Create a View
Mint a scoped, component-gated hosted page or origin-restricted iframe composition. The response contains the bearer token once; keep it private.
Authentication
AuthorizationBearer
Use Bearer <api-key>.
Headers
BCTRL-Version
Dated API version. Defaults to the release pinned when the API key was created.
Allowed values:
BCTRL-Space
Select one authorized Space by its opaque ID or unique name. Omission uses the operation default.
BCTRL-Subaccount-Id
Optional effective subaccount context for organization API keys. Subaccount API keys are already scoped and cannot use this header to act as another subaccount.
Idempotency-Key
Optional retry key for this billable operation. Reusing the same key with the same request replays its stable outcome; credential-bearing results may be freshly issued for the same principal. Reusing it with a different request returns 409.
Request
This endpoint expects an object.
scope
components
Optional content and notification surfaces for the View.
control
Allow live browser interaction and actions from the notification center.
conversationSend
Allow giving input to and cancelling Tasks in the included conversations. Defaults to the value of control.
expiresInSeconds
View lifetime in seconds. Defaults to 8 hours; maximum 30 days.
presentation
Hosted presentation by default; use embedded with explicit allowed origins.
Response headers
BCTRL-Request-Id
Current request identifier, also echoed in errors.
BCTRL-Version
Negotiated dated API version.
RateLimit-Limit
Evaluated policy limit; zero when no finite policy was evaluated.
RateLimit-Remaining
Remaining policy budget; zero when no finite policy was evaluated.
RateLimit-Reset
Seconds until reset; zero when no finite policy was evaluated.
Response
Created
HostedViewCreateResponse
OR
EmbeddedViewCreateResponse
Errors
400
Bad Request Error
401
Unauthorized Error
403
Forbidden Error
404
Not Found Error
429
Too Many Requests Error
500
Internal Server Error
503
Service Unavailable Error

