Skip to main content
POST
Begin Connection

Authorizations

__Host-signal_session
string
cookie
required

Production host-only browser session. Read csrf_token from GET /v1/me using this session; bearer authentication returns a null CSRF token and takes precedence over cookies. Session mutations require exact Origin and X-CSRF-Token. Development uses signal_session.

Headers

Origin
string
required

Required for this browser-session-only mutation. Origin must exactly match the workspace; read the CSRF token from GET /v1/me using the browser session and omit Authorization. Bearer authentication is rejected by this route.

X-CSRF-Token
string
required

Required for this browser-session-only mutation. Origin must exactly match the workspace; read the CSRF token from GET /v1/me using the browser session and omit Authorization. Bearer authentication is rejected by this route.

Response

Successful Response