---
title: "Mint a live-view token"
method: POST
path: "/phones/sessions/{session_id}:createLiveViewToken"
tags: ["Phones"]
---

# Mint a live-view token

`POST /phones/sessions/{session_id}:createLiveViewToken`

## Request

- Base URL: `https://api.axilio.ai/api/v1`
- URL: `https://api.axilio.ai/api/v1/phones/sessions/{session_id}:createLiveViewToken`
- Auth: API key in header `X-Axilio-Api-Key`
- TypeScript: <https://skmtc.dev/axilioai/apis/axilio-api-2/docs/phones/sessions/:session_id:createLiveViewToken/post.ts> (a function with typed inputs; its response is checked against the schema)

Mints a fresh live-view token (and hosted viewer URL) for an active session, per the session's allocate-time live_view settings: token-mode sessions re-issue the bearer link allocate returned once, org-mode sessions exchange the caller's identity. The token is view-only when the session was allocated with live_view.view_only or the caller has the viewer role; only members and admins get a token that can drive the phone. Refused for sessions allocated with live_view.disabled, for inactive sessions, and for sessions outside the caller's organization (reads as not found). Sharp edge: the returned URL embeds the token and is a bearer capability — whoever holds it can watch (and, unless the token is view-only, drive) the phone until the session ends, at which point both stop working.

## Path parameters

- `session_id` string, uuid, required: Phone session identifier

## Response `200`

OK

- PhoneLiveViewTokenResponse: Live-view token mint response.
  - `live_view_url` string, required: Hosted live-view page URL embedding this token (live screen + interaction, iframe-embeddable). Bearer capability; treat as a secret. Dies with the session.
  - `phone_id` string, required: The session's phone.
  - `session_id` string, required: Session the token is scoped to.
  - `token` string, required: Allocation-scoped live-view token.
  - `view_only` boolean, required: Whether the session's live view is watch-only.

## Other responses

- `400`: Bad Request
- `404`: Not Found
- `422`: Unprocessable Entity
- `500`: Internal Server Error

## Changes

- **2026-10-24** `ecca093572e0`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/axilioai/apis/axilio-api-2/changes/phones/sessions/:session_id:createLiveViewToken/post.md)

---

[API](https://skmtc.dev/axilioai/apis/axilio-api-2.md) - [All operations](https://skmtc.dev/axilioai/apis/axilio-api-2/llms.txt) - [OpenAPI document](https://skmtc.dev/axilioai/apis/axilio-api-2/revisions/62aa324803a7?raw)