AXaxilioai
phones

Mint a live-view token

Changed on

Mints a fresh live-view token (and hosted viewer URL) for an active session, per the session's allocate-time live_view settings: token-mode sessions re-issue the bearer link allocate returned once, org-mode sessions exchange the caller's identity. The token is view-only when the session was allocated with live_view.view_only or the caller has the viewer role; only members and admins get a token that can drive the phone. Refused for sessions allocated with live_view.disabled, for inactive sessions, and for sessions outside the caller's organization (reads as not found). Sharp edge: the returned URL embeds the token and is a bearer capability — whoever holds it can watch (and, unless the token is view-only, drive) the phone until the session ends, at which point both stop working.

post/phones/sessions/{session_id}:createLiveViewToken

Request

Path parameters

session_idstring uuid required

Phone session identifier

Response

OK

$schemastring uri

A URL to the JSON Schema for this object.

live_view_urlstring required

Hosted live-view page URL embedding this token (live screen + interaction, iframe-embeddable). Bearer capability; treat as a secret. Dies with the session.

phone_idstring required

The session's phone.

session_idstring required

Session the token is scoped to.

tokenstring required

Allocation-scoped live-view token.

view_onlyboolean required

Whether the session's live view is watch-only.

Example response

{
  "$schema": "/api/v1/PhoneLiveViewTokenResponse.json"
}

Changes