Have an oEmbed endpoint whitelisted?

The general recommendation is to first start by building a plugin based on the information at https://codex.wordpress.org/Embeds#How_Can_I_Add_or_Change_Support_For_Websites.3F

A plugin will allow you to iterate on the implementation freely of WordPress core, and allow developers to gauge the popularity and security before considering whitelisting it.