Embeddable converter

Add a convert-only ezForex widget to an approved website with a public embed key. Starter and Pro plans include this feature.

Public, restricted credentials

Embed keys are separate from API Bearer tokens. They can only render the converter, are restricted to your allowed frame origins, and have independent per-key, per-IP, and daily plan limits. Requests from non-allowed parent origins are logged for abuse review even when the browser blocks framing.

Create a widget

Open Settings → Embed keys.
Enter a name and one HTTPS origin per line, without paths.
Choose a widget theme and optionally set light and dark base colours.
Create the key and copy the iframe snippet immediately.
Revoke and replace a key if its use is no longer required.

Theme

Each embed key stores a fixed widget theme. Visitors cannot change it from the iframe.

Light — always uses the light palette.
Dark — always uses the dark palette.
Use system theme — follows the visitor’s prefers-color-scheme setting and updates if it changes.

Base colours

Optional light and dark base colours tint the widget into a monochromatic brand theme. Each colour is independent and clearable.

The hex you pick is a seed: surfaces, borders, text, and accent buttons are derived from it for that mode.
Leave a colour empty to keep the default slate and teal palette for that mode.
Set both when using Use system theme so light and dark modes stay on-brand.
Warning and unavailable banners stay amber; they are not brand-tinted.

Iframe example

<iframe
    src="https://ezforex.your-developer.co.za/embed/convert?key=ezf_embed_...&from=USD&to=ZAR&amount=100"
    title="Currency converter"
    width="100%"
    height="480"
    loading="lazy"
></iframe>

Query parameters

Parameter	Required	Description
key	Yes	Public embed key (ezf_embed_…).
from	No	Source currency code. Defaults to USD.
to	No	Target currency code. Defaults to ZAR.
amount	No	Starting amount. Defaults to 100.

Rate and security behavior

Quotes apply the embed owner’s configured FX markup and display it in basis points.
The browser enforces the key’s exact origin allowlist through CSP frame-ancestors.
Widget responses are private, are not cached, and do not send a referrer.
Embed calls do not consume the owner’s authenticated Convert API quota.
A revoked, expired, unentitled, or inaccessible owner key returns an unavailable response.

See it in context

A sample merchant page shows the convert iframe inside a checkout-style layout: Open the embed demo.