<div id="healthnotes-recorder"></div>
<script>
(async function() {
  // Generate secure session token
  const response = await fetch('https://healthnotes.ai/api/embed/session', {
    method: 'POST',
    headers: {
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({
      apiKey: 'your_api_key_here'
    })
  });
  
  const result = await response.json();
  if (result.success) {
    // Create iframe with session token (no API key exposed in URL)
    const iframe = document.createElement('iframe');
    iframe.src = `https://healthnotes.ai/record?sessionToken=${result.data.sessionToken}`;
    iframe.width = '100%';
    iframe.height = '600px';
    iframe.frameBorder = '0';
    iframe.allow = 'microphone';
    iframe.style = 'border: 1px solid #e2e8f0; border-radius: 8px;';
    
    document.getElementById('healthnotes-recorder').appendChild(iframe);
  } else {
    console.error('Failed to initialize HealthNotes recorder:', result.error);
  }
})();
</script>

Perfect for simple integrations. Just replace {apiKeyPlaceholder} with your actual API key.