# IngestX Widget Integration Status

## Current availability

IngestX does not currently publish a production browser-widget loader or public embed credential.

Do not place an IngestX server API key in browser-side JavaScript, HTML, mobile application code, or another publicly distributed client.

## Supported integration path

Current integrations should use authenticated server-to-server API calls. Keep API credentials on the customer-controlled server and expose only the minimum application function needed by the browser.

Customers and qualified prospects can request integration guidance by contacting [business@immenzo.com](mailto:business@immenzo.com).

## Requirements before a browser widget is released

A future browser widget must use:

- a versioned first-party loader;
- short-lived, purpose-limited browser tokens;
- an exact approved-origin allowlist;
- server-side API credentials that never reach the browser;
- documented payload, callback, retention, and review behavior; and
- release provenance, dependency inventory, revocation, and security testing.

No widget integration should be represented as production-ready until those controls are implemented and verified.