---
title: "Replace allowed iframe origins and revoke existing workspace viewer grants"
method: POST
path: "/v1/viewer-settings"
---

# Replace allowed iframe origins and revoke existing workspace viewer grants

`POST /v1/viewer-settings`

## Request

- Base URL: `https://api.tabfleet.com`
- URL: `https://api.tabfleet.com/v1/viewer-settings`
- Auth: HTTP bearer

Replace allowed iframe origins and revoke existing workspace viewer grants. Authenticate with a workspace API key. See the linked API documentation for permissions and error recovery.

## Request body

- object
  - `origins` string[], required: Exact HTTPS origins without paths, wildcards, or trailing slashes. Empty array disables embedding.

## Response `200`

Success

- ViewerPolicy
  - `origins` string[], required
  - `version` integer, required

## Other responses

- `429`: Throttled or temporarily capacity constrained. Honor Retry-After and inspect the JSON error code.
- `default`: Error. Respect Retry-After when supplied; do not blindly retry mutations.

---

[API](https://skmtc.dev/tabfleet/apis/tabfleet-browser-api.md) · [All operations](https://skmtc.dev/tabfleet/apis/tabfleet-browser-api/llms.txt) · [OpenAPI document](https://skmtc.dev/tabfleet/apis/tabfleet-browser-api/revisions/6a3346e552a8?raw)