Mobile

The Android app: phone registration, push tokens, device tokens and the unknown-caller lookup.

POST/v1/mobile/calls/sync

Upload calls from the phone

Batches of the phone’s call log (≤ 500), idempotent on the phone and its CallLog id — the app re-sends an overlap every time. Only calls provably on a work SIM are kept (unknown SIMs follow the company policy); dates before the backfill floor or in the future are refused; with `mobile.tracking_scope = crm_only` only CRM numbers land. Accepts the member’s app session or the phone’s device token. 401 = the phone was removed (drop the credentials) · 409 = register the phone again.

Access: Signed-in members only (web or Android session) — not for API keys.

Request body

device_idrequired: string
The installation id the phone registered with.
callsrequired: array of SyncCall
app_version: string or null
device_now: integer or null
The phone’s clock (epoch ms) when it sent the batch: call dates of a phone more than 2 minutes off are corrected.
want_notifications: boolean
Accepted for older builds; notifications are polled.

Response · 200

datarequired: SyncCallsResult
metarequired: object

Request

curl -X POST 'https://api.propzolo.com/v1/mobile/calls/sync' \
  -H 'Authorization: Bearer pz_live_…' \
  -H 'Content-Type: application/json' \
  -d '{"device_id":"string","calls":[{"device_call_id":"string","number":"string","name":"string","type":0,"date":0,"duration":0,"sim_slot":0,"subscription_id":"string","sim_label":"string","sim_number":"string","attempt_ms":null,"net":null}],"app_version":"string","device_now":0,"want_notifications":true}'

Response example

{
  "data": {
    "received": 0,
    "inserted": 0,
    "duplicates": 0,
    "matched": 0,
    "unmatched": 0,
    "skipped": 0,
    "skipped_by": {
      "personal_sim": 0,
      "unknown_sim": 0,
      "invalid_date": 0,
      "before_backfill": 0,
      "not_in_crm": 0,
      "other_device": 0
    },
    "stored": 0,
    "tracking_disabled": true,
    "pending_outcomes": [
      {
        "id": "cmusrceel0000q7