Skip to main content
POST
cURL

Authorizations

Lovable-API-Key
string
header
required

Lovable API key. Send its value in the Lovable-API-Key header.

Headers

Lovable-Version
string

Stable API version to serve, as a YYYY-MM-DD date. Omit for the oldest supported stable version, currently 2026-09-11.

Lovable-Beta
string

Comma-separated beta revision strings to enable on top of the stable version.

Path Parameters

project_id
string
required

Project ID.

Body

application/json
parent_origin
string
required

HTTPS origin allowed to embed the preview, using a lowercase hostname with no port, trailing slash, path, query, or fragment. The preview URL only loads in an iframe on this origin.

Example:

"https://acme.com"

Response

Embed URL created. The token expires after one hour.

embed_url
string
required

Preview URL for an iframe on parent_origin. It allows visitors to view the built preview without a Lovable login until expires_at.

Example:

"https://acme-landing-page.lovable.app/?__lovable_token=eyJhbGciOiJIUzI1NiJ9"

expires_at
string<date-time>
required

When the embed URL token expires and stops loading the preview.

Example:

"2026-01-15T09:30:00Z"