# Script tag The SDK's `client` entry is a self-contained ES module, so any server-rendered application can load it from jsDelivr without npm or a bundler. Let's add the chat sidebar with a script tag, send the token request through your framework's CSRF protection, and wire it into a Ruby on Rails app. ## Load the widget Let's give the widget a container with a definite height and mount it from a module script: ```html

``` - Use `type="module"`. The 3 KB loader imports the chat chunk lazily, relative to its own URL. - Import the full `/dist/client.js` path. The bare package URL has no browser entry. - Pin an exact version. A range such as `@0` lets jsDelivr's cache serve the loader and its chunks from different releases, which fails with a 404 after each release. - Every option in [Configuration](./configuration.md) works the same, and the returned handle has the same `update`, `reset`, `stop`, and `unmount` methods. - `mountAstralBeamTenantUserList` and `mountAstralBeamTenantList` load from the same URL. See [Tenant directories](./listings.md). **NOTE**: If your application sends a Content Security Policy, allow `https://cdn.jsdelivr.net` in `script-src` and your AstralBeam API in `connect-src`. The widget injects its stylesheet into its shadow root with a `