Wistia

Wistia Expiring Access Tokens API

The Expiring Access Tokens API from Wistia — 1 operation(s) for expiring access tokens.

GitHub OpenAPI

Operations 1

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /expiring_token Create an expiring access token · Create Expiring Access Token #
Ask an LLM
“How do I generate a short-lived token for an iframe embed?”
“Can I create an access token that expires on its own?”
Tell an agent
Create an expiring access token with settings {expiring_access_token}.
Generate a temporary token for my iframe embed.

Documentation

📖
Documentation
https://docs.wistia.com/reference/getting-started-with-the-data-api
📖
GettingStarted
https://docs.wistia.com/docs/making-api-requests
📖
Authentication
https://docs.wistia.com/docs/authenticating-with-oauth2
📖
APIReference
https://docs.wistia.com/reference
📖
Documentation
https://docs.wistia.com/docs/migration-from-v1-guide
📖
Authentication
https://raw.githubusercontent.com/api-evangelist/wistia/refs/heads/main/authentication/wistia-authentication.yml
📖
RateLimits
https://raw.githubusercontent.com/api-evangelist/wistia/refs/heads/main/rate-limits/wistia-rate-limits.yml

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/wistia/refs/heads/main/openapi/wistia-expiring-access-tokens-api-openapi.yml

Other Resources

🔗
OAuthScopes
https://raw.githubusercontent.com/api-evangelist/wistia/refs/heads/main/scopes/wistia-scopes.yml
🔗
ErrorCatalog
https://raw.githubusercontent.com/api-evangelist/wistia/refs/heads/main/errors/wistia-problem-types.yml
🔗
DataModel
https://raw.githubusercontent.com/api-evangelist/wistia/refs/heads/main/data-model/wistia-data-model.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/wistia:wistia-expiring-access-tokens-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

wistia-expiring-access-tokens-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Wistia Expiring Access Tokens API
  version: '1.0'
  description: 'Operations tagged Expiring Access Tokens across 2 of this provider''s published API definitions: wistia-data-api-modern-edge-openapi.yml, wistia-data-api-v1-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api.wistia.com/modern
- url: https://api.wistia.com/v1
tags:
- name: Expiring Access Tokens
  x-wistia-mcp-toolsets: sharing
  x-displayName: Expiring Access Tokens
paths:
  /expiring_token:
    post:
      x-wistia-mcp-ignore: true
      summary: Create Expiring Access Token
      x-speakeasy-group: expiringAccessTokens
      x-speakeasy-name-override: create
      x-cli-topic-override: expiring-tokens
      description: '```

        🚫 Alert

        This API is still under development and can change at any time.

        ```


        This endpoint is for creating expiring access tokens which can be used for some iframe embeds.


