Update Secure Token

Update secure token of a push stream

curl -X POST "https://api.5centscdn.com/v2/streams/push/1001/securetoken" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: YOUR_API_KEY" \
  -d '{
  "enabled": "Y",
  "policy": "D",
  "list": "9fd379c72062e891",
  "timeout": 3600,
  "session": "0",
  "keyip": false,
  "ips": "",
  "mode": "save"
}'

import requests
import json

url = "https://api.5centscdn.com/v2/streams/push/1001/securetoken"
headers = {
  "Content-Type": "application/json",
  "X-API-Key": "YOUR_API_KEY"
}
data = {
  "enabled": "Y",
  "policy": "D",
  "list": "9fd379c72062e891",
  "timeout": 3600,
  "session": "0",
  "keyip": false,
  "ips": "",
  "mode": "save"
}

response = requests.post(url, headers=headers, json=data)
print(response.json())

const response = await fetch("https://api.5centscdn.com/v2/streams/push/1001/securetoken", {
  method: "POST",
  headers: {
  "Content-Type": "application/json",
  "X-API-Key": "YOUR_API_KEY"
},
  body: JSON.stringify({
  "enabled": "Y",
  "policy": "D",
  "list": "9fd379c72062e891",
  "timeout": 3600,
  "session": "0",
  "keyip": false,
  "ips": "",
  "mode": "save"
})
});

const data = await response.json();
console.log(data);

package main

import (
    "fmt"
    "net/http"
    "bytes"
    "encoding/json"
)

func main() {
    data := []byte(`{
  "enabled": "Y",
  "policy": "D",
  "list": "9fd379c72062e891",
  "timeout": 3600,
  "session": "0",
  "keyip": false,
  "ips": "",
  "mode": "save"
}`)

    req, err := http.NewRequest("POST", "https://api.5centscdn.com/v2/streams/push/1001/securetoken", bytes.NewBuffer(data))
    if err != nil {
        panic(err)
    }

    req.Header.Set("Content-Type", "application/json")
    req.Header.Set("X-API-Key", "YOUR_API_KEY")

    client := &http.Client{}
    resp, err := client.Do(req)
    if err != nil {
        panic(err)
    }
    defer resp.Body.Close()

    fmt.Println("Response Status:", resp.Status)
}

require 'net/http'
require 'json'

uri = URI('https://api.5centscdn.com/v2/streams/push/1001/securetoken')
http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = true

request = Net::HTTP::Post.new(uri)
request['Content-Type'] = 'application/json'
request['X-API-Key'] = 'YOUR_API_KEY'
request.body = '{
  "enabled": "Y",
  "policy": "D",
  "list": "9fd379c72062e891",
  "timeout": 3600,
  "session": "0",
  "keyip": false,
  "ips": "",
  "mode": "save"
}'

