Mint a scoped token for a browser call | Voicebip

Mints a short-lived JWT scoped to a single agent for a browser (WebRTC) call. Call it server-side with a full-scope API key or a dashboard session, then hand the returned token to the browser so it can submit an SDP offer to POST /v1/webrtc/offer without exposing your API key. The token carries a webrtc_agent_id claim; the workspace must own the agent (a 404 leaks nothing about other workspaces’ agents).

Mints a short-lived JWT scoped to a single agent for a browser (WebRTC) call. Call it **server-side** with a full-scope API key or a dashboard session, then hand the returned `token` to the browser so it can submit an SDP offer to `POST /v1/webrtc/offer` without exposing your API key. The token carries a `webrtc_agent_id` claim; the workspace must own the agent (a `404` leaks nothing about other workspaces' agents).

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Request

This endpoint expects an object.

agent_idstringRequired

ttl_secondsintegerOptional60-3600Defaults to 600

Token lifetime in seconds (60–3600, default 600).

Response

Scoped token minted

tokenstring

Scoped JWT to hand to the browser.

expires_atdatetime

agent_idstring

ice_serverslist of objects

Errors

400

Create Web Rtc Token Request Bad Request Error

404

Create Web Rtc Token Request Not Found Error

$	curl -X POST https://api.voicebip.com/v1/webrtc/token \
>	-H "Authorization: Bearer <token>" \
>	-H "Content-Type: application/json" \
>	-d '{
>	"agent_id": "agt_WX1Y_abcdef123456"
>	}'

1	{
2	"token": "token",
3	"expires_at": "2024-01-15T09:30:00Z",
4	"agent_id": "agent_id",
5	"ice_servers": [
6	{
7	"urls": [
8	"urls"
9	],
10	"username": "username",
11	"credential": "credential"
12	}
13	]
14	}