Select up to 50 visible server IDs for your own live connection. A viewer session with the same workspace, browser cookies and CSRF protection is required. Only IDs belonging to the current page can supply live values. Selected servers refresh on the next one-second tick; source details remain available in tooltips. An empty list pauses measurement updates while the connection stays live. The selection ends when the connection closes.
Select up to 50 visible server IDs for your own live connection. A viewer session with the same workspace, browser cookies and CSRF protection is required. Only IDs belonging to the current page can supply live values. Selected servers refresh on the next one-second tick; source details remain available in tooltips. An empty list pauses measurement updates while the connection stays live. The selection ends when the connection closes.
Browser session: __Host-mb_session cookie.
When using a browser session for a mutation, send the current CSRF token in X-CSRF-Token with the same-site cookie. OAuth consent uses its documented form field.
Private API responses prohibit storage. Public OAuth metadata is cached for 300 seconds; live streams additionally prohibit transformation.
Content-Language
string; {"enum":["en","de"]}
Language of human-readable response text, resolved from Accept-Language or the documented browser preference. Technical codes and identifiers remain stable.
The default referrer policy is strict-origin-when-cross-origin. Provider-login responses use no-referrer to protect login parameters.
Vary
string
Responses vary by Accept-Language; browser-rendered responses can also vary by the preference cookie.
X-Content-Type-Options
JSON; {"const":"nosniff"}
The browser must use the declared content type.
X-Frame-Options
JSON; {"const":"DENY"}
The response must not be embedded in a frame.
X-Request-ID
string
Server-generated request identifier. Include this when reporting an error; inbound values are not trusted.
application/problem+json
Field
Type and limits
Required
Meaning
$
Problem
Yes
—
$.code
string
Yes
Stable machine-readable error code
$.detail
string
Yes
Short localized explanation without internal error details
$.instance
string
Yes
Unique relative identifier /api/v1/requests/{request_id}; not a retrievable resource
$.message
string
Yes
Temporarily identical to detail for existing clients
$.message_key
string
Yes
Stable translation key for changing the displayed language without another request
$.message_params
object; {"additionalProperties":true}
Yes
Named, safely rendered message parameters; never arbitrary HTML
$.request_id
string; {"pattern":"^[0-9a-f]{32}$"}
Yes
Server-generated diagnostic identifier. It contains no login token or credential.
$.status
integer; {"maximum":599,"minimum":400}
Yes
—
$.title
string
Yes
Localized HTTP status title
$.type
string; {"const":"about:blank"}
Yes
—
Stable error codes
browser_session_required
csrf
insufficient_scope
invalid_origin
workspace_scope
Header
Type and limits
Meaning
Cache-Control
string; {"pattern":"(?:^|,\\s*)no-store(?:,|$)"}
Private API responses prohibit storage. Public OAuth metadata is cached for 300 seconds; live streams additionally prohibit transformation.
Content-Language
string; {"enum":["en","de"]}
Language of human-readable response text, resolved from Accept-Language or the documented browser preference. Technical codes and identifiers remain stable.
The default referrer policy is strict-origin-when-cross-origin. Provider-login responses use no-referrer to protect login parameters.
Vary
string
Responses vary by Accept-Language; browser-rendered responses can also vary by the preference cookie.
X-Content-Type-Options
JSON; {"const":"nosniff"}
The browser must use the declared content type.
X-Frame-Options
JSON; {"const":"DENY"}
The response must not be embedded in a frame.
X-Request-ID
string
Server-generated request identifier. Include this when reporting an error; inbound values are not trusted.
application/problem+json
Field
Type and limits
Required
Meaning
$
Problem
Yes
—
$.code
string
Yes
Stable machine-readable error code
$.detail
string
Yes
Short localized explanation without internal error details
$.instance
string
Yes
Unique relative identifier /api/v1/requests/{request_id}; not a retrievable resource
$.message
string
Yes
Temporarily identical to detail for existing clients
$.message_key
string
Yes
Stable translation key for changing the displayed language without another request
$.message_params
object; {"additionalProperties":true}
Yes
Named, safely rendered message parameters; never arbitrary HTML
$.request_id
string; {"pattern":"^[0-9a-f]{32}$"}
Yes
Server-generated diagnostic identifier. It contains no login token or credential.