response = http.request(request)
puts response.body

{
  "result": "success",
  "message": "Stream Updated",
  "stream": {
    "monitoring_id": null,
    "type": "push",
    "id": "monitor-12345",
    "serviceid": 103,
    "name": "sample/stream",
    "codec": "h264",
    "ingests": [
      [],
      null
    ],
    "protocols": [
      [
        "HLS"
      ],
      [
        "HLS"
      ]
    ],
    "parentid": null,
    "server": "201",
    "backup": "",
    "dedicatedLTC": "0",
    "hasAdvancedFeatures": "0",
    "monitoring_triggers": null,
    "draft": "0",
    "disabled": "0",
    "created_at": "2026-04-30 07:12:35",
    "updated_at": "2026-04-30 08:27:51",
    "lastseen_at": false,
    "deleted": null,
    "ingestsLock": 0,
    "protocolsLock": 1,
    "status": "Deploying",
    "has": {
      "rtmp": 0,
      "rtsp": 0,
      "hls": 1,
      "dash": 0,
      "rtmpauth": false
    },
    "fms": {
      "server": {
        "country": "North America",
        "meta": {
          "fmsUrl": "rtmp://fms-01-01.5centscdn.com"
        }
      }
    },
    "parts": {
      "pp": "test",
      "sn": "stream",
      "full": "samplestream"
    },
    "restream": {},
    "playbackurls": {
      "scheme": "https",
      "url_prefix": "https://stream-abc12-hls-live.stream.example.com",
      "rtmp": "rtmp://rtmp.5centscdn.com:1935/",
      "rtsp": "rtsp://rtsp.5centscdn.com:554/",
      "hlsManifest": "playlist_dvr.m3u8",
      "dashManifest": "manifest_dvr.mpd",
      "hls": "https://hash-hls-live.5centscdn.com",
      "dash": "https://hash-hls-live.5centscdn.com",
      "players": {
        "flowplayer": {
          "baseQ": "",
          "base": "https://cdn.example.com/flowplayer/hls/",
          "hls": "https://cdn.example.com/flowplayer/hls/aHR0cHM6Ly9zdHJlYW0uZXhhbXBsZS5jb20vc2FtcGxlL3N0cmVhbS9wbGF5bGlzdC5tM3U4"
        },
        "videojs": {
          "baseQ": "",
          "base": "https://cdn.example.com/videojs/hls/",
          "hls": "https://cdn.example.com/videojs/hls/aHR0cHM6Ly9zdHJlYW0uZXhhbXBsZS5jb20vc2FtcGxlL3N0cmVhbS9wbGF5bGlzdC5tM3U4"
        },
        "own": {
          "hashes": {
            "stream-abc12-hls-live.stream.example.com": {
              "hash": "jkl78hash",
              "hls": "https://hash-hls-live.5centscdn.com",
              "base64": "aHR0cHM6Ly9zdHJlYW0uZXhhbXBsZS5jb20vc2FtcGxlL3N0cmVhbS9wbGF5bGlzdC5tM3U4",
              "dash": "https://hash-hls-live.5centscdn.com",
              "base64dash": "aHR0cHM6Ly9zdHJlYW0uZXhhbXBsZS5jb20vc2FtcGxlL3N0cmVhbS9wbGF5bGlzdC5tM3U4"
            }
          },
          "baseQ": "?showcv=true&title=sample/stream",
          "base": "https://cdn.example.com/player/hls/skin1/jkl78hash/",
          "hls": "https://cdn.example.com/player/hls/skin1/jkl78hash/aHR0cHM6Ly9zdHJlYW0uZXhhbXBsZS5jb20vc2FtcGxlL3N0cmVhbS9wbGF5bGlzdC5tM3U4?showcv=true&title=sample/stream",
          "dash": "https://cdn.example.com/player/dash/skin1/jkl78hash/aHR0cHM6Ly9zdHJlYW0uZXhhbXBsZS5jb20vc2FtcGxlL3N0cmVhbS9wbGF5bGlzdC5tM3U4?showcv=true&title=sample/stream"
        }
      },
      "tokenized": {
        "scheme": "https",
        "url_prefix": "https://stream-abc12-hls-live.stream.example.com",
        "rtmp": "rtmp://rtmp.5centscdn.com:1935/",
        "rtsp": "rtsp://rtsp.5centscdn.com:554/",
        "hlsManifest": "playlist_dvr.m3u8",
        "dashManifest": "manifest_dvr.mpd",
        "hls": "https://hash-hls-live.5centscdn.com",
        "dash": "https://hash-hls-live.5centscdn.com",
        "players": {
          "hostname": "cdn.example.com",
          "flowplayer": {
            "baseQ": "",
