We'll have an official API client for web games out sometime. We intentionally block iframe requests and cross-domains requests right now for security reasons. Sorry about the delay.
