Create Presence Token
Admin only. Mint a short-lived, read-only Keryx token for a workspace’s live presence feed (the awareness room the People page renders). The token is bound to the calling user, so Keryx narrows every frame to the documents that user may open; it can never publish presence or write document content. Requires the presence roster to be enabled for the deployment and opted in for the workspace. Computer-asset sandbox credentials are refused: call with the viewing user’s own token.
Authentication
Path parameters
Headers
Response
Always r: subscribe only. The app never publishes a slot.
Keryx document id within the org: awareness.
Token expiry in epoch milliseconds. Re-mint before this passes; the @athenaintel/react presence client does so automatically.
Keryx org (room namespace): the workspace id.
Keryx capability token (yauth). Pass as the yauth query parameter on the WebSocket upgrade. Read-only and bound to this workspace’s awareness room; Keryx narrows every frame to what the token’s user may open.
WebSocket base URL. Connect to {ws_url}/{org}/{doc_id}?yauth={token}.
