---
title: "Mint a live-view token"
method: POST
path: "/phones/sessions/{session_id}/live-view-token"
tags: ["phones"]
---

# Mint a live-view token

`POST /phones/sessions/{session_id}/live-view-token`

Mints a fresh live-view token (and hosted viewer URL) for an active session, per the session's allocate-time live_view settings: token-mode sessions re-issue the bearer link allocate returned once, org-mode sessions exchange the caller's identity. Refused for sessions allocated with live_view.disabled, for inactive sessions, and for sessions outside the caller's organization (reads as not found). Sharp edge: the returned URL embeds the token and is a bearer capability — whoever holds it can watch (and, unless the session was allocated view-only, drive) the phone until the session ends, at which point both stop working.

## Path parameters

- `session_id` string, uuid, required — Phone session identifier

## Response `200`

OK

- PhoneLiveViewTokenResponse — Live-view token mint response.
  - `$schema` string, uri — A URL to the JSON Schema for this object.
  - `live_view_url` string, required — Hosted live-view page URL embedding this token (live screen + interaction, iframe-embeddable). Bearer capability; treat as a secret. Dies with the session.
  - `phone_id` string, required — The session's phone.
  - `session_id` string, required — Session the token is scoped to.
  - `token` string, required — Allocation-scoped live-view token.
  - `view_only` boolean, required — Whether the session's live view is watch-only.

## Other responses

- `default` — Error

## Changes

- **2026-08-23** `0544f51ba55a` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/axilioai/apis/axilio-api/changes/phones/sessions/:session_id/live-view-token/post.md)

---

[API](https://skmtc.dev/axilioai/apis/axilio-api.md) · [All operations](https://skmtc.dev/axilioai/apis/axilio-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/axilioai/axilio-api/revisions/8a66f81813b3/schema)