Publishing and sharing Updated about 2 hours ago 3 min read

Embed your app on another site

Other sites can't put your app in an iframe until you allow them. Add the site under Settings → Embedding, then publish.

Want to drop your Overskill app into a page you already have — a ClickFunnels page, a WordPress post, your marketing site? That's an iframe, and Overskill blocks it by default on purpose. A random site shouldn't be able to frame your login or checkout.

You opt in per app.

This is a Settings step, not something the AI in chat can change. After you save, you still have to Publish.

How to allow a site

  1. Open the app in the editor.
  2. Click the gear to open Settings.
  3. Find the Embedding card.
  4. In Allowed embedding sites, add one address per line. Each one must start with https://.
  5. Click Save Embedding Settings.
  6. Hit Publish in the top right. Saving the list does not update the live app — the allow-list is baked in when you publish.

Example for a page on ClickFunnels:

https://clickfunnels.com
https://www.clickfunnels.com

Use the origin only (scheme + host). Don't paste a full page path like https://www.clickfunnels.com/funnelbuilder — that extra path isn't part of the allow-list. https://www.clickfunnels.com is the line that unlocks that page.

Apex vs www

https://example.com and https://www.example.com are different sites to the browser. If your page lives on www., allow www.. If people also hit the bare domain, add both.

Wildcards

https://*.example.com allows every subdomain of a domain you control. It does not cover the apex (https://example.com) — add that separately if you need it.

Don't wildcard a shared host. Entries like https://*.vercel.app or https://*.github.io are rejected, because that would let anyone on that platform embed your app.

You can add up to 10 sites.

After you publish

The live app will only load inside an iframe on the sites you listed, plus Overskill's own editor and preview. Reload the host page after publish — a tab that was already open still has the old block.

What this does not do

  • It only affects <iframe>. A script you drop on a page is a different kind of embed and isn't gated by this list.
  • It does not let every ClickFunnels (or WordPress, or Shopify) page in the world frame every Overskill app. Each app has its own list.
  • Leave the list empty and your app can only be framed inside Overskill, which is the default.

If it still says refused to connect

  • Confirm you published after saving, not just saved.
  • Confirm the host page's origin matches a line exactly, including https:// and www. if the page uses it.
  • http:// is not allowed — the host page must be https://.

Was this helpful?

Thanks for the signal — it helps us improve the docs.

More in Publishing and sharing

Connecting your own domain

Use your own web address — like myapp.com — instead of the default one.

Preview vs live: how publishing works

Your changes are visible to you instantly. They're visible to your users when you publish. Here's the difference.

Your remix URL and sharing your app

Every app has a remix URL. Share it and anyone can start their own copy of your app to build on. There's no button to hunt for — the link is the whole mechanism.

Still need help?

If this didn't answer your question, our team is one click away.

Sign in to open a ticket Back to help center