Every endpoint of the Socketino REST API, generated from the API itself.
All endpoints are relative to https://api.socketino.com. Create an API key in your Socketino dashboard, then authenticate every request with it.
apiKey — HTTP Basic auth carrying only the API key secret: Authorization: Basic base64(<key secret>).
accessToken — Operator session token issued by the Socketino dashboard: Authorization: Token <access token>.
Download the OpenAPI specification for use with your own tooling.
List channel subscriptions
Lists which connections are currently subscribed to which channels of a project, including the presence member id where the channel is a presence channel. Requires the channelsubscriptions:read scope.
| Name | In | Type | Description |
|---|---|---|---|
| projectId | query | string | Required for an operator session; ignored for an API key, which is pinned to the project it was issued against. |
| channelName | query | string | |
| limit | query | integer | |
| skip | query | integer | |
| sortField | query | string | |
| sortDirection | query | string (ASC | DESC) |
| Status | Meaning |
|---|---|
| 200 | Array of channel subscriptions |
| 401 | Missing or invalid credentials |
| 403 | API key is missing the channelsubscriptions:read scope |
| 404 | No such project in your organization |
| 429 | API key rate limit exceeded |
| default | Request failed |
List live websocket connections
Lists the currently-open websocket connections of your project — one row per connected client, with its socket id and the endpoint it is attached to. Requires the connections:read scope.
| Name | In | Type | Description |
|---|---|---|---|
| projectId | query | string | |
| limit | query | integer | |
| skip | query | integer | |
| sortField | query | string | |
| sortDirection | query | string (ASC | DESC) |
| Status | Meaning |
|---|---|
| 200 | Array of connections |
| 401 | Missing or invalid credentials |
| 403 | API key is missing the connections:read scope |
| 429 | API key rate limit exceeded |
| default | Request failed |
List projects
Lists the projects of your organization. Requires the projects:read scope. An API key is issued against a single project, so a key-authenticated call returns that project alone.
| Status | Meaning |
|---|---|
| 200 | Array of projects |
| 401 | Missing or invalid credentials |
| 403 | API key is missing the projects:read scope |
| 429 | API key rate limit exceeded |
| default | Request failed |
Get a project by id
Returns a single project of your organization. Requires the projects:read scope. Answers 404 — not 403 — for a project of another organization, so ids cannot be probed across tenants.
| Name | In | Type | Description |
|---|---|---|---|
| projectIdrequired | path | string |
| Status | Meaning |
|---|---|
| 200 | The project |
| 401 | Missing or invalid credentials |
| 403 | API key is missing the projects:read scope |
| 404 | No such project in your organization |
| 429 | API key rate limit exceeded |
| default | Request failed |
Update a project
Updates the project the key was issued against. Requires the projects:write scope. Answers 404 — not 403 — for a project the caller does not own.
| Name | In | Type | Description |
|---|---|---|---|
| projectIdrequired | path | string |
| Status | Meaning |
|---|---|
| 200 | The updated project |
| 401 | Missing or invalid credentials |
| 403 | API key is missing the projects:write scope |
| 404 | No such project in your organization |
| 429 | API key rate limit exceeded |
| default | Request failed |
List webhook subscriptions
Webhook subscriptions deliver project.created, project.updated, channel.occupied, channel.vacated, member.added and member.removed events to your server as signed POST requests (X-Socketino-Signature: t=<timestamp>,v1=<hex HMAC-SHA256 of "timestamp.body">). An endpoint failing 20 times in a row is disabled automatically. Subscriptions are managed with an operator access token; the secret is only returned once, on create.
| Name | In | Type | Description |
|---|---|---|---|
| projectId | query | string |
| Status | Meaning |
|---|---|
| 200 | Array of webhook subscriptions (without secrets) |
| default | Request failed |
Create a webhook subscription
The response includes the signing secret exactly once — store it; it cannot be retrieved again.
| Field | Type | Description |
|---|---|---|
| projectIdrequired | string | |
| urlrequired | string | |
| events | array (project.created | project.updated | channel.occupied | channel.vacated | member.added | member.removed) | Empty array subscribes to all events |
| Status | Meaning |
|---|---|
| 200 | The created subscription, including its secret |
| default | Request failed |
Update a webhook subscription
url, events and active are editable; the secret and project are immutable. Re-enabling an auto-disabled endpoint is done by setting active back to true.
| Name | In | Type | Description |
|---|---|---|---|
| webhookSubscriptionIdrequired | path | string |
| Status | Meaning |
|---|---|
| 200 | The updated subscription (without secret) |
| default | Request failed |
Delete a webhook subscription
Delete a webhook subscription
| Name | In | Type | Description |
|---|---|---|---|
| webhookSubscriptionIdrequired | path | string |
| Status | Meaning |
|---|---|
| 200 | Deleted |
| default | Request failed |