Ask to open the call for speakers

POST/v1/organization/{orgId}/sessions-workspace/events/{eventId}/cfp/open

US Region: https://public-api.sessionboard.com · EU Region: https://public-api-eu.sessionboard.com

Asks a person to open the call. Opening makes the public form take submissions, so an API call never opens it directly: it answers 202 with status: needs_approval and a link, and nothing changes until a person approves it in Sessionboard Sessions. It then runs as that person. Do not call again for the same change. A trial opens without a card. Requires write:sessions. Refused for a key restricted to particular events. Also at POST /v1/sessions-workspace/events/{eventId}/cfp/open.

Request example

cURL

curl --request POST \
  --url 'https://public-api.sessionboard.com/v1/organization/{orgId}/sessions-workspace/events/{eventId}/cfp/open' \
  --header 'x-access-token: <api-token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "source": {
    "client": "<string>",
    "version": "<string>",
    "run_id": "<string>",
    "prompt": "<string>"
  }
}'

JavaScript

const response = await fetch('https://public-api.sessionboard.com/v1/organization/{orgId}/sessions-workspace/events/{eventId}/cfp/open', {
  method: 'POST',
  headers: {
    "x-access-token": "<api-token>",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    "source": {
      "client": "<string>",
      "version": "<string>",
      "run_id": "<string>",
      "prompt": "<string>"
    }
  }),
});

const data = await response.json();
console.log(data);

Python

import requests

response = requests.request(
    "POST",
    "https://public-api.sessionboard.com/v1/organization/{orgId}/sessions-workspace/events/{eventId}/cfp/open",
    headers={
        "x-access-token": "<api-token>",
        "Content-Type": "application/json"
    },
    json={
        "source": {
            "client": "<string>",
            "version": "<string>",
            "run_id": "<string>",
            "prompt": "<string>"
        }
    },
)

print(response.json())

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => "https://public-api.sessionboard.com/v1/organization/{orgId}/sessions-workspace/events/{eventId}/cfp/open",
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => "POST",
    CURLOPT_POSTFIELDS => '{
  "source": {
    "client": "<string>",
    "version": "<string>",
    "run_id": "<string>",
    "prompt": "<string>"
  }
}',
    CURLOPT_HTTPHEADER => [
        "x-access-token: <api-token>",
        "Content-Type: application/json",
    ],
]);

$response = curl_exec($curl);
curl_close($curl);

echo $response;

Go

package main

import (
  "fmt"
  "io"
  "net/http"
  "strings"
)

func main() {
  req, _ := http.NewRequest("POST", "https://public-api.sessionboard.com/v1/organization/{orgId}/sessions-workspace/events/{eventId}/cfp/open", strings.NewReader(`{
  "source": {
    "client": "<string>",
    "version": "<string>",
    "run_id": "<string>",
    "prompt": "<string>"
  }
}`))
  req.Header.Add("x-access-token", "<api-token>")
  req.Header.Add("Content-Type", "application/json")

  res, _ := http.DefaultClient.Do(req)
  defer res.Body.Close()
  body, _ := io.ReadAll(res.Body)

  fmt.Println(string(body))
}

Java

HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://public-api.sessionboard.com/v1/organization/{orgId}/sessions-workspace/events/{eventId}/cfp/open"))
    .header("x-access-token", "<api-token>")
    .header("Content-Type", "application/json")
    .method("POST", HttpRequest.BodyPublishers.ofString("{\n  \"source\": {\n    \"client\": \"<string>\",\n    \"version\": \"<string>\",\n    \"run_id\": \"<string>\",\n    \"prompt\": \"<string>\"\n  }\n}"))
    .build();

HttpResponse<String> response = HttpClient.newHttpClient()
    .send(request, HttpResponse.BodyHandlers.ofString());

System.out.println(response.body());

Try it

RegionUS Region — https://public-api.sessionboard.comEU Region — https://public-api-eu.sessionboard.com

Authorization

Send asAPI token (x-access-token)OAuth access token (Bearer)

Token

Your token stays in this page. It is sent only to the region above and is never saved; it is gone when you leave or reload the page.

Path parameters

orgId*

eventId*

Body application/json

{ "source": { "client": "<string>", "version": "<string>", "run_id": "<string>", "prompt": "<string>" } }

POST

Send request

Authorizations

• x-access-tokenstringheader

  Organization API token. Generate from Organization Settings → API Tokens.

• AuthorizationBearer <token>headeror

  OAuth 2.1 access token. Obtained via the OAuth PKCE flow at /oauth/token.

