Create end user input for alias
POST/v2/agent_aliases/:alias_key/end_user_sessions/:session_key/events
Sends a message, an interrupt, or a client tool output to a session the caller owns, addressed by the alias it was created through.
An administrator calling this operation is bound to the sessions it owns like every other caller; the operator endpoints are the administrative view of an alias's sessions.
Returns 403 if the session belongs to a different principal.
The response is projected to the caller's end-user visibility — see EndUserEvent.
Anonymous widget visitors authenticate by presenting X-Visitor-Id instead of an Authorization credential; the platform mints an identity holding agent_end_user on the addressed alias, which satisfies this operation's role requirement.
Returns 429 when the caller reaches its hourly event cap.
Request
Responses
- 201
- 400
- 401
- 403
- 404
- 409
- 429
The input event is created.
Input event creation request was malformed.
The request carries no valid credential — no Authorization, and for anonymous callers a missing, malformed, or badly signed X-Visitor-Id.
The session does not belong to the caller, or permissions do not allow sending input. For an anonymous visitor, also returned when the session's connector no longer admits anonymous visitors. Also returned when the request Origin is not in the connector's allowed_origins. Origin checks apply only while the connector remains enabled; disabling or deleting it preserves the other admission and ownership checks.
Alias or session not found.
Session is already running.
The request exceeds the caller's hourly event cap, or an LLM quota configured on the agent or its LLM is exhausted. The body names which, and the response carries a Retry-After header. An LLM quota refusal is returned this way when the request is not streamed; a streamed request receives that refusal as an error event in the stream on a 200.
Response Headers
Seconds until the exhausted quota window turns and the call may be retried.