Get the project's stream security settings

This operation supports dashboard session-cookie authentication. Call it only from trusted server code; browsers must not manufacture or expose the session cookie.

Returns the effective (defaults-merged) stream-security document plus the project's embed token key. The key is minted lazily on the first read; embedTokenKey is null only when the API has no EMBED_TOKEN_KEY_MASTER configured. Session-cookie auth only. Rate limit: 60 requests per 60 s per session.

Error codes: unauthorized (401), not_found (404).

Authentication

• sessionCookie — Dashboard session cookie set by POST /v1/auth/login. Video and playback endpoints additionally require the projectId query parameter under cookie auth.

Parameters

Request body

This operation takes no request body.

Responses