# Embedded apps

How to let a web app you build, for example in Base44, show your team their board and take their forms, with PYLO behind it.

Embedded apps lets a web app built in Base44 or anywhere else show your team their board and take their forms, while PYLO keeps every figure. Each person signs in with PYLO and the app acts as them, so it sees what they see and nothing more. For the API such an app calls, see the [Agent API reference](/docs/reference/agent-api).

## Who can open it

Only owners and admins. Embedded apps is not shown in the Settings menu for anyone else, and anyone else who opens the address is sent back to Account.

## Connect your app

The first card lists the details your app needs: your `Workspace ID`, the `Display config` address, the `Sign in with PYLO` address and the `API description` address. Copy them into your app's settings.

Never put an API token in a web app. Anyone using the page could copy it and read the whole workspace, commission included. PYLO refuses an API token sent from a browser, so the app must sign each person in and use their own session.

## Sites and branding

1. In `Sites allowed to call PYLO`, enter each site one per line, exactly as the browser shows it, with no path. A wildcard such as `*.base44.app` is refused, because it would let every app on that host act for your team.
2. Optionally set a `Logo URL`, and a `Main colour`. Leave the colour blank to use your brand colour.
3. Under `What the app shows`, tick the parts the app may show: My Board, Post-call form, End of day, Leaderboard and Manager view.
4. Under `Your words for things`, optionally rename labels such as Post-call, Closer, Lead or Call to the words your team uses, for example "Consultation" for Call.
5. Choose `Save`. Apps pick up the change within a minute.

## Apps that sign your team in

To let an app sign your team in with PYLO:

1. Enter the `App name`, as your team will see it when signing in.
2. Enter where PYLO sends people back after signing in.
3. Choose `Register app`.
4. Copy the `Client ID` that appears into the app's settings.

Registered apps are listed in this section. Choose `Revoke` and confirm to remove one. Everyone signed in to it is signed out, and it cannot sign anyone in again.

If embedded apps are not ready for your workspace, the fields are greyed out and a notice explains why.

## What changes elsewhere

Your team can sign in to the registered app with their PYLO login and use the parts you allowed, with your branding and labels. Forms they file there are kept in PYLO with every other figure.