Skip to main content
Solved

Quick action buttons from a custom HTML widget

  • August 7, 2025
  • 2 replies
  • 58 views

ORBR
Forum|alt.badge.img+6

I really love the new “Quick Actions” widget, but I want to create similar thing using HTML, just with our own styling.

 

What is the right way to call the manual action “Attach new playbook” API using HTML?

 

 

Best answer by ylandovskyy

Hey ​@ORBR ,

Unfortunately, there is no way to securely execute API requests from the widget code itself. As it would be required to store API credentials within the HTML code, which is going to be visible to any user.

 

Is styling the only concern or you have additional special use cases that you need to solve?

2 replies

ylandovskyy
Staff
Forum|alt.badge.img+16
  • Staff
  • Answer
  • August 7, 2025

Hey ​@ORBR ,

Unfortunately, there is no way to securely execute API requests from the widget code itself. As it would be required to store API credentials within the HTML code, which is going to be visible to any user.

 

Is styling the only concern or you have additional special use cases that you need to solve?


SoarAndy
Staff
Forum|alt.badge.img+12
  • Staff
  • August 11, 2025

Taking this sideways…

...you *could* have the HTML widget render an iframe hosted on another solution, or at least call a remote API which then points back to SecOps.  This way the API key isn’t in the widget exposed to the analyst, but you still have some authentication/authorisation flow to consider to keep it safe.