$.status
integer; {"maximum":599,"minimum":400}
Yes
—
$.title
string
Yes
Localized HTTP status title
$.type
string; {"const":"about:blank"}
Yes
—
Stable error codes
not_found
Header
Type and limits
Meaning
Cache-Control
string; {"pattern":"(?:^|,\\s*)no-store(?:,|$)"}
Private API responses prohibit storage. Public OAuth metadata is cached for 300 seconds; live streams additionally prohibit transformation.
Content-Language
string; {"enum":["en","de"]}
Language of human-readable response text, resolved from Accept-Language or the documented browser preference. Technical codes and identifiers remain stable.
The default referrer policy is strict-origin-when-cross-origin. Provider-login responses use no-referrer to protect login parameters.
Vary
string
Responses vary by Accept-Language; browser-rendered responses can also vary by the preference cookie.
X-Content-Type-Options
JSON; {"const":"nosniff"}
The browser must use the declared content type.
X-Frame-Options
JSON; {"const":"DENY"}
The response must not be embedded in a frame.
X-Request-ID
string
Server-generated request identifier. Include this when reporting an error; inbound values are not trusted.
application/problem+json
Field
Type and limits
Required
Meaning
$
Problem
Yes
—
$.code
string
Yes
Stable machine-readable error code
$.detail
string
Yes
Short localized explanation without internal error details
$.instance
string
Yes
Unique relative identifier /api/v1/requests/{request_id}; not a retrievable resource
$.message
string
Yes
Temporarily identical to detail for existing clients
$.message_key
string
Yes
Stable translation key for changing the displayed language without another request
$.message_params
object; {"additionalProperties":true}
Yes
Named, safely rendered message parameters; never arbitrary HTML
$.request_id
string; {"pattern":"^[0-9a-f]{32}$"}
Yes
Server-generated diagnostic identifier. It contains no login token or credential.
$.status
integer; {"maximum":599,"minimum":400}
Yes
—
$.title
string
Yes
Localized HTTP status title
$.type
string; {"const":"about:blank"}
Yes
—
Stable error codes
invalid_cursor
invalid_filters
invalid_live
invalid_selection
live_limit
Header
Type and limits
Meaning
Cache-Control
string; {"pattern":"(?:^|,\\s*)no-store(?:,|$)"}
Private API responses prohibit storage. Public OAuth metadata is cached for 300 seconds; live streams additionally prohibit transformation.
Content-Language
string; {"enum":["en","de"]}
Language of human-readable response text, resolved from Accept-Language or the documented browser preference. Technical codes and identifiers remain stable.
The default referrer policy is strict-origin-when-cross-origin. Provider-login responses use no-referrer to protect login parameters.
Vary
string
Responses vary by Accept-Language; browser-rendered responses can also vary by the preference cookie.
X-Content-Type-Options
JSON; {"const":"nosniff"}
The browser must use the declared content type.
X-Frame-Options
JSON; {"const":"DENY"}
The response must not be embedded in a frame.
X-Request-ID
string
Server-generated request identifier. Include this when reporting an error; inbound values are not trusted.
application/problem+json
Field
Type and limits
Required
Meaning
$
Problem
Yes
—
$.code
string
Yes
Stable machine-readable error code
$.detail
string
Yes
Short localized explanation without internal error details
$.instance
string
Yes
Unique relative identifier /api/v1/requests/{request_id}; not a retrievable resource
$.message
string
Yes
Temporarily identical to detail for existing clients
$.message_key
string
Yes
Stable translation key for changing the displayed language without another request
$.message_params
object; {"additionalProperties":true}
Yes
Named, safely rendered message parameters; never arbitrary HTML
$.request_id
string; {"pattern":"^[0-9a-f]{32}$"}
Yes
Server-generated diagnostic identifier. It contains no login token or credential.
