Create a sponsor link

POST/v1/organization/{orgId}/marketing/audience/sponsor-shares/create

US Region: https://public-api.sessionboard.com · EU Region: https://public-api-eu.sessionboard.com

A private link for a sponsor to the people who opted in to hear from partners. Every view and download is recorded. When an assistant (an MCP connection) calls this, it answers 202 with status: needs_approval and a link; a person approves it in Sessionboard. Requires write:marketing; refused for a key restricted to particular events. Also at POST /v1/marketing/audience/sponsor-shares/create.

Request example

cURL

curl --request POST \
  --url 'https://public-api.sessionboard.com/v1/organization/{orgId}/marketing/audience/sponsor-shares/create' \
  --header 'x-access-token: <api-token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "sponsorName": "<string>",
  "sponsorAccountId": "<string>",
  "audienceId": "<string>",
  "definition": {},
  "audienceName": "<string>",
  "days": 123
}'

JavaScript

const response = await fetch('https://public-api.sessionboard.com/v1/organization/{orgId}/marketing/audience/sponsor-shares/create', {
  method: 'POST',
  headers: {
    "x-access-token": "<api-token>",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    "sponsorName": "<string>",
    "sponsorAccountId": "<string>",
    "audienceId": "<string>",
    "definition": {},
    "audienceName": "<string>",
    "days": 123
  }),
});

const data = await response.json();
console.log(data);

Python

import requests

response = requests.request(
    "POST",
    "https://public-api.sessionboard.com/v1/organization/{orgId}/marketing/audience/sponsor-shares/create",
    headers={
        "x-access-token": "<api-token>",
        "Content-Type": "application/json"
    },
    json={
        "sponsorName": "<string>",
        "sponsorAccountId": "<string>",
        "audienceId": "<string>",
        "definition": {},
        "audienceName": "<string>",
        "days": 123
    },
)

print(response.json())

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => "https://public-api.sessionboard.com/v1/organization/{orgId}/marketing/audience/sponsor-shares/create",
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => "POST",
    CURLOPT_POSTFIELDS => '{
  "sponsorName": "<string>",
  "sponsorAccountId": "<string>",
  "audienceId": "<string>",
  "definition": {},
  "audienceName": "<string>",
  "days": 123
}',
    CURLOPT_HTTPHEADER => [
        "x-access-token: <api-token>",
        "Content-Type: application/json",
    ],
]);

$response = curl_exec($curl);
curl_close($curl);

echo $response;

Go

package main

import (
  "fmt"
  "io"
  "net/http"
  "strings"
)

func main() {
  req, _ := http.NewRequest("POST", "https://public-api.sessionboard.com/v1/organization/{orgId}/marketing/audience/sponsor-shares/create", strings.NewReader(`{
  "sponsorName": "<string>",
  "sponsorAccountId": "<string>",
  "audienceId": "<string>",
  "definition": {},
  "audienceName": "<string>",
  "days": 123
}`))
  req.Header.Add("x-access-token", "<api-token>")
  req.Header.Add("Content-Type", "application/json")

  res, _ := http.DefaultClient.Do(req)
  defer res.Body.Close()
  body, _ := io.ReadAll(res.Body)

  fmt.Println(string(body))
}

Java

HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://public-api.sessionboard.com/v1/organization/{orgId}/marketing/audience/sponsor-shares/create"))
    .header("x-access-token", "<api-token>")
    .header("Content-Type", "application/json")
    .method("POST", HttpRequest.BodyPublishers.ofString("{\n  \"sponsorName\": \"<string>\",\n  \"sponsorAccountId\": \"<string>\",\n  \"audienceId\": \"<string>\",\n  \"definition\": {},\n  \"audienceName\": \"<string>\",\n  \"days\": 123\n}"))
    .build();

HttpResponse<String> response = HttpClient.newHttpClient()
    .send(request, HttpResponse.BodyHandlers.ofString());

System.out.println(response.body());

Try it

RegionUS Region — https://public-api.sessionboard.comEU Region — https://public-api-eu.sessionboard.com

Authorization

Send asAPI token (x-access-token)OAuth access token (Bearer)

Token

Your token stays in this page. It is sent only to the region above and is never saved; it is gone when you leave or reload the page.

Path parameters

orgId*

Body application/json

{ "sponsorName": "<string>", "sponsorAccountId": "<string>", "audienceId": "<string>", "definition": {}, "audienceName": "<string>", "days": 123 }

POST

Send request

Authorizations

• x-access-tokenstringheader

  Organization API token. Generate from Organization Settings → API Tokens.

• AuthorizationBearer <token>headeror

  OAuth 2.1 access token. Obtained via the OAuth PKCE flow at /oauth/token.

Send one of these. See Authentication.

Path parameters

• orgIdstringpathrequired

  Your organization ID. Any other organization returns 404.

Request body

application/json

• sponsorNamestring
• sponsorAccountIdstring
• audienceIdstring
• definitionobject

  roles, eventId, attended

• audienceNamestring
• daysinteger

  How long the link works

Example

{
  "sponsorName": "<string>",
  "sponsorAccountId": "<string>",
  "audienceId": "<string>",
  "definition": {},
  "audienceName": "<string>",
  "days": 123
}

Responses

201

payload with the result

202

An assistant's call waits for a person: payload.status: needs_approval, payload.url.

403

• SCOPE_REQUIRED — the token lacks read:marketing (reads) or write:marketing (writes).
• ORG_WIDE_TOKEN_REQUIRED — the token is restricted to particular events; this operation reads the whole organization.
• FORBIDDEN — the organization's plan does not include Marketing, or the token's user cannot change goals (writes need an organization admin or the organization settings permission).