Iframe embed
Add ?embed=1 to an eligible reader URL. The reader removes its outer chrome and relaxes its own framing policy for the embed request.
<iframe
src="https://slidesfly.xyz/d/YOUR_DECK_ID?embed=1"
title="Quarterly review"
width="960"
height="540"
loading="lazy"
allow="fullscreen"
></iframe>oEmbed discovery
Public reader metadata exposes an application/json+oembed discovery link. A consumer can also call the app-domain endpoint directly:
GET https://slidesfly.com/api/oembed?url=https%3A%2F%2Fslidesfly.xyz%2Fd%2FYOUR_DECK_ID&format=json&maxwidth=960&maxheight=540The endpoint returns JSON and the rich response type. Optional maxwidth and maxheight bounds scale the 16:9 iframe down without upscaling it. Slidesfly does not support XML; an explicitly unsupported format returns 501.
Access behavior
| Deck state | Embed behavior |
|---|---|
| Public | Reader embedding and oEmbed discovery are available while the deck remains current and allowed by policy. |
| Unlisted | A direct reader embed can render, but metadata does not advertise oEmbed and the oEmbed endpoint returns 401. |
| Password / private / allowlist | Viewer authorization is still required; the embed flag does not bypass access. |
| Expired, deleted, historical, or quarantined | The stable reader path does not expose unavailable content. |
Security boundary
Read the security architecture before embedding untrusted or third-party HTML content.