Display
Server-Sent Events for a display (text/event-stream, never compressed): invalidate {screens} → re-fetch with If-None-Match, feed {item}, config, revoked, ping every 20 s; closes after 15 min (scope: display:read)
GET
bearerAuthheader
AuthorizationBearer <token>API key as Bearer token
access_token?stringBearer fallback for clients whose EventSource cannot set headers (https only).
SSE stream
curl -X GET "https://example.com/display/stream"Empty
Pre-aggregated, read-only data for one screen; 403 when the display is not configured for it (scope: display:read) GET
Previous Page
Re-check a locked display’s PIN server-side: 200 { ok }, 5 attempts/min per device (429 + retryAfterSec), every attempt audited without the PIN; 400 for personal tokens or when no PIN is set (scope: display:read) POST
Next Page