> ## Documentation Index
> Fetch the complete documentation index at: https://docs.finsync.ar/llms.txt
> Use this file to discover all available pages before exploring further.

# Public waiting-room snapshot

> Unauthenticated TV payload for a ventanilla screen. The token is unguessable and revocable. Never includes amounts or balances. Returns 404 for unknown, revoked, or disabled-module tokens.



## OpenAPI

````yaml /docs/openapi.json get /api/public/ventanilla/{token}
openapi: 3.0.0
info:
  title: FinSync API Documentation
  version: 1.0.0
  description: API documentation for FinSync application
  contact:
    name: FinSync Support
    email: support@finsync.com
servers:
  - url: https://api.finsync.ar
    description: Direct Fly API (preferred for API keys and webhooks)
  - url: https://finsync.ar
    description: Same-origin via finsync.ar (Vercel rewrite)
security:
  - apiKey: []
tags:
  - name: Clients
    description: Operations related to clients and their accounts
  - name: Tags
    description: >-
      Company-scoped client labels (Configuración > Etiquetas). Distinct from
      the special Centro de resultados / Centro de costos tag used for budget
      clients.
  - name: Accounts
    description: Operations related to account balances
  - name: Cost Centers
    description: Company centros de resultados (cost_center_id) and their budgets
  - name: Operations
    description: Operations for creating and managing financial operations
  - name: Operation Types
    description: Company operation types management
  - name: Transaction Types
    description: Company transaction types management
  - name: WhatsApp Tools
    description: >-
      Company-scoped WhatsApp bot operation tools (Configuración > WhatsApp >
      Tools). Same WhatsAppOperationTool rows as the dashboard. Authenticate
      with x-api-key.
  - name: External client
    description: >-
      Exports for external (portal-linked) clients. Authenticate with
      `x-api-key` (company-owned client ID) or `Authorization: Bearer` (Auth.js
      session for an ExternalAccessGrant).
  - name: Mesas
    description: >-
      Company FX trading desks (mesas). Same records and paths as the dashboard
      Mesas module. Integrators authenticate with x-api-key; the dashboard uses
      an employee session. Superadmin must set mesas_enabled first; there is no
      public PATCH for that flag. created_by / opened_by / closed_by are null
      for API-key callers.
  - name: Home metrics
    description: >-
      Named dashboard home metrics (list + values). API keys receive the
      Métricas-group cards (day P&L, commissions, cost centers) without the
      metrics-password cookie. Employee sessions need the matching view
      permission; they still skip the UI password gate on this surface.
paths:
  /api/public/ventanilla/{token}:
    get:
      tags:
        - Ventanilla
      summary: Public waiting-room snapshot
      description: >-
        Unauthenticated TV payload for a ventanilla screen. The token is
        unguessable and revocable. Never includes amounts or balances. Returns
        404 for unknown, revoked, or disabled-module tokens.
      parameters:
        - in: path
          name: token
          required: true
          schema:
            type: string
      responses:
        '200':
          description: Waiting-room snapshot
          content:
            application/json:
              schema:
                type: object
                required:
                  - companyName
                  - date
                  - rates
                  - services
                  - currentCall
                  - recentCalls
                properties:
                  companyName:
                    type: string
                  logoUrl:
                    type: string
                    nullable: true
                  showLogo:
                    type: boolean
                  date:
                    type: string
                    example: '2026-09-25'
                  timezone:
                    type: string
                    example: America/Argentina/Buenos_Aires
                  rates:
                    type: array
                    items:
                      type: object
                      properties:
                        currency:
                          type: string
                        buy:
                          type: number
                          nullable: true
                        sell:
                          type: number
                          nullable: true
                        mid:
                          type: number
                          nullable: true
                  services:
                    type: array
                    items:
                      type: object
                  tickerText:
                    type: string
                    nullable: true
                  announceSound:
                    type: boolean
                  announceTts:
                    type: boolean
                  privacyMode:
                    type: string
                    enum:
                      - full_name
                      - first_last_initial
                      - ticket
                  currentCall:
                    type: object
                    nullable: true
                  recentCalls:
                    type: array
                  updatedAt:
                    type: string
        '404':
          description: Unknown, revoked, or disabled screen
      security: []
components:
  securitySchemes:
    apiKey:
      type: apiKey
      in: header
      name: x-api-key
      description: API Key for authentication

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.