Telenaas API

In-app audio calls this key can see, most recent first.

Rings another account over WebRTC. No number is dialled and no carrier is involved, so there is no per-minute charge; pass `to_user_id`. For a call to a telephone, use TeleVoip instead.

Meetings for this tenant, most recent first.

Room size is capped by the tenant's plan. Asking for more is refused rather than quietly reduced.

One meeting, with its join code and dial-in PIN.

Marks it cancelled. Anyone already in the room is not thrown out.

Closes the room. The recording, if there was one, still has to be claimed.

Opens the room and tells everybody watching the directory that it has started.

One demo, with its audience count.

People who asked for a demonstration and have not had one yet.

The audience's questions, most upvoted first, with the answers given.

Scheduled, live and finished product demonstrations.

Creates the demo and its public page. Viewers join by slug and need no account; a demo is a broadcast with a question queue, not a meeting everybody talks in.

Give a number to a person in this tenant, or to a TeleAssistant so that it answers instead.

Telephone call history for this tenant.

An emergency number takes a different path: never billed, never rate-limited, and refused outright if there is no dispatchable location.

Numbers this tenant holds.

A short-lived download link for a file message: the provider's own when it can sign one, ours otherwise.

The website widgets this tenant has, with their public keys and allowed origins.

Returns a public key for the `<script>` tag. The key is not a secret — `allowed_origins` is what keeps the widget to your own sites, and an empty list refuses every origin.

Days moved out of the hot window into the organisation's storage, newest first.

Chat threads this key can see, including those started from a website widget.

Multipart `file`, or JSON `name` and base64 `data`. Stored in the organisation's own storage; the message carries only the name and a reference.

Between the calling person and `user_id`; reuses the existing one.

The hot window, newest last, decrypted for the caller. Older days are in the archive.

Posts into a conversation. Bodies are encrypted at rest per tenant.

The messages of one archived day, fetched from the organisation's storage and decrypted for the caller.

Pass `audience=public` to get only articles that may be sent to a customer.

With its messages. Internal notes are included only for a key holding helpdesk:respond.

Set `internal` to true for a note to colleagues, which is not sent to the requester.

Help desk tickets for this tenant.

Routed to a queue by the same rules a ticket opened by a person would be.

The assistants in this tenant and the numbers they answer.

A greeting, business hours, and what to do outside them: take a message, offer a menu, forward, or hand over to an AI agent.

Who called, when, and the transcript. The audio is not here: like every recording, it is delivered to a device or to Burmeel Storage and never kept in our database.

One assistant, with its menu and its schedule.

Infrastructure token. What the assistant in front of this number wants done with an incoming call: the greeting, the action, the forward or the menu. 404 with `no_assistant` means ring it normally.

Hash-chained, append-only, and readable here.

Infrastructure token. `started`, `answered` or `ended`, keyed on the switch's own call id. This is what turns a call into a record with a duration and a cost.

Where an emergency call from this number goes, and with what address.

Used by the telephony switch. Authenticated with the infrastructure token, not an API key.

Used by the conference bridge. Admits a caller and answers with the RTP addresses for their leg, or 202 when the host has not admitted them yet.

Releases the media node's ports when the caller hangs up.

The seven products, what each one is for, which tiers it has, and which of them this tenant's plan actually includes. Read this rather than hard-coding the list.

STUN, plus a TURN credential minted for this request and valid for an hour. Fetch these per session rather than caching them: WebRTC that works in an office and fails on a phone is almost always a missing relay, and a stale credential fails the same way.

Opens the room for one of this tenant's meetings on the media plane and returns the router's RTP capabilities — the first step of the mediasoup handshake. `room` is the meeting id; a meeting belonging to another tenant answers 404 exactly as a made-up id does. Signalling continues over the media socket. If no media plane is configured this answers 200 with `sfu: false`, so a caller can fall back to mesh instead of waiting.

A two-minute token that opens the signalling socket at /media/socket in place of the API key, so the key never appears in a WebSocket URL, a proxy log or a browser history. Pass it as the `token` connect parameter.

What this key can reach, and whether the platform is healthy.

The organisation's storage plane: Burmeel by default, or its own Amazon S3, Google Cloud Storage, Azure Blob or S3-compatible bucket. Never returns credentials.

`provider` (burmeel, s3, gcs, azure), `bucket`, `endpoint`, `region`, `account`, `prefix`, `key_id`, `secret`. Credentials are encrypted under the organisation's own key and only replaced when supplied.

Writes, reads back and deletes a probe object with the configured credentials.

Metered usage for the current billing period.

Where we send events.

Returns the signing secret once. The timestamp is inside the signature, so a captured delivery cannot be replayed later.

So "it never arrived" has an answer.

Every run, with the steps it took and the ones it was denied.

What runs on its own in this tenant.

A JSON-RPC dispatcher for agents. Tools are named for the product they belong to; each enforces its own permission, so an agent can never reach further than a REST client holding the same key.