Get session status
Returns the current status and result of a session that belongs to your organization. Use it as the source of truth, also to confirm what a webhook told you. Send Accept: application/json; without it, errors come back as redirects or HTML instead of JSON.
Authorization
bearerAuth Your organization's API token, sent as Authorization: Bearer YOUR_API_TOKEN. It looks like 1|abc123...: send all of it, including the part before the |.
An Owner or Admin creates tokens in the dashboard: open the user menu, choose Organization and go to the API Tokens section. The token is shown only once. Tokens do not expire; a revoked token stops working on the next request.
Keep tokens on your server. Never put them in browser or mobile app code.
The API Secret shown in the same section is not an API token: it verifies webhook signatures and the jwt added to your redirect.
In: header
Path Parameters
The session id returned when you created the session, or received in a webhook.
uuidHeader Parameters
Must be application/json. Without it, errors come back as a redirect or an HTML page instead of JSON.
"application/json""application/json"Response Body
application/json
application/json
application/json
curl "https://app.bouncer.digital/api/v2/session/01a181f3-c900-7a3e-9b2d-4f6c8e1a2b3c" \ -H "Authorization: Bearer YOUR_API_TOKEN" \ -H "Accept: application/json"{
"data": {
"success": null,
"id": "01a181f3-c900-7a3e-9b2d-4f6c8e1a2b3c",
"status": "pending",
"metadata": {
"order_id": "ORDER-123"
},
"issued_at": 1793181600,
"expires_at": 1793182200
}
}{
"message": "Unauthenticated."
}{
"message": ""
}Create a session
Creates an age verification session and returns the verify_url to send the person to. Call it from your server with your API token. Send Accept: application/json and Content-Type: application/json; without the Accept header, errors come back as redirects or HTML instead of JSON.
Create a device session link
Returns a short-lived link and its QR code for one of your devices (a kiosk, vending machine or point of sale). Scanning it starts a new session with the device's settings. Send Accept: application/json, and Content-Type: application/json when you send a body.