            "base": "https://cdn.example.com/flowplayer/hls/",
            "hls": "https://cdn.example.com/flowplayer/hls/aHR0cHM6Ly9zdHJlYW0uZXhhbXBsZS5jb20vc2FtcGxlL3N0cmVhbS9wbGF5bGlzdC5tM3U4",
            "dash": "https://cdn.example.com/flowplayer/dash/aHR0cHM6Ly9zdHJlYW0uZXhhbXBsZS5jb20vc2FtcGxlL3N0cmVhbS9wbGF5bGlzdC5tM3U4"
          },
          "videojs": {
            "baseQ": "",
            "base": "https://cdn.example.com/videojs/hls/",
            "hls": "https://cdn.example.com/videojs/hls/aHR0cHM6Ly9zdHJlYW0uZXhhbXBsZS5jb20vc2FtcGxlL3N0cmVhbS9wbGF5bGlzdC5tM3U4",
            "dash": "https://cdn.example.com/videojs/dash/aHR0cHM6Ly9zdHJlYW0uZXhhbXBsZS5jb20vc2FtcGxlL3N0cmVhbS9wbGF5bGlzdC5tM3U4"
          },
          "own": {
            "hashes": {
              "stream-abc12-hls-live.stream.example.com": {
                "hash": "jkl78hash",
                "hls": "https://hash-hls-live.5centscdn.com",
                "base64": "aHR0cHM6Ly9zdHJlYW0uZXhhbXBsZS5jb20vc2FtcGxlL3N0cmVhbS9wbGF5bGlzdC5tM3U4",
                "dash": "https://hash-hls-live.5centscdn.com",
                "base64dash": "aHR0cHM6Ly9zdHJlYW0uZXhhbXBsZS5jb20vc2FtcGxlL3N0cmVhbS9wbGF5bGlzdC5tM3U4"
              }
            },
            "baseQ": "?showcv=true&title=sample/stream",
            "base": "https://cdn.example.com/player/hls/skin1/jkl78hash/",
            "hls": "https://cdn.example.com/player/hls/skin1/jkl78hash/aHR0cHM6Ly9zdHJlYW0uZXhhbXBsZS5jb20vc2FtcGxlL3N0cmVhbS9wbGF5bGlzdC5tM3U4?showcv=true&title=sample/stream",
            "dash": "https://cdn.example.com/player/dash/skin1/jkl78hash/aHR0cHM6Ly9zdHJlYW0uZXhhbXBsZS5jb20vc2FtcGxlL3N0cmVhbS9wbGF5bGlzdC5tM3U4?showcv=true&title=sample/stream"
          }
        },
        "path": {
          "hls": "/test/a4c1f924c3f3377575755f900a6ea602.sdp/playlist_dvr.m3u8",
          "dash": "/test/a4c1f924c3f3377575755f900a6ea602.sdp/manifest_dvr.mpd"
        },
        "token": {
          "hls": "md5=V4ZzWdPkvqz-9s4ZGarjHw&path=%2Ftest%2Fa4c1f924c3f3377575755f900a6ea602.sdp&expires=1777541271",
          "dash": "md5=V4ZzWdPkvqz-9s4ZGarjHw&path=%2Ftest%2Fa4c1f924c3f3377575755f900a6ea602.sdp&expires=1777541271"
        }
      }
    },
    "platformsCount": 0,
    "ssl_enabled": true,
    "hash": "a4c1f924c3f3377575755f900a6ea602.sdp",
    "ndvr": {
      "enabled": "Y",
      "retention": "5"
    },
    "securetoken": {
      "enabled": "Y",
      "policy": "D",
      "keyip": "N",
      "list": "9fd379c72062e891",
      "timeout": 3600,
      "session": "0",
      "ips": "",
      "dirs": null,
      "active": "Y"
    },
    "record": {
      "enabled": "N",
      "retention": "3",
      "stream": {
        "id": 72200,
        "type": "record"
      }
    },
    "domainlock": {
      "enabled": "Y",
      "policy": "Y",
      "list": "example.com,docs.example.com",
      "ips": "",
      "noreferer": "N",
      "active": "Y"
    },
    "geoblock": {
      "enabled": "Y",
      "policy": "N",
      "list": [
        "AU"
      ],
      "ips": "",
      "active": "Y"
    },
    "ipaccess": {
      "enabled": "Y",
      "policy": "N",
      "list": "",
      "ips": "",
      "active": "N"
    },
    "useragent": {
      "enabled": "Y",
      "policy": "Y",
      "list": "",
      "ips": "",
      "casesensitive": "N",
      "active": "N",
      "listArr": [
        ""
      ]
    },
    "rtmpauth": {
      "password": "",
      "active": "N"
    },
    "transcode": {
      "ltc": 0,
      "type": "mixed",
      "enabled": false,
      "isEditable": true
    },
    "platforms": [],
    "messages": {},
    "adInsertion": null
  }
}

