preset-embedding git:20260519.8f45e64A

Immutable. This exact content is served forever at /api/v1/blob/ab2579ea56b6e867.

---
name: preset-embedding
description: Inspect embedded dashboard configuration in a Preset workspace through Superset API calls. Use when a user needs embedded dashboard read paths, feature-flag behavior, allowed domain inspection, or guest-token routing after resolving a workspace hostname.
---

# preset-embedding

Use this skill for embedded dashboard inspection and routing.

## Workflow

1. Use `preset-api` first: load its authentication reference and create the reusable Python client as `client`.
2. Use `preset-workspaces` to resolve the workspace hostname as `hostname`.
3. Use `preset-superset` to capture workspace version/OpenAPI and current-user roles when permissions matter.
4. Load the focused reference for the task:
   - [references/embedded-config-reads.md](references/embedded-config-reads.md) for embedded dashboard configuration reads.
   - [references/embedded-config-mutations.md](references/embedded-config-mutations.md) for embedded dashboard configuration create/update/delete routing.
   - [references/trusted-domains-and-origins.md](references/trusted-domains-and-origins.md) for allowed-domain and origin behavior.
   - [references/guest-tokens.md](references/guest-tokens.md) for guest-token routing to `preset-guest-tokens`.
   - [references/embedded-rls.md](references/embedded-rls.md) for embedded RLS routing to `preset-embedded-rls`.
5. Use `preset-guest-tokens` for guest-token creation and `preset-embedded-rls` for embedded RLS review.

## Scope

Default to embedded configuration reads. Do not create, update, or delete embedded dashboard configuration, issue guest tokens, manage trusted domains, or manage embedded access-token keys without explicit confirmation and a separate security-sensitive review.

Guest-token creation and RLS for embedded users are Phase 5 security-sensitive workflows handled by `preset-guest-tokens` and `preset-embedded-rls`.