Places, Nearby, EarthView, 3D Metaverse, Post on Map, Add a Place, and entitled RealView.
Credential-safe widget studio
Configure the embed. Own the journey around it.
Generate an exact, source-documented iframe shape without pasting a secret. Then prove loading, fallback, accessibility, origin validation, entitlement, and state ownership before release.
Optional and required access control is represented only by named placeholders.
mGIS and native widgets keep their enterprise and platform boundaries.
Origin, accessibility, denied access, policy, lifecycle, and useful fallback.
source-ready
Mappls Places widget
Mappls Pin 9ADJ1X
Generated iframe source
https://embed.mappls.com/place/9ADJ1X?fullscreen=true&position=top-left&zoom=16&pitch=0This generated URL contains no credential parameter. Confirm whether the production account requires optional access control before release.
Generated from the selected contract
<div class="mappls-widget" aria-busy="false">
<iframe src="https://embed.mappls.com/place/9ADJ1X?fullscreen=true&position=top-left&zoom=16&pitch=0" title="Mappls Places widget" loading="lazy" style="width: 100%; min-height: 420px; border: 0;" allowfullscreen></iframe>
<p><a href="https://embed.mappls.com/place/9ADJ1X?fullscreen=true&position=top-left&zoom=16&pitch=0">Open the Mappls view directly</a></p>
</div>State boundary
The frame renders. Your application remains accountable.
A widget can reduce UI work without becoming the source of truth for your business journey.
The iframe owns only its documented visual interaction; the host owns loading, unavailable, retry, and direct-link fallback states.
Persist a selected Mappls Pin or business record only through a documented and origin-validated callback; never scrape iframe state.
Treat a postMessage, click, or frame load as its exact observable event—not proof that a place was selected, contributed, or reviewed.
Version host records, invalidate stale selection when user input changes, and reconcile any stateful provider journey through an entitled contract.
Release matrix
Prove the hostile paths.
Allowed and blocked production origins
Desktop, narrow mobile, keyboard, touch, and screen reader
Slow, offline, denied entitlement, and frame-blocked states
Content-Security-Policy and browser privacy modes
Exact-origin rejection and malformed message payloads
Unmount/remount, back/forward cache, and duplicate initialization
Accessible text/direct-link fallback with equivalent place context
Do not flatten the platform
Two integrations need a contract, not an iframe guess.
These families stay discoverable without generating syntax the public evidence does not safely establish.
mGIS enterprise widgets
Mount entitled mGIS work views and map widgets through the enterprise JavaScript wrapper.
The official page documents widgets.js and MGIS.Widget(container, options), including widgetName, widgetKey, map settings, and workViewName. Keys, work views, tenant data, and lifecycle events belong to the enterprise contract.Open the mGIS integration plannerNative and cross-platform widgets
Use platform-owned autocomplete, nearby, direction, geofence, tracking, and picker journeys.
Android, iOS, Flutter, and React Native publish distinct package, lifecycle, permission, and callback contracts. Select an exact platform/version guide; an iframe configuration cannot stand in for native integration.Open the 20-path native matrix