Create Collab Token
Admin only. Mint a short-lived Keryx capability token for a Generic Doc asset, enabling live collaborative reads (and, with edit permission, writes) over WebSocket and REST. Only generic_doc assets are eligible — Athena-managed asset types are never reachable through this endpoint. The requested access is a ceiling clamped by the caller’s permission on the asset.
Authentication
Path parameters
Request
Requested access ceiling. This is a ceiling, not a grant: ‘edit’ is clamped to read-only unless the caller has edit permission on the asset.
Response
Granted access: r = read + live subscribe, rw = read-write.
Token expiry in epoch milliseconds. Re-mint before this passes; the @athenaintel/react collab client does so automatically.
Keryx org (room namespace) for the document.
REST base URL. Endpoints follow {rest_url}/{name}/v1/{org}/{doc_id} (ydoc, activity, changeset).
Keryx capability token (yauth). Pass as the yauth query parameter on the WebSocket upgrade and REST requests. Room-bound: valid only for this asset’s document.
WebSocket base URL. Connect to {ws_url}/{org}/{doc_id}?yauth={token}.
