Create session
Mint a live-view session for a device (201).
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Path Parameters
Device id (dev_<uuid>)
Body
watch (frames only) or control (frames + input + takeover). Defaults to watch — the
less-privileged of the two, so an omitted field can never accidentally mint control.
Requested lifetime in seconds. Clamped to the server's allowed band; a client does not get to decide how long a live-browser capability lives.
Response
The minted session (token shown once)
A minted session. session_token is returned EXACTLY ONCE — only its SHA-256 is stored.
ses_<uuid>.
Discriminator for polymorphic SDK decoders. Always "session".
Present only on the mint response.
The BACKEND gateway to connect to. Never the sprite: the sprite's origin and viewer token stay inside the API process.