Skip to main content
Char now uses a unified embed auth model across tiers: publishable key required, optional ID token for end-user identity.

​
Tier 0: Key-only embed

Use a publishable key without per-user ID tokens: 
<char-agent publishable-key="pk_live_..."></char-agent>
What you get:
  • Fastest integration path
  • Org-scoped runtime and ticket flow
  • No IDP dependency
Tradeoff:
  • User identity is synthetic (not mapped to your IDP users)
Pass user identity with connect(): 
agent.connect({
  publishableKey: "pk_live_...",
  idToken,
});
What you get:
  • Per-user identity from your IDP
  • Cross-app/tooling flows tied to real users
  • Better auditability and access control alignment

​
Tier 2: Enterprise governance

Adds governance controls on top of Tier 1:
  • Policy checks
  • Approval flows
  • Audit workflows
  • Enterprise connectors

​
Migration path

  1. Start at key-only (publishable-key)
  2. Add IDP configuration and pass idToken
  3. Add governance controls as requirements mature
All tiers use the same core embed contract: publishable key required, optional ID token for per-user identity.