# Mint a browser ticket

A single-use credential for opening a WebSocket from a browser.

`POST https://api.eesi.ai/v1/realtime/ticket`

Mint a handshake ticket for a client that cannot set request headers.

Browsers can't put an ``Authorization`` header on a WebSocket handshake, so
the credential has to ride the URL — and URLs are logged. Authenticating
*here* over HTTP, where the header is not logged, means the only thing that
reaches the socket URL is a value that dies on first use. Clients that can
set headers (the OpenAI SDKs, the Apple apps) never need this.

Responses: 200, 400, 404.

Schemas: https://docs.eesi.ai/api-reference/public.json