git:20260519.8f45e64 to git:20260519.7b28ce1

1 added, 1 removed. Audit A to A.

---

name: preset-embedding

- description: Inspect embedded dashboard configuration in a Preset workspace through Superset API calls. Use when a user needs embedded dashboard read paths, feature-flag behavior, allowed domain inspection, or guest-token routing after resolving a workspace hostname.

+ description: Inspect embedded dashboard configuration in a Preset workspace through direct Superset API calls. Use only for direct API workflows when a user needs embedded dashboard read paths, feature-flag behavior, allowed domain inspection, or guest-token routing after resolving a workspace hostname. Do not use for MCP-only work.

---

# preset-embedding

Use this skill for embedded dashboard inspection and routing.

## Workflow

1. Use `preset-api` first: load its authentication reference and create the reusable Python client as `client`.

2. Use `preset-workspaces` to resolve the workspace hostname as `hostname`.

3. Use `preset-superset` to capture workspace version/OpenAPI and current-user roles when permissions matter.

4. Load the focused reference for the task:

- [references/embedded-config-reads.md](references/embedded-config-reads.md) for embedded dashboard configuration reads.

- [references/embedded-config-mutations.md](references/embedded-config-mutations.md) for embedded dashboard configuration create/update/delete routing.

- [references/trusted-domains-and-origins.md](references/trusted-domains-and-origins.md) for allowed-domain and origin behavior.

- [references/guest-tokens.md](references/guest-tokens.md) for guest-token routing to `preset-guest-tokens`.

- [references/embedded-rls.md](references/embedded-rls.md) for embedded RLS routing to `preset-embedded-rls`.

5. Use `preset-guest-tokens` for guest-token creation and `preset-embedded-rls` for embedded RLS review.

## Scope

Default to embedded configuration reads. Do not create, update, or delete embedded dashboard configuration, issue guest tokens, manage trusted domains, or manage embedded access-token keys without explicit confirmation and a separate security-sensitive review.

Guest-token creation and RLS for embedded users are Phase 5 security-sensitive workflows handled by `preset-guest-tokens` and `preset-embedded-rls`.