---
title: "Open the origin-restricted editor wrapper"
method: GET
path: "/embed/sessions/{session}/editor"
---

# Open the origin-restricted editor wrapper

`GET /embed/sessions/{session}/editor`

## Request

- Base URL: `https://rendry.io/api/v1`
- URL: `https://rendry.io/api/v1/embed/sessions/{session}/editor`
- Auth: none required

No secret or credential in this URL. Public HTML includes only session ID, exact parent origin and expiry; CSP frame-ancestors binds that origin. The customer host must deliver bootstrap_secret by the matching postMessage handshake. This wrapper opens the real editor after redemption.

## Path parameters

- `session` string, required

## Response `200`

Open the origin-restricted editor wrapper

## Other responses

- `400`: Typed refusal with a stable error code.
- `401`: Typed refusal with a stable error code.
- `403`: Typed refusal with a stable error code.
- `404`: Typed refusal with a stable error code.
- `409`: Typed refusal with a stable error code.
- `429`: Typed refusal with a stable error code.

---

[API](https://skmtc.dev/rendry/apis/rendry-api.md) · [All operations](https://skmtc.dev/rendry/apis/rendry-api/llms.txt) · [OpenAPI document](https://skmtc.dev/rendry/apis/rendry-api/revisions/c4fb572c26c9?raw)