Long-poll for live call-control events (MCP live call control)
Long-poll mailbox read for a call placed with control: "mcp"
on POST /v1/calls. Returns as soon as at least one event with
seq > after_seq exists, or after timeout_seconds with an
empty events array and timed_out: true.
Only calls under control_mode = "mcp" are readable here —
any other call 404s exactly like a missing call
(calls.control_not_enabled vs calls.not_found; both 404).
Authorization
bearerAuth Long-lived ES256 JWT minted from the dashboard (https://app.sautikit.com/developers/api-keys). Signed by the
platform keyring. Carries workspace_id and scopes claims;
revoked via the platform deny-list.
In: header
Path Parameters
UUID of the Sautikit call row returned by POST /v1/calls.
uuidQuery Parameters
Return only events with seq greater than this cursor.
int640Long-poll hold time; clamped to [1, 25].
1 <= value <= 2520Response Body
application/json
application/json
application/json
application/json
application/json
application/json
curl -X GET "https://example.com/v1/calls/497f6eca-6276-4993-bfeb-53cbbbba6f08/control/events"{ "events": [ { "event_id": "string", "seq": 0, "type": "string", "at": "2019-08-24T14:15:22Z", "payload": {}, "response_required": true } ], "next_seq": 0, "call_status": "string", "timed_out": true}{ "error": { "code": "validation.bad_request", "message": "string", "request_id": "string" }}{ "error": { "code": "validation.bad_request", "message": "string", "request_id": "string" }}{ "error": { "code": "validation.bad_request", "message": "string", "request_id": "string" }}{ "error": { "code": "validation.bad_request", "message": "string", "request_id": "string" }}{ "error": { "code": "validation.bad_request", "message": "string", "request_id": "string" }}Terminate an active call POST
Requests termination of an in-progress call via the PBX. The browser SDK dials directly over WebRTC; this server-side endpoint is the control-plane hangup used to force-end a live call. Workspace isolation: `call_id` must belong to the active workspace, otherwise this endpoint returns 404 (cross-tenant existence is not leaked). Idempotent: if the PBX reports the call already ended, the request still succeeds. Keys on the Sautikit call row UUID (the `call_id` from `POST /v1/calls` / the `id` from `GET /v1/calls`), never the PBX session id — the server resolves the stored PBX session itself.
Submit voice actions for a control event (MCP live call control) POST
Answers a `response_required` event from `GET /v1/calls/{call_id}/control/events` with a voice-actions batch (same schema as `validate_voice_actions`). Each event can be answered exactly once.