Files

Canva design publish status (Canva app credential)

Used by the EveryPage Canva Design Editor panel: reports whether the calling Canva user has a live published link for a design, and its state. Auth is a Canva Apps SDK user JWT in the Authorization header (like /api/v1/canva/import - NOT an EveryPage credential) PLUS a verified designToken in the body; both are required, because the response is derived entirely from the design id and an unproven id would make this an enumeration oracle.

For a live UNCLAIMED link the response carries the link identity, view count, contentVersion, and a fresh claimToken. For a link CLAIMED by an EveryPage account it carries claimed: true and the link's share/QR URLs only - never a claim token, and the view count and uuid only when the optional accessToken proves the caller IS the owning account (connectedAccountIsOwner). publishedByOther is a boolean-only disclosure that a DIFFERENT Canva user (a design collaborator) already published this design - publishing anyway would mint a second link behind any QR they already printed.

post/api/v1/canva/design/status

Request

  • Base URL: https://everypage.co
  • URL: https://everypage.co/api/v1/canva/design/status
  • Auth: HTTP bearer

Request body

designTokenstring required

Canva design token (getDesignToken / contentMetadata.designToken). REQUIRED and hard-verified - unlike the import lane there is no unbound fallback to degrade to.

accessTokenstring

Optional EveryPage bearer credential (API key or OAuth access token). In the body because the Authorization header carries the Canva JWT on this lane. When present, the response includes connectedAccountIsOwner.

Response

The design's publish state for the calling Canva user

publishedboolean

The calling Canva user has a live link for this design.

publishedByOtherboolean

A DIFFERENT Canva user has a live link for this design (shared/team designs). Boolean only - nothing about the other link is disclosed.

claimedboolean

The link belongs to an EveryPage account (present when published).

uuidstring uuid

Present when the link is unclaimed, or the presented accessToken is the owner's.

shortIdstring
viewURLstring
qrURLstring

PNG QR code for the share link.

viewCountinteger

Present when unclaimed, or the presented accessToken is the owner's.

contentVersioninteger

Same visibility as viewCount. Increments on every in-place republish.

claimTokenstring

Freshly minted, ONLY while the link is unclaimed (30-day validity). Redeem via POST /api/v1/files/claim or the /api/claim browser link.

connectedAccountIsOwnerboolean

Present only when an accessToken was sent and a link exists: whether that account owns the (claimed) link. Always false while unclaimed.

Example response

{
  "shortId": "aB3xY9kQ2mZ7",
  "viewURL": "https://everypage.co/aB3xY9kQ2mZ7"
}

Changes

No recorded changes to this operation across all 1 revision of this API.