Can't embed app in an iframe with the new app builder

,

Hi there, right now with the new AI app builder, apps can’t be embedded inside an iframe. It was possible before with classic apps, so we can’t migrate our most important app (embedded within Salesforce) and we’re a bit stuck. Would it be possible de fix that? Seems like a small fix

Summary

With the new AI app builder, apps can't be embedded inside an iframe (something that worked with classic apps), which is blocking migration of a key app that needs to be embedded within Salesforce.

AI Response

This is a known, confirmed limitation: apps built in the new app builder cannot currently be embedded in an iframe. New app builder pages enforce a restrictive frame-src content security policy that blocks them from rendering inside an iframe, and the auth callback breaks in that context. Retool staff have confirmed this scenario is not yet supported but is being tracked internally as a high-priority request. For now, the only reliable path is to link out to the new app rather than iframe it, or to keep the app in the classic builder until native embed support ships.

Sources

:bookmark: Embedding new Retool AI app into Classic app
A Retool staff member confirms embedding a new app builder app via iframe (yielding an 'Invalid auth callback' error) isn't currently supported but is being tracked as a high-priority request.
:bookmark: Embedding New Retool Apps inside Classic Apps?
Corroborates the same limitation and explains the root cause—the new app builder page enforces a restrictive frame-src CSP header—while confirming the recommended interim approach is to link out rather than iframe.

The Community Team is testing out a new automation. Let us know if it's helpful (or not) by leaving a :heart:, :+1:, or :-1:. Or by marking this post as the "Solution"! Let us know if you have any feedback here. :rocket:

Hello there @Samy_M_Nasri welcome to the Community! :partying_face:

You're right, new app builder apps can't be embedded in an iframe yet the way Classic apps can. It's a known limitation. You can see it listed under Capabilities and limitations. It's on our radar, and I've logged your Salesforce use case on our internal tracking ticket.

For now the reliable path is to link out to the new app rather than embed it. I'll follow up here as soon as I have an update! :folded_hands: