Skip to main content
POST

Authorizations

​
Authorization
string
header
required

API key passed as Bearer token

Path Parameters

​
id
string
required

Machine ID (e.g. mch_a1b2c3d4)

​
port
integer<uint16>
required

Machine guest port to expose through browser preview. Reserved generic-preview ports are rejected: 22 is SSH-specific and 5900-5999 are desktop/VNC-specific.

Required range: 1 <= x <= 65535

Body

application/json
​
expires_in_seconds
integer<uint64>

Requested proxy grant lifetime. Defaults to the deployment edge token TTL, clamped between 60 seconds and 24 hours.

Required range: 60 <= x <= 86400
​
transports
enum<string>[]

Proxy upstream transports to authorize.

Minimum array length: 1
Available options:
http,
websocket
​
token_transport
enum<string>
default:header

Token transport used by the customer proxy when forwarding to Nullspace edge.

Available options:
header
​
include_traffic_token_hint
boolean
default:true

When true, include whether private traffic access is required and the header name to use.

Response

Preview proxy target metadata and header token values

​
grant
object
required
​
machine_id
string
required
​
port
integer<uint16>
required
​
token_header_name
enum<string>
required
Available options:
x-nullspace-preview-proxy-token
​
expires_at
string<date-time>
required
​
token_transport
enum<string>
required
Available options:
header
​
required_forwarded_headers
enum<string>[]
required

Headers customer proxies should preserve or set when forwarding browser requests.

Available options:
x-forwarded-host,
x-forwarded-proto,
x-forwarded-for
​
warnings
string[]
required
​
http_url
string<uri> | null

HTTP upstream target with __ns_preview_transport=header and no bearer token in the URL.

Example:

"https://3000-s-public.nullspace.dev/?__ns_preview_transport=header"

​
websocket_url
string | null

WebSocket upstream target with __ns_preview_transport=header and no bearer token in the URL.

Example:

"wss://3000-s-public.nullspace.dev/?__ns_preview_transport=header"

​
http_token
string | null

Header token scoped to HTTP proxy traffic. Send as x-nullspace-preview-proxy-token.

​
websocket_token
string | null

Header token scoped to WebSocket proxy traffic. Send as x-nullspace-preview-proxy-token.

​
traffic_access_required
boolean | null

Whether this machine also requires the private traffic access header.

​
traffic_access_header_name
enum<string> | null

Header name for private traffic access when required. The secret value is not returned here.

Available options:
x-nullspace-traffic-access-token