The API must be used in an iframe.