API reference

One REST API over everything the product does: upload a recording, read what the AI concluded, share it, export it, search across it, and receive the reports your own visitors file. JSON in, JSON out, cursor pagination, and RFC 7807 problem responses.

Authentication

Create a key under Dashboard → Developers (Pro and above). Keys are shown once, hashed at rest, scoped to the workspace that created them, and prefixed sr_live_. Send it as a bearer token on every request:

curl https://api.scenerecap.com/v1/recordings \
  -H "Authorization: Bearer sr_live_…"

Conventions

Endpoints

Worked example: upload and analyse

Three calls. Open a session, PUT the parts, then create the recording — the pipeline starts on its own.

# 1. open a multipart session
curl -sX POST https://api.scenerecap.com/v1/uploads \
  -H "Authorization: Bearer $SR_KEY" -H "content-type: application/json" \
  -d '{"kind":"media","filename":"session.webm","contentType":"video/webm","sizeBytes":8123456}'
# -> { "uploadId": "…", "partSize": 8388608, "parts": [{ "n": 1, "url": "https://…" }] }

# 2. PUT each part to its presigned url, keeping the ETag each one returns
curl -sX PUT "$PART_URL" --data-binary @part-1.bin -D - | grep -i etag

# 3. complete, then create the recording
curl -sX POST https://api.scenerecap.com/v1/uploads/$UPLOAD_ID/complete \
  -H "Authorization: Bearer $SR_KEY" -H "content-type: application/json" \
  -d '{"parts":[{"n":1,"etag":"abc123"}]}'

curl -sX POST https://api.scenerecap.com/v1/recordings \
  -H "Authorization: Bearer $SR_KEY" -H "content-type: application/json" \
  -d '{"uploadId":"'$UPLOAD_ID'","title":"Checkout fails","mode":"bug_report"}'

Poll GET /v1/recordings/:id until status is ready, then read outputs for the bug report, tutorial, explanation or recap.

Worked example: triage the widget Inbox

Duplicates arrive already grouped, so one row can stand for many reports.

curl -s "https://api.scenerecap.com/v1/workspaces/$WS/reports?status=new" \
  -H "Authorization: Bearer $SR_KEY"
# -> reports[0].clusterCount === 5  (five visitors, one bug, one row)

# file it, then mark it triaged with the issue you created
curl -sX POST https://api.scenerecap.com/v1/recordings/$REC/create-issue \
  -H "Authorization: Bearer $SR_KEY" -H "content-type: application/json" \
  -d '{"provider":"linear"}'

curl -sX PATCH https://api.scenerecap.com/v1/reports/$REPORT \
  -H "Authorization: Bearer $SR_KEY" -H "content-type: application/json" \
  -d '{"status":"triaged","issueUrl":"https://linear.app/…"}'

Webhooks

Register a URL under Developers and choose your events: recording.ready, recording.shared, comment.created. Each delivery is a JSON POST carrying X-SceneRecap-Event, X-SceneRecap-Delivery and X-SceneRecap-Signature: sha256=<hex> — an HMAC-SHA256 of the raw body using the secret shown once at creation.

import crypto from "node:crypto";

export function verify(rawBody: Buffer, header: string, secret: string): boolean {
  const expected = "sha256=" + crypto.createHmac("sha256", secret).update(rawBody).digest("hex");
  const a = Buffer.from(header);
  const b = Buffer.from(expected);
  return a.length === b.length && crypto.timingSafeEqual(a, b);
}

Non-2xx responses are retried with exponential backoff up to three attempts in total (the first delivery plus two retries), and every attempt — status, response body, timing — is visible in the Deliveries panel.

Plan limits

Limits are enforced server-side and return 402 with a message naming the limit. API keys require Pro; the reporting widget is a paid add-on; export formats, AI analyses and agent runs (Repro Agent verdicts and Takes draw from one pool) each have their own monthly allowance. See pricing for the current numbers.