Attach to a browser session
Authorize access to a browser session’s live stream / control channel.
Verifies the caller owns the session (the manifest must exist on the
user’s sandbox), then mints a short-lived, scoped Neo token and returns
an opaque stream URL. For cloud (Kernel/Browserbase) sessions a direct
liveViewUrl is also returned — the provider’s embeddable live view
page, which skips the sandbox stream hop. Raw transport secrets
(provider CDP URLs, sandbox CDP URL, API keys) are never returned.
The token is scoped to with a short TTL; clients re-attach to refresh it.
Authorizations
JWT authentication token
Path Parameters
Opaque browser session reference (brs_)
Query Parameters
Optional project ID for project sandbox scope (requires membership)
Body
Access scope: 'view' (read-only live view) or 'control' (view + input).
view, control Response
Stream authorization with a short-lived token
Token expiry (RFC3339).
'cloud' or 'local'.
Opaque browser session reference (brs_).
Lifecycle status: 'active', 'closed', or 'error'.
Neo-authorized stream URL (relative) carrying the short-lived token.
"/api/v1/browser/sessions/brs_abc/stream?token=..."
Short-lived scoped Neo stream token.
'chrome' or 'lightpanda'.
Direct provider live view URL (cloud sessions only). Embeddable page with no API keys; preferred over streamUrl when present since it skips the sandbox stream hop.
Reusable profile reference, if any.

