iframe
and intentionally omits WisdomAI branding and features for a seamless integration experience. All core chat capabilities (natural‑language Q&A, table generation, and chart rendering) remain intact.
The section below describes the steps to configure your embeddeded chat/story.
1. Request an Access Token
Your permanent access token authenticates your server to the WisdomAI API and grants impersonation permissions. This token does not expire and must be kept secret. Contactsupport@askwisdom.ai
to obtain your access token. The access token will have impersonation permissions.
2. Generate a JWT Token
With your access token and the user email, you can now generate a temporary JWT that impersonates the specified user. This action must always be performed on your server to avoid leaking your permanent Access Token to the client’s browser.Never expose your permanent access token in client-side code. It provides long-term impersonation capabilities and must be protected on your backend. Do not store, cache, or transmit this token to any client-side application, mobile app, or frontend code.
The permanent access token grants impersonation privileges. If this token is compromised, an attacker could impersonate any user in your organization. Store it only in secure server-side environment variables or secret management systems.
For detailed information about the authentication flow and API usage, see the Impersonate User documentation.