Brix Cross Space Shares API

The cross-space-shares API from Brix — 2 operation(s) for cross-space-shares.

Operations 3

GET /v1/cross-space-shares List cross-workspace shares #
POST /v1/cross-space-shares Share content with a child workspace #
DELETE /v1/cross-space-shares/{id} Revoke a cross-workspace share #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/brixsignage-com:brixsignage-com-cross-space-shares-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

brixsignage-com-cross-space-shares-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Brix Cross Space Shares API
  version: '1'
  summary: 'Control plane for Brix digital signage: screens, content, playlists, schedules, casts and emergencies.'
  description: 'Generated from the route table the API actually mounts

    (`apps/api/routes.snapshot.json`), the description each route is required to

    carry (`tests/contracts/route-registry.json`), and request/response schemas

    (`apps/api/src/openapi/`). CI enforces all three, so this document cannot list a

    route that does not exist or omit one that does.


    **Schemas.** 447 operations carry request and response schemas

    (`x-brix-schema: verified`). Each is checked in CI against the response the

    real handler returns — a missing, mistyped or undeclared field fails the build.

    The remaining operations are route-level only (`x-brix-schema: none`): their

    path, method, permission and purpose are exact, but the shape of `data` is not

    yet modelled, and we would rather say so than publish a schema that validates

    against nothing. Objects are open: a new field is not a breaking change.


    **Envelope.** Success bodies are `{ "data": … }`. Failures are

    `{ "error": "", "message": "…" }`, plus `requestId` on a 5xx.

    Many list routes page opt-in (see each operation): pass `?limit=` and

    follow `nextCursor` via `?cursor=` until it is null.


    **Authentication.** `Authorization: Bearer ` with an API key

    (`ak_…`, created in the console under Settings → API & MCP) or a user session. An

    API key carries a creator-chosen set of `resource.verb` permissions and may be

    pinned to one location''s subtree; a key can never be granted a permission its

    creator does not hold. The permission an operation needs is in

    `x-brix-permission` and in its security requirement.


    **Tenancy.** Every request resolves to one workspace. A resource belonging to

    another tenant returns 404, never 403, so a response never confirms that an

    account exists.


    **Rate limits.** A 429 carries `Retry-After`; a 503 `database_busy` means retry

    after the `Retry-After` interval.'
servers:
- url: https://api.brixsignage.com
  description: Production
security:
- bearerAuth: []
tags:
- name: cross-space-shares
paths:
  /v1/cross-space-shares:
    get:
      operationId: listCrossSpaceShares
      tags:
      - cross-space-shares
      summary: List cross-workspace shares
      description: 'List content this space shares into its child spaces, and content shared with it in turn. A space receiving a share can read it but cannot change or remove it.


        **Notes.**

        - Lists the shares this workspace RECEIVES (it is the target), not the ones it grants.'
      x-brix-permission: playlist.view
      x-brix-schema: verified
      x-brix-notes:
      - Lists the shares this workspace RECEIVES (it is the target), not the ones it grants.
      responses:
        '200':
          description: Success.
          content:
            application/json:
              schema:
                type: object
                properties:
                  data:
                    type: array
                    items:
                      type: object
                      properties:
                        id:
                          type: string
                        sourceSpaceId:
                          type: string
                          description: The workspace that shares.
                        targetSpaceId:
                          type: string
                          description: The child workspace that receives.
                        contentKind:
                          type: string
                          description: '`playlist`, `schedule`, `layout`, `creative`, `media`, …'
                        contentId:
                          type: string
                        mode:
                          type: string
                          enum:
                          - linked
                          - snapshot
                          description: 'Always `linked` for a new share: the child plays the parent''s current version.'
                        lockLevel:
                          type: string
                          enum:
                          - playlist
                          - items
                          - both
                          description: What the child cannot change.
                        lockedItemIds:
                          type: string
                          description: A JSON-ENCODED array of item ids (the stored column), not an array.
                        grantedBy:
                          type: string
                          description: The user who shared it; `system` for an API key.
                        grantedAt:
                          type: string
                          description: ISO-8601 timestamp (UTC).
                        createdAt:
                          type: string
                          description: ISO-8601 timestamp (UTC).
                        updatedAt:
                          type: string
                          description: ISO-8601 timestamp (UTC).
                        deletedAt:
                          anyOf:
                          - type: string
                            description: ISO-8601 timestamp (UTC).
                          - type: 'null'
                        contentName:
                          anyOf:
                          - type: string
                          - type: 'null'
                          description: Null when the content no longer exists.
                        sourceSpaceName:
                          anyOf:
                          - type: string
                          - type: 'null'
                        available:
                          type: boolean
                          description: False when the shared content was deleted.
                      required:
                      - id
                      - sourceSpaceId
                      - targetSpaceId
                      - contentKind
                      - contentId
                      - mode
                      - lockLevel
                      - lockedItemIds
                      - grantedBy
                      - grantedAt
                      - createdAt
                      - updatedAt
                      - deletedAt
                      - contentName
                      - sourceSpaceName
                      - available
                required:
                - data
        '401':
          description: Missing, expired or revoked bearer token.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: The token lacks the permission this operation needs (see `x-brix-permission`).
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        5XX:
          description: Server error. The body carries a `requestId` to quote to support.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      security:
      - bearerAuth:
        - playlist.view
    post:
      operationId: createCrossSpaceShare
      tags:
      - cross-space-shares
      summary: Share content with a child workspace
      description: 'Share a playlist, layout, schedule, or creative from this space into a child space. The shared content appears in the child space alongside its own content. Only the space that owns the content can create the share. Requires view permission on shares plus the appropriate permission on the content itself.


