Skip to main content
GET
Call this from the visitor’s browser. It takes the embed’s public widget key in X-ARUKZ-Widget-Key, and the browser’s Origin must be allowed by both the deployment’s allowed_origins and the platform-wide widget allowlist. See Website widget. You must also send the thread’s X-ARUKZ-Visitor-Token. A missing token, another thread’s token, an unknown conversation ID and a malformed ID all return the same 404, so a visitor cannot probe for other visitors’ threads. When a request is refused, the response carries no Access-Control-Allow-Origin header, so in a cross-origin browser request fetch rejects with a network error instead of exposing the error body.
string
required
The conversation’s ID (UUID), from Start a widget conversation.
string
required
The deployment’s public widget key, arukz_wk_….
string
required
The visitor token returned when this thread was started.
string
required
Set by the browser. It must exactly match an origin allowed for this deployment. When you call from outside a browser, set it yourself.

Response

string
required
The conversation’s ID (UUID).
string
required
The assistant the deployment embeds.
string
required
The thread’s title.
string
required
active or archived.
string
required
idle when ready for a question, or awaiting_answer while an answer is being generated.
integer
required
Number of messages, questions and answers together.
string
required
ISO 8601 in UTC.
string
required
ISO 8601 in UTC.
object
required
{"type": "widget", "id": <deployment ID>}.
object
required
The metadata sent when the thread was started.
Last modified on September 26, 2026