Skip to main content
POST
cURL

Authorizations

Authorization
string
header
required

Better Auth OAuth 2.1 authorization-code/device grants. Access tokens are exact-resource bound; the Portal BFF verifies them and delegates a downscoped internal bearer.

Headers

Idempotency-Key
string
required
Required string length: 1 - 160

Body

application/json
message
string
required
Required string length: 1 - 32000
sessionId
string | null
applicationId
integer | null
app
string | null
mode
enum<string> | null

Execution policy. Omit for Auto unless app or applicationId selects a Direct target.

Available options:
auto,
direct,
null
model
string | null
userState
object | null

Client-owned provider, wallets, preferences, and extension values only.

clientId
string | null
cursor
string | null

The caller's current event cursor. When supplied, the start page carries only events after it instead of the whole history; an expired cursor falls back to the full page rather than failing the accepted turn.

Response

Ordered event page

session_id
string
required
cursor
string
required
events
object[]
required
has_more
boolean
required
commits
object[]
Last modified on September 24, 2026