        ## Requires api token with one of the following permissions

        ```

        Read, update & delete anything

        ```'
      requestBody:
        required: false
        content:
          application/json:
            schema:
              unevaluatedProperties: false
              type: object
              properties:
                expiring_access_token:
                  unevaluatedProperties: false
                  type: object
                  properties:
                    expires_at:
                      description: an ISO8601 string of when the token will expire, defaults to two days from creation
                      type: string
                      format: iso8601
                    authorizations:
                      description: a list of authorizations the token will have
                      type: array
                      items:
                        unevaluatedProperties: false
                        type: object
                        properties:
                          type:
                            description: The type of object the permission is being performed on, only media is currently supported
                            type: string
                          id:
                            description: The hashed if of the object the permissions are being performed on.
                            type: string
                          permissions:
                            description: The types of permissions, currently only supports edit-transcripts
                            type: array
                            items:
                              type: string
                        required:
                        - type
                        - id
                        - permissions
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                unevaluatedProperties: false
                type: object
                properties:
                  token:
                    description: A token which can be used to authorize requests to Wistia. Currently only for doing transcript embeds.
                    type: string
                required:
                - token
        '401':
          description: Unauthorized, invalid or missing token
          content:
            application/json:
              schema:
                unevaluatedProperties: false
                type: object
                properties:
                  code:
                    description: A machine-readable identifier for the specific authorization failure.
                    type: string
                    enum:
                    - unauthorized_credentials
                    - account_inactive
                    - unauthorized_scope
                    - unauthorized_params
                  error:
                    type: string
                    examples:
                    - Invalid credentials.
        '422':
          description: Unprocessable entity, the request parameters were invalid.
          content:
            application/json:
              schema:
                unevaluatedProperties: false
                type: object
                properties:
                  error:
                    description: A single error message describing what went wrong.
                    type: string
                  errors:
                    description: Array of error messages describing what went wrong.
                    type: array
                    items:
                      type: string
                    examples:
                    - - Title is required
                      - Event duration must be at least 15 minutes
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                unevaluatedProperties: false
                type: object
                properties:
                  error:
                    type: string
                    examples:
                    - Internal server error
        '501':
          description: Not implemented - expiring tokens cannot be created from other expiring tokens
          content:
            application/json:
              schema:
                unevaluatedProperties: false
                type: object
                properties:
                  error:
                    type: string
                    examples:
                    - Expiring tokens can only be created from non-expiring access tokens.
      tags:
      - Expiring Access Tokens
      security:
      - BearerAuth: []
      operationId: postExpiringToken
      x-operation-id-source: derived
    servers:
    - url: https://api.wistia.com/modern
components:
  responses:
    '422':
      description: Unprocessable entity, the request parameters were invalid.
      content:
        application/json:
          schema:
            type: object
            properties:
              errors:
                description: Object containing validation errors grouped by field name. Each field contains an array of error messages.
                type: object
                additionalProperties:
                  type: array
                  items:
                    type: string
                example:
                  trims:
                  - didn't match hh:mm:ss.xxx-hh:mm:ss.xxx
                  media:
                  - must be part of a project
    '500':
      description: Internal server error
      content:
        application/json:
          schema:
            type: object
            properties:
              error:
                type: string
                examples:
                - Internal server error
    '401':
      description: Unauthorized, invalid or missing token
      content:
        application/json:
          schema:
            type: object
            properties:
              error:
                type: string
                examples:
                - Invalid credentials.
  schemas:
    ExpiringAccessTokenResponse:
      type: object
      properties:
        token:
          description: A token which can be used to authorize requests to Wistia. Currently only for doing transcript embeds.
          type: string
      required:
      - token
    ExpiringAccessTokenInput:
      type: object
      properties:
        expires_at:
          description: an ISO8601 string of when the token will expire, defaults to two days from creation
          type: string
          format: iso8601
        authorizations:
          description: a list of authorizations the token will have
          type: array
          items:
            type: object
            properties:
              type:
                description: The type of object the permission is being performed on, only media is currently supported
                type: string
              id:
                description: The hashed if of the object the permissions are being performed on.
                type: string
              permissions:
                description: The types of permissions, currently only supports edit-transcripts
                type: array
                items:
                  type: string
            required:
            - type
            - id
            - permissions
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
x-refined-from:
- wistia-data-api-modern-edge-openapi.yml
- wistia-data-api-v1-openapi.yml
x-tagGroups:
- name: Data API
  tags:
  - Media
  - Customizations
  - Captions
  - Localizations
  - Trims
  - Extended Audio Descriptions
  - Brands
  - Tags
  - Taggings
  - Folders
  - Folder Sharings
  - Subfolders
  - Channels
  - Channel Collaborators
  - Channel Episodes
  - Webinars
  - Webinar Collaborators
  - Webinar Registrations
  - Account
  - Search
  - Resource URLs
  - Expiring Access Tokens
  - Background Job Status
  - Allowed Domains
  - Remix
  - Push Devices
  - Deleted Media
  - Review Bundles
  - Share Links
  - Bulk Actions
  - Custom Metadata Field Definitions
  - Custom Metadata Field Values
- name: Stats API
  tags:
  - Stats:Account
  - Stats:Events
  - Stats:Media
  - Stats:Projects
  - Stats:Visitors
- name: Analytics API
  tags:
  - Analytics:Account
  - Analytics:Media
  - Analytics:Webinar