POST

/streams/push/{streamid}/securetoken

POST

Base URLstring

Target server for requests. Edit to use your own host.

API Key (header: X-API-Key)

X-API-Keystring

Required

API key (sent in header)

Stream ID

The media type of the request body

Options: application/json

enabledstring

Enable or disable this feature. Y means enabled, N means disabled.

policystring

Secure token path policy. F means Full Path (secure full path using token), Q means Partial Path (secure partial path using token in query), D means Partial Path (secure partial path using token in path). Allowed values: F, Q, D.

liststring

The generated secure token used to sign and validate protected URLs.

timeoutinteger

Token or session expiry time in seconds.

sessionstring

Session type. 1 means moving session (URL is valid when requested within Token Expiration time and subsequent request is made within the Token Expiration time), 0 means fixed session (URL is valid till Token Expiration).

keyipboolean

Bind the secure token to the requester IP address. true means enabled, false means disabled.

ipsstring

Comma-separated IP addresses for access control. Leave empty for none.

modestring

Operation mode for this request. Common values: save, delete, clear, replace.

Request Preview

Response

Response will appear here after sending the request

Authentication

header

X-API-Keystring

Required

API Key for authentication. Provide your API key in the header.

Path Parameters

streamidstring

Required

Stream ID

Example:

1001

Body

application/json

enabledstring

Enable or disable this feature. Y means enabled, N means disabled.

Example:

Y

policystring

Example:

D

liststring

The generated secure token used to sign and validate protected URLs.

Example:

9fd379c72062e891

timeoutinteger

Token or session expiry time in seconds.

Example:

3600

sessionstring

Example:

0

keyipboolean

Bind the secure token to the requester IP address. true means enabled, false means disabled.

Example:

false

ipsstring

Comma-separated IP addresses for access control. Leave empty for none.

Example:

modestring

Operation mode for this request. Common values: save, delete, clear, replace.

Example:

save

Responses

resultstring

Status of the API response.

messagestring

Human-readable message describing the result.

streamobject

Stream object containing configuration and status details.

monitoring_idstring

Unique monitoring identifier for the stream.

typestring

Type identifier for this stream or object.

idinteger

Unique numeric identifier.

serviceidinteger

Unique identifier of the service this stream belongs to.

namestring

Name of the stream.

codecstring

Video codec used for the stream.

ingestsarray[]

List of active ingest connection details for each server.

protocolsarray[]

Supported streaming protocols for each server.

parentidstring

Identifier of the parent stream, if this is a child stream.

serverstring

Server ID or identifier assigned to the stream.

backupstring

Backup server ID for failover.

dedicatedLTCstring

Whether a dedicated live transcoding server is allocated for this stream.

hasAdvancedFeaturesstring

Whether advanced features are enabled for this stream.

monitoring_triggersstring

Monitoring alert trigger configuration for the stream.

draftstring

Draft status flag. 0 means published; 1 means unpublished draft.

disabledstring

Disabled flag. 0 means active; 1 means disabled.

created_atstring

Timestamp when the stream was created.

updated_atstring

Timestamp when the stream was last updated.

lastseen_atboolean

Timestamp when the stream was last detected as active.

deletedstring

Deletion timestamp, or null if the stream is not deleted.

ingestsLockinteger

Whether the ingest endpoint list is locked from editing.

protocolsLockinteger

Whether the supported protocol list is locked from editing.