Send one of these. See Authentication.

Path parameters

• orgIdstringpathrequired

  Your organization ID. Any other organization returns 404.

• eventIdintegerpathrequired

  The Sessions event ID.

Request body

application/json

• sourceSessionsWorkspaceSource

  Optional on every write: which assistant is calling and what the person asked it. Recorded with the change in the organization's activity and on any approval request.

  Show child attributes

  • clientstring
  • versionstring
  • run_idstring
  • promptstring

    Max length

    2000

Example

{
  "source": {
    "client": "<string>",
    "version": "<string>",
    "run_id": "<string>",
    "prompt": "<string>"
  }
}

Responses

202application/json

Waiting for a person: nothing was published. payload.url opens the request in Sessionboard Sessions, where a person approves or declines it. An approved request runs as that person.

• successboolean
• payloadSessionsWorkspaceApprovalRequest
  Show child attributes

  • statusstring

    Allowed values

    "needs_approval"

  • approval_idstring<uuid>
  • urlstring<uri>

    Where a person approves or declines it in Sessionboard Sessions (/sessions/{orgId}/approvals?id={approval_id}).

  • notestring

400application/json

VALIDATION_ERROR: the body or a path id does not match the schema. source is always accepted.

• errorstring

  Allowed values

  "VALIDATION_ERROR", "SCOPE_REQUIRED", "ORG_WIDE_TOKEN_REQUIRED", "FORBIDDEN", "NOT_FOUND", "CONFLICT", "QUOTA_EXCEEDED"

• messagestringrequired
• codestring

  A more specific reason: enterprise_only, trial_ended, plan_ended, in_use.

• upgradestring

  With enterprise_only: what needs a bigger plan or the platform (events, speakers, review_plans, forms, …).

401

Missing, invalid or expired token.

403application/json

• SCOPE_REQUIRED: the token lacks write:sessions.
• ORG_WIDE_TOKEN_REQUIRED: the key is restricted to particular events.
• code: enterprise_only with upgrade: the self-serve plan does not include it (another event this year, more speakers on the event); a person chooses a bigger plan or talks to us about the platform.
• code: trial_ended or plan_ended: the self-serve plan is read-only; everything can still be read.
• FORBIDDEN with no code: the token's user is not an organization admin.

• errorstring

  Allowed values

  "VALIDATION_ERROR", "SCOPE_REQUIRED", "ORG_WIDE_TOKEN_REQUIRED", "FORBIDDEN", "NOT_FOUND", "CONFLICT", "QUOTA_EXCEEDED"

• messagestringrequired
• codestring

  A more specific reason: enterprise_only, trial_ended, plan_ended, in_use.

• upgradestring

  With enterprise_only: what needs a bigger plan or the platform (events, speakers, review_plans, forms, …).

404application/json

NOT_FOUND: orgId is not the token's organization, or the event, session or sponsor is not in it.

• errorstring

  Allowed values

  "VALIDATION_ERROR", "SCOPE_REQUIRED", "ORG_WIDE_TOKEN_REQUIRED", "FORBIDDEN", "NOT_FOUND", "CONFLICT", "QUOTA_EXCEEDED"

• messagestringrequired
• codestring

  A more specific reason: enterprise_only, trial_ended, plan_ended, in_use.

• upgradestring

  With enterprise_only: what needs a bigger plan or the platform (events, speakers, review_plans, forms, …).

423

A person has paused connected assistants for the organization (code: AGENT_WRITES_PAUSED); writes wait until they resume it in Sessionboard.

429

The token's request limit (100 requests per 15 minutes by default) or, for writes, its daily write quota. Wait Retry-After seconds.

• Retry-Afterintegerheader

  Seconds to wait before retrying.

Response examples

202

{
  "success": true,
  "payload": {
    "status": "needs_approval",
    "approval_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "url": "https://example.com",
    "note": "<string>"
  }
}

400

{
  "error": "VALIDATION_ERROR",
  "message": "<string>",
  "code": "<string>",
  "upgrade": "<string>"
}

403 · Past the plan's speakers per event

{
  "message": "This event has reached the speakers your plan includes. Bigger events are part of Growth or the Sessionboard platform.",
  "code": "enterprise_only",
  "upgrade": "speakers"
}

403 · The trial has ended

{
  "message": "Your Sessions trial has ended. Choose a plan to keep going.",
  "code": "trial_ended"
}

404

{
  "error": "VALIDATION_ERROR",
  "message": "<string>",
  "code": "<string>",
  "upgrade": "<string>"
}