API Reference
SIP Credentials

Mint a short-lived SIP JWT for the browser dialer

POST
/v1/sip/token

Workspace-scoped JWT consumed by the in-browser softphone to authenticate the WebSocket SIP registration.

The response also carries the endpoint, protocol and ICE/TURN configuration the browser SDK needs — pass those through to the client rather than hard-coding them, so calling-infrastructure changes do not require a front-end release. Renew before expiresIn seconds elapse.

Authorization

bearerAuth
AuthorizationBearer <token>

Long-lived ES256 JWT minted from the dashboard (https://app.sautikit.com/developers/api-keys). Signed by the platform keyring. Carries workspace_id and scopes claims; revoked via the platform deny-list.

In: header

Response Body

application/json

application/json

application/json

curl -X POST "https://example.com/v1/sip/token"
{  "token": "string",  "endpoint": "string",  "protocol": "string",  "turnServer": {},  "clientName": "string",  "expiresIn": 0}
{  "error": {    "code": "validation.bad_request",    "message": "string",    "request_id": "string",    "details": [      "string"    ]  }}
{  "error": {    "code": "validation.bad_request",    "message": "string",    "request_id": "string",    "details": [      "string"    ]  }}