Runtype APIClient Runtime

List the visitor's own conversations

List conversations belonging to the calling browser's anonymous visitor, newest first, cursor-paginated. Requires both a live `sessionId` and the `X-Visitor-Token` secret from `/client/init`; the site-wide client token alone can never reach this route. Every response carries `X-History-Identity-Status` (`not_provided` | `admitted` | `ignored`) reporting what the server did with a supplied `X-Identity-Proof`, so a widget can tell a verified action from a browser-scoped one. It is exposed via CORS; it grants no authority.

Headers

x-visitor-tokenstringRequired

The browser’s anonymous visitor secret (cvt_…) returned by /client/init. It is what scopes the request to one visitor’s own conversations, so a request without it is refused. Sent as a header so it never lands in access logs or Referer.

x-identity-proofstringOptional1-8192 characters

Optional fresh hosted end-user identity proof. When admitted and already bound to the presented visitor, expands the request from this exact browser to sibling visitors for the same verified person. Without it, even a previously bound visitor remains exact-browser scoped.

Query parameters

sessionIdstringRequired

Client session id from /client/init.

targetIdstringOptional

Only return conversations for this flow or agent id. Pass the targetId returned by /client/init.

flowIdstringOptional

Deprecated alias of targetId. Sending both with different values is rejected 400; sending both with the same value is accepted.

cursorstringOptional

Opaque cursor returned as nextCursor by a previous page. Omit for the first page.

limitstringOptional

Page size as a decimal string. Defaults to 25, clamped to a maximum of 100. A non-numeric or non-positive value falls back to the default.

Response

Conversations page
datalist of objects
Conversations owned by the calling visitor, newest first.
nextCursorstring or null
Opaque cursor for the next page, or null when exhausted.

Errors

400
Bad Request Error
401
Unauthorized Error
403
Forbidden Error
429
Too Many Requests Error
500
Internal Server Error
503
Service Unavailable Error