Propertys

Embed frame-ancestors allowlist for a property

Return the parent origins permitted to iframe this property's embed widget.

Consumed by the Next.js /embed/* proxy (proxy.ts) to build a per-request CSP frame-ancestors header (see Stage 3 of the embeddable-checkout roadmap). Deliberately a thin, embed-only surface — kept off the shared GET /properties/by-location response so the agent-facing property schema stays free of GUI-embed-only fields (AGENT_HUMAN_PARITY). Returns an empty list (default-deny) when the property has no registered origins; 404 when no visible property matches.

get/properties/embed-config/{state}/{slug}

Request

  • Base URL: http://localhost:8000
  • URL: http://localhost:8000/properties/embed-config/{state}/{slug}
  • Auth: none declared

Path parameters

statestring required
slugstring required

Query parameters

country'AU' | 'NZ'

ISO country code used to scope public property inventory.

Headers

API-Version'1'

Major API version. Omit or send 1 for the current v1 surface. Retired operations use RFC 9745 Deprecation and RFC 8594 Sunset headers.

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.