Get embed session
Retrieves one embed session by id: its status (active, expired or revoked), its binding and the handle_id it was exchanged from, never its token. The key that minted it reads it; a workspace administrator reads any session in the organization.
Requires the embed:write scope. Rate limit: 200 requests per minute per key (the api lane).
Authentication
Bearer token. Use ss_live_… for live data or ss_test_… for the sandbox (test mode). See Authentication.
Path parameters
Headers
Pin the API version, e.g. 2026-10-07. Omit to get the latest. See Versioning.
Response headers
The API surface version the server resolved for this request. Always present, regardless of whether the client supplied the request-side SpreadSpace-Version header. Default: 2026-10-07.
Request budget of the endpoint’s rate-limit policy per 60-second sliding window. See Rate limits.
Requests left in the current window. Suppressed on 429 responses produced outside the rate limiter (for example a usage throttle), where a remaining budget would be misleading.
Seconds until a guaranteed-fresh window.
The active policy in limit;w=window-seconds form.
Response
active (not yet past expires_at, not revoked),
expired or revoked.
The external_user_id the mint named; null when it named none.
The display_name the mint named, as stored; null when it named none.