Installing the widget
One script tag, one container element, and the widget renders inline on your site.
The Onboard widget is a small JavaScript bundle that renders the booking form inline on your website. It does not use an iframe by default, so it can inherit your site's typography and respect the surrounding layout.
The script tag
<div id="onboard-widget"></div>
<script
src="https://widget.onboardos.de/v1/loader.js"
data-restaurant="rst_3f9a2c1d"
data-target="#onboard-widget"
data-theme="warm"
defer
></script>Installation steps
- 1
Copy the snippet
FromSettings → Widgetin your dashboard, copy the script tag — thedata-restaurantattribute is filled in for you. - 2
Paste into your site
Add a<div id="onboard-widget"></div>where you want the form to appear and place the script tag at the end of<body>. - 3
Add your origin to the allowlist
Back inSettings → Widget → Allowlist, add the exact origin (e.g.https://my-restaurant.com) where the widget will run. The widget refuses to render on origins not on the list. - 4
Test in a private window
Open the page in an incognito window. The form should render within a second. Submit a test booking and verify it lands in the reservations list.
Content Security Policy
If your site sets a CSP, allow the widget's domains:
Content-Security-Policy:
script-src 'self' https://widget.onboardos.de;
connect-src 'self' https://api.onboardos.de https://widget.onboardos.de;
img-src 'self' data: https://cdn.onboardos.de;data-mode="iframe" on the script tag to enable it.Bot protection
Every public booking POST runs through Cloudflare Turnstile. The widget renders the challenge inline (passive in the common case, one click on suspicion). No configuration is required on the embedding site — Onboard owns the Turnstile secret. When Onboard's Turnstile env vars are unset (local dev, isolated previews) the check is skipped silently.
AI bookings toggle
Widget settings expose two separate switches: widget_enabled controls public guest bookings, ai_bookings_enabled controls whether external AI agents (ChatGPT, Claude, partner concierges) can book through the MCP gateway. A restaurant that wants to accept human bookings but not AI bookings — common during pilot phases — flips the second switch off without affecting the embed widget.