statusstring

Current deployment or operational status of the stream.

hasobject

Flags indicating which streaming protocols are active.

rtmpinteger

Whether RTMP streaming is enabled. 1 = enabled, 0 = disabled.

rtspinteger

Whether RTSP streaming is enabled. 1 = enabled, 0 = disabled.

hlsinteger

Whether HLS streaming is enabled. 1 = enabled, 0 = disabled.

dashinteger

Whether DASH streaming is enabled. 1 = enabled, 0 = disabled.

rtmpauthboolean

Whether RTMP publish authentication is required.

fmsobject

Flash Media Server ingest configuration for the stream.

serverobject

Server ID or identifier assigned to the stream.

countrystring

Geographic region of the ingest server.

metaobject

Metadata object for the server.

fmsUrlstring

RTMP ingest URL for the assigned FMS server.

partsobject

Stream name components.

ppstring

Stream name prefix (part 1, before the slash).

snstring

Stream name suffix (part 2, after the slash).

fullstring

Combined full stream name without the slash separator.

restreamobject

Restream platform configuration object.

playbackurlsobject

Playback URL set for all supported protocols and player types.

schemestring

URL scheme used for playback.

url_prefixstring

Base CDN hostname URL used as a prefix for playback URLs.

rtmpstring

RTMP playback or destination URL.

rtspstring

RTSP playback URL.

hlsManifeststring

HLS manifest filename.

dashManifeststring

DASH manifest filename.

hlsstring

HLS playback or player iframe URL.

dashstring

DASH playback or player iframe URL.

playersobject

Embedded player iframe URL set for supported player types.

flowplayerobject

Flowplayer iframe URL information.

baseQstring

Query string appended to the player iframe URL.

basestring

Base player iframe URL without the stream path.

hlsstring

HLS playback or player iframe URL.

videojsobject

Video.js player iframe URL information.

baseQstring

Query string appended to the player iframe URL.

basestring

Base player iframe URL without the stream path.

hlsstring

HLS playback or player iframe URL.

ownobject

Native stream player iframe URL information.

hashesobject

Map of CDN hostname to stream hashes and playback URLs.

stream-abc12-hls-live.stream.example.comobject

hashstring

Short hash or slug used in stream URLs.

hlsstring

HLS playback or player iframe URL.

base64string

Base64-encoded HLS playback URL for use with iframe players.

dashstring

DASH playback or player iframe URL.

base64dashstring

Base64-encoded DASH playback URL for use with iframe players.

baseQstring

Query string appended to the player iframe URL.

basestring

Base player iframe URL without the stream path.

hlsstring

HLS playback or player iframe URL.

dashstring

DASH playback or player iframe URL.

tokenizedobject

Tokenized playback URL configuration, or null if disabled.

schemestring

URL scheme used for playback.

url_prefixstring

Base CDN hostname URL used as a prefix for playback URLs.

rtmpstring

RTMP playback or destination URL.

rtspstring

RTSP playback URL.

hlsManifeststring

HLS manifest filename.

dashManifeststring

DASH manifest filename.

hlsstring

HLS playback or player iframe URL.

dashstring

DASH playback or player iframe URL.

playersobject

Embedded player iframe URL set for supported player types.

hostnamestring

CDN hostname used for playback.

flowplayerobject

Flowplayer iframe URL information.

baseQstring

Query string appended to the player iframe URL.

basestring

Base player iframe URL without the stream path.

hlsstring

HLS playback or player iframe URL.

dashstring

DASH playback or player iframe URL.

videojsobject

Video.js player iframe URL information.

baseQstring

Query string appended to the player iframe URL.

basestring

Base player iframe URL without the stream path.

hlsstring

HLS playback or player iframe URL.

dashstring

DASH playback or player iframe URL.

ownobject

Native stream player iframe URL information.

hashesobject

Map of CDN hostname to stream hashes and playback URLs.

