How-to guides
Embed third-party tools
What you'll get
A third-party tool — Calendly, Google Maps, a YouTube video, a live chat widget, a scheduling form — embedded inline on a page of your site. The engine handles the security (Content Security Policy) so the embed actually loads.
In the hosted builder
Embed my Calendly link (
https://calendly.com/me/30min) on the contact page so people can book a call.
The builder adds the Calendly inline embed, allowlists calendly.com in the site's CSP, and previews it. Same flow for Google Maps:
Add a Google Map of 1234 Main St, Austin TX on the contact page.
Or YouTube:
Embed this YouTube video on the home page: youtube.com/watch?v=...
Common embeds
The engine has shortcuts for the most common ones:
- YouTube / Vimeo — auto-detected from a URL; lazy-loaded by default.
- Google Maps — supports both the embed iframe and the Maps JavaScript API.
- Calendly — inline widget, popup widget, or text link.
- Live chat — Intercom, Crisp, Drift; needs the snippet plus the domain in
embeds. - Forms / scheduling — Typeform, Tally, Cal.com, Savvycal.
For anything else, paste the embed snippet, and add the third-party domain to your site's embeds list — that's all the engine needs.
Result
- The widget loads and works inline on your page.
- CSP allows the third-party origin (script source, frame source, connect source as needed).
- No console errors about blocked content.
Under the hood
Embeds reference — supported embed types, the CSP allowlist mechanism, and what to do for embeds the engine doesn't recognize automatically.