        **Notes.**

        - Besides the `playlist.view` gate, the caller needs the content kind''s edit permission at the content''s location.'
      x-brix-permission: playlist.view
      x-brix-schema: verified
      x-brix-notes:
      - Besides the `playlist.view` gate, the caller needs the content kind's edit permission at the content's location.
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                targetSpaceId:
                  type: string
                  description: A child workspace of yours.
                contentKind:
                  type: string
                contentId:
                  type: string
                lockLevel:
                  description: Default `both`.
                  type: string
                  enum:
                  - playlist
                  - items
                  - both
                lockedItemIds:
                  type: array
                  items:
                    type: string
                mode:
                  description: 'Ignored: a share is always `linked`.'
                  type: string
              required:
              - targetSpaceId
              - contentKind
              - contentId
      responses:
        '200':
          description: 'Success: The content is already shared with that workspace: the existing share is returned.'
          content:
            application/json:
              schema:
                type: object
                properties:
                  data:
                    $ref: '#/components/schemas/CrossSpaceShare'
                required:
                - data
        '201':
          description: Success.
          content:
            application/json:
              schema:
                type: object
                properties:
                  data:
                    $ref: '#/components/schemas/CrossSpaceShare'
                required:
                - data
        '401':
          description: Missing, expired or revoked bearer token.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: The target is not a child workspace of yours, or you lack the content kind's edit permission (`playlist.edit`, …) where it lives.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: No such content in your workspace.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '422':
          description: '`targetSpaceId`, `contentKind` or `contentId` is missing.'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        5XX:
          description: Server error. The body carries a `requestId` to quote to support.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      security:
      - bearerAuth:
        - playlist.view
  /v1/cross-space-shares/{id}:
    delete:
      operationId: deleteCrossSpaceShare
      tags:
      - cross-space-shares
      summary: Revoke a cross-workspace share
      description: 'Withdraw a share. Only the space that created the share can remove it; the receiving space cannot.


        **Notes.**

        - Only the sharing workspace can revoke; it needs the content kind''s edit permission too.'
      x-brix-permission: playlist.view
      x-brix-schema: verified
      x-brix-notes:
      - Only the sharing workspace can revoke; it needs the content kind's edit permission too.
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
        description: Share id.
        example: xshare_8b9c0d1e2f3a4b5c
      responses:
        '200':
          description: Success.
          content:
            application/json:
              schema:
                type: object
                properties:
                  data:
                    type: object
                    properties:
                      id:
                        type: string
                      revoked:
                        type: boolean
                        const: true
                    required:
                    - id
                    - revoked
                required:
                - data
        '401':
          description: Missing, expired or revoked bearer token.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: You lack the content kind's edit permission where the content lives.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: No such share granted by this workspace.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        5XX:
          description: Server error. The body carries a `requestId` to quote to support.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      security:
      - bearerAuth:
        - playlist.view
components:
  schemas:
    Error:
      type: object
      properties:
        error:
          type: string
          description: 'Machine-readable code: `unauthorized`, `forbidden`, `not_found`, `validation_error`, `conflict`, `rate_limited`, `internal_error`, …'
        message:
          description: Human-readable explanation. Safe to show an operator.
          type: string
        requestId:
          description: 'Present on 5xx: quote it to support.'
          type: string
      required:
      - error
      additionalProperties: {}
      description: Error envelope returned by every failing request.
    CrossSpaceShare:
      type: object
      properties:
        id:
          type: string
        sourceSpaceId:
          type: string
          description: The workspace that shares.
        targetSpaceId:
          type: string
          description: The child workspace that receives.
        contentKind:
          type: string
          description: '`playlist`, `schedule`, `layout`, `creative`, `media`, …'
        contentId:
          type: string
        mode:
          type: string
          enum:
          - linked
          - snapshot
          description: 'Always `linked` for a new share: the child plays the parent''s current version.'
        lockLevel:
          type: string
          enum:
          - playlist
          - items
          - both
          description: What the child cannot change.
        lockedItemIds:
          type: string
          description: A JSON-ENCODED array of item ids (the stored column), not an array.
        grantedBy:
          type: string
          description: The user who shared it; `system` for an API key.
        grantedAt:
          type: string
          description: ISO-8601 timestamp (UTC).
        createdAt:
          type: string
          description: ISO-8601 timestamp (UTC).
        updatedAt:
          type: string
          description: ISO-8601 timestamp (UTC).
        deletedAt:
          anyOf:
          - type: string
            description: ISO-8601 timestamp (UTC).
          - type: 'null'
      required:
      - id
      - sourceSpaceId
      - targetSpaceId
      - contentKind
      - contentId
      - mode
      - lockLevel
      - lockedItemIds
      - grantedBy
      - grantedAt
      - createdAt
      - updatedAt
      - deletedAt
      description: Content a parent workspace shares with a child workspace.
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: An API key (`ak_…`) or a user session token. API keys carry `resource.verb` permissions.