Dialer

Mint Softphone Token

CONTACTS NOBODY - but the RESPONSE CAN. Mints a softphone credential.

Returns a short-lived (1 hour) Twilio access token carrying a VoiceGrant, for a browser running the Twilio Voice SDK. Whoever holds it can register a device and place and receive calls as sdr_{user_id}_{org} until it expires. TREAT THE RESPONSE AS A SECRET: it is a bearer credential, not a description of one.

That is why this is the one GET on this router tiered external instead of read, and why it gates on voice:calls:place rather than a read permission - a read-only key must not be able to mint the ability to dial.

user_id is REQUIRED here although voice defaults it. An organisation API key has no user of its own, and defaulting would mint a credential for an identity nobody named. The organisation half of the identity is always the key's own and cannot be supplied.

get/dialer/sessions/token

Request

  • Base URL: https://be.graph8.com/api/v1
  • URL: https://be.graph8.com/api/v1/dialer/sessions/token
  • Auth: HTTP bearer

Query parameters

user_idstring required

The rep this softphone credential is for.

Headers

Authorizationstring nullable
X-Target-Org-Idstring nullable

Response

Successful Response

dataDialerPayload required

An open envelope for one dialer result.

Open because voice owns the shape of a session, a call stub and a queue stat, and it grows them without a contract bump here. A dropped field would otherwise turn an added upstream field into a removed public one.

Changes

No recorded changes to this operation across all 2 revisions of this API.