-level security

Pick an RLS group to limit each customer to their own rows. Leave it empty to give customers full access to the database.

After you pick a group, the builder lists the attributes the group's rules filter on, such as an account ID. Enter values to preview the embed as a specific customer. In production, your backend sends these values for each user. Click View group to open the group's settings.

Row-level security needs a plan that includes it. See Row-level Security for how it works with the embed.

Allowed domains

List the sites allowed to load the embed, such as app.example.com. Leave the list empty to allow any site.

• Domains are saved to the database, not the token, and apply to every token generated after you click Apply.
• Enter the exact host. Add each subdomain separately; wildcards like *.example.com aren't supported. Include the port for local testing, for example localhost:3000.
• Draxlr is always allowed, so the builder preview keeps working.

Colors

Exports

Copy the code

The code panel at the bottom updates with your settings.

Backend: a curl request to the Generate Token API with your API key, API secret and all the options above. Call it from your server when a signed-in user opens the page, and replace userIdentifier with that user's ID.

Frontend: the HTML snippet that renders the embed. Replace TOKEN_FROM_YOUR_BACKEND with the token from the API.

<div
  class="draxlr-embed"
  data-token="TOKEN_FROM_YOUR_BACKEND"
  data-height="1000px"
></div>
<script src="https://app.draxlr.com/embed-full-app.js"></script>

On plans without Full App Embedding, the code panel is hidden and replaced with an upgrade option.