$.status
integer; {"maximum":599,"minimum":400}
Yes
—
$.title
string
Yes
Localized HTTP status title
$.type
string; {"const":"about:blank"}
Yes
—
Stable error codes
feature_unavailable
stream_unavailable
unavailable
Header
Type and limits
Meaning
Cache-Control
string; {"pattern":"(?:^|,\\s*)no-store(?:,|$)"}
Private API responses prohibit storage. Public OAuth metadata is cached for 300 seconds; live streams additionally prohibit transformation.
Content-Language
string; {"enum":["en","de"]}
Language of human-readable response text, resolved from Accept-Language or the documented browser preference. Technical codes and identifiers remain stable.
The default referrer policy is strict-origin-when-cross-origin. Provider-login responses use no-referrer to protect login parameters.
Retry-After
string; {"pattern":"^[0-9]+$"}
Seconds before retry. Preserve supported idempotency identifiers and respect the operation’s mutation semantics.
Vary
string
Responses vary by Accept-Language; browser-rendered responses can also vary by the preference cookie.
X-Content-Type-Options
JSON; {"const":"nosniff"}
The browser must use the declared content type.
X-Frame-Options
JSON; {"const":"DENY"}
The response must not be embedded in a frame.
X-Request-ID
string
Server-generated request identifier. Include this when reporting an error; inbound values are not trusted.
application/problem+json
Field
Type and limits
Required
Meaning
$
Problem
Yes
—
$.code
string
Yes
Stable machine-readable error code
$.detail
string
Yes
Short localized explanation without internal error details
$.instance
string
Yes
Unique relative identifier /api/v1/requests/{request_id}; not a retrievable resource
$.message
string
Yes
Temporarily identical to detail for existing clients
$.message_key
string
Yes
Stable translation key for changing the displayed language without another request
$.message_params
object; {"additionalProperties":true}
Yes
Named, safely rendered message parameters; never arbitrary HTML
$.request_id
string; {"pattern":"^[0-9a-f]{32}$"}
Yes
Server-generated diagnostic identifier. It contains no login token or credential.
$.status
integer; {"maximum":599,"minimum":400}
Yes
—
$.title
string
Yes
Localized HTTP status title
$.type
string; {"const":"about:blank"}
Yes
—
Stable error codes
feature_unavailable
unavailable
live_capacity
Header
Type and limits
Meaning
Cache-Control
string; {"pattern":"(?:^|,\\s*)no-store(?:,|$)"}
Private API responses prohibit storage. Public OAuth metadata is cached for 300 seconds; live streams additionally prohibit transformation.
Content-Language
string; {"enum":["en","de"]}
Language of human-readable response text, resolved from Accept-Language or the documented browser preference. Technical codes and identifiers remain stable.
This change does not have a general retry guarantee. If the response is unclear, read the affected resource before trying again. Follow Retry-After waiting times and request new sign-in or action codes when they expire.
Replace demo IDs, timestamps and placeholders with your own values. For a retry, keep the same IDs, time and content. These examples do not run requests on this page.
Keep login links, codes, cookies and keys private. Do not print them in logs or share them in support requests.
Streams the selected monitor page. Monitor and server lists support stream_format=patches with a unique stream_id: the initial devices event is complete; subsequent devices_patch events carry base, seq, observed_at and an optional lossless patch. A single-element array replaces a value; an empty array removes an object member; o patches object members; a patches array indices with n as the resulting length. Missing patches are live heartbeats. A sequence gap requires a new complete stream. Use the viewport endpoint to select visible monitors; all measurement and tooltip fields are preserved. Without this format, devices and server_metrics events retain their existing behavior.