stream-abc12-hls-live.stream.example.comobject

hashstring

Short hash or slug used in stream URLs.

hlsstring

HLS playback or player iframe URL.

base64string

Base64-encoded HLS playback URL for use with iframe players.

dashstring

DASH playback or player iframe URL.

base64dashstring

Base64-encoded DASH playback URL for use with iframe players.

baseQstring

Query string appended to the player iframe URL.

basestring

Base player iframe URL without the stream path.

hlsstring

HLS playback or player iframe URL.

dashstring

DASH playback or player iframe URL.

pathobject

hlsstring

HLS playback or player iframe URL.

dashstring

DASH playback or player iframe URL.

tokenobject

hlsstring

HLS playback or player iframe URL.

dashstring

DASH playback or player iframe URL.

platformsCountinteger

Number of external restreaming platforms configured.

ssl_enabledboolean

Whether HTTPS/SSL is enabled for playback.

hashstring

Short hash or slug used in stream URLs.

ndvrobject

Network DVR (nDVR) rewind configuration for the stream.

enabledstring

Enable or disable this feature.

retentionstring

Retention period in days (record) or minutes (nDVR).

securetokenobject

Secure token URL signing configuration.

enabledstring

Enable or disable this feature.

policystring

Policy mode controlling allow/deny behavior.

keyipstring

Whether the token is bound to the viewer IP address.

liststring

Comma-separated list of allowed or blocked values.

timeoutinteger

Token expiry time in seconds.

sessionstring

Session-based token mode flag.

ipsstring

IP addresses associated with the access control policy.

dirsstring

URL directory paths restricted by this policy.

activestring

Whether this policy is currently enforced.

recordobject

Recording (DVR) configuration for the stream.

enabledstring

Enable or disable this feature.

retentionstring

Retention period in days (record) or minutes (nDVR).

streamobject

Stream object containing configuration and status details.

idinteger

Unique numeric identifier.

typestring

Type identifier for this stream or object.

domainlockobject

Domain lock (hotlink protection) configuration.

enabledstring

Enable or disable this feature.

policystring

Policy mode controlling allow/deny behavior.

liststring

Comma-separated list of allowed or blocked values.

ipsstring

IP addresses associated with the access control policy.

norefererstring

Whether to allow playback requests with no Referer header.

activestring

Whether this policy is currently enforced.

geoblockobject

Geoblocking access control configuration.

enabledstring

Enable or disable this feature.

policystring

Policy mode controlling allow/deny behavior.

liststring[]

Comma-separated list of allowed or blocked values.

ipsstring

IP addresses associated with the access control policy.

activestring

Whether this policy is currently enforced.

ipaccessobject

IP address access control configuration.

enabledstring

Enable or disable this feature.

policystring

Policy mode controlling allow/deny behavior.

liststring

Comma-separated list of allowed or blocked values.

ipsstring

IP addresses associated with the access control policy.

activestring

Whether this policy is currently enforced.

useragentobject

User-agent based access control configuration.

enabledstring

Enable or disable this feature.

policystring

Policy mode controlling allow/deny behavior.

liststring

Comma-separated list of allowed or blocked values.

ipsstring

IP addresses associated with the access control policy.

casesensitivestring

Whether user-agent pattern matching is case-sensitive.

activestring

Whether this policy is currently enforced.

listArrstring[]

User-agent filter list as a parsed array.

rtmpauthobject

Whether RTMP publish authentication is required.

passwordstring

Password for RTMP publish authentication.

activestring

Whether this policy is currently enforced.

transcodeobject

Live transcoding configuration for the stream.

ltcinteger

Live transcoding server ID assigned to this stream.

typestring

Type identifier for this stream or object.

enabledboolean

Enable or disable this feature.

isEditableboolean

Whether the transcoding configuration can be edited.

platformsstring[]

List of configured external restreaming platform entries.

messagesobject

Informational messages related to the stream state.

adInsertionstring

Ad insertion configuration for the stream, or null if not configured.

Was this page helpful?