Email
Inboxes
Marketing
SMS
Sign
Verify
Forms
Scheduling
Hooks
Risk
Platform
Create a host session
POST
/v1/scheduling/hosts/{host}/sessions
Lets one host manage their own hours and calendars, on coss.com's hosted page or your own UI. Send the url to their browser, or embed it with coss/scheduling.
bearerAuthheader
AuthorizationBearer <token>A secret API key from the dashboard: coss_live_… for production environments, coss_test_… for sandbox environments.
host*stringThe host's id or uid.
Coss-Version?"2026-10-10"The API version (a date) to use for this request. Defaults to your organization's version, pinned to the latest one when it first used the API and upgraded from the dashboard. The SDK always sends the version it was built for.
Value in
"2026-10-10"application/json- body
- body
- …
expires_in?integerSeconds until it stops working. At most a day.
Range
60 <= value <= 86400read_only?booleanThe session.
application/json- response
- response
- …
object*"scheduling.session"Value in
"scheduling.session"id*stringtoken*stringShown only now. A bearer token for the client API.
url*|coss.com's hosted page, with the token in its fragment.
expires_at*stringimport { Coss } from "coss";const coss = new Coss({ apiKey: process.env.COSS_API_KEY, baseUrl: "https://api.coss.com",});const { data, error } = await coss.scheduling.sessions.createForHost({ value: "host_01kd2m9a0b1c2d3e4f5g6h7j8m",}, { expires_in: 3600,});{ "object": "scheduling.session", "id": "schs_01kd2m9a0b1c2d3e4f5g6h7j8m", "token": "cossch_abc123", "url": "https://example.test/h/schs_01kd2m9a0b1c2d3e4f5g6h7j8m#cossch_abc123", "expires_at": "2027-01-01T11:00:00.000Z"}