Skip to main content
POST
Error

Authorizations

Authorization
string
header
required

Browser publishable key (Authorization: Bearer flowyte_pk_…), scope chat:public only — origin-allowlisted, agent-pinned, rate-limited. Used only by the embeddable chat widget; can never read tenant data. chat:public is restricted: it is grantable ONLY to a publishable key, never to a flowyte_sk_ secret key.

Headers

Origin
string
required

Browser origin; must be in the publishable key's allowed_origins.

Body

application/json
turnstileToken
string

Cloudflare Turnstile token, when bot protection is enabled for the widget.

identityToken
string

Optional signed identity token to attach a known visitor identity to the session.

Response

Widget conversation + transport.

success
boolean
required
data
object
required
message
string
errors
object[]