API Reference
Calls

Remove the supervisor

DELETE
/v1/calls/{call_id}/supervision

Idempotent — returns 204 whether or not a supervisor was active on the call.

Who can call this: a signed-in workspace owner or admin, or a member holding the Supervisor licence — or an API key or OAuth token with the calls.supervise scope.

Authorization

bearerAuth
AuthorizationBearer <token>

Long-lived ES256 JWT minted from the dashboard (https://app.sautikit.com/developers/api-keys). Signed by the platform keyring. Carries workspace_id and scopes claims; revoked via the platform deny-list.

In: header

Path Parameters

call_id*string

The call's Sautikit UUID, or the PBX session id the same call carries on the wire (HD_…, returned as session_id on POST /v1/calls and on every webhook). Either form addresses the same call. A call outside the active workspace returns 404, never 400 — a malformed id (neither form) is the only case that returns 400.

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

curl -X DELETE "https://example.com/v1/calls/string/supervision"
Empty
{  "error": {    "code": "validation.bad_request",    "message": "string",    "request_id": "string",    "details": [      "string"    ],    "resolution": "string",    "reason": "invalid_characters",    "suggested_e164": "+254727524723"  }}
{  "error": {    "code": "validation.bad_request",    "message": "string",    "request_id": "string",    "details": [      "string"    ],    "resolution": "string",    "reason": "invalid_characters",    "suggested_e164": "+254727524723"  }}
{  "error": {    "code": "validation.bad_request",    "message": "string",    "request_id": "string",    "details": [      "string"    ],    "resolution": "string",    "reason": "invalid_characters",    "suggested_e164": "+254727524723"  }}
{  "error": {    "code": "validation.bad_request",    "message": "string",    "request_id": "string",    "details": [      "string"    ],    "resolution": "string",    "reason": "invalid_characters",    "suggested_e164": "+254727524723"  }}
{  "error": {    "code": "validation.bad_request",    "message": "string",    "request_id": "string",    "details": [      "string"    ],    "resolution": "string",    "reason": "invalid_characters",    "suggested_e164": "+254727524723"  }}
{  "error": {    "code": "validation.bad_request",    "message": "string",    "request_id": "string",    "details": [      "string"    ],    "resolution": "string",    "reason": "invalid_characters",    "suggested_e164": "+254727524723"  }}

Change the supervisor's mode PATCH

Switches the active supervision between `listen`, `whisper` and `barge` in place. Setting the mode it is already in succeeds without contacting the PBX. A supervisor who has muted their own leg stays unheard regardless of mode. **Who can call this:** a signed-in workspace owner or admin, or a member holding the Supervisor licence — or an API key or OAuth token with the `calls.supervise` scope.

Long-poll for live call-control events (MCP live call control) GET

Long-poll mailbox read for a call placed with `control: "mcp"` on `POST /v1/calls`. Returns as soon as at least one event with `seq > after_seq` exists, or after `timeout_seconds` with an empty `events` array and `timed_out: true`. Only calls under `control_mode = "mcp"` are readable here — any other call 404s exactly like a missing call (`calls.control_not_enabled` vs `calls.not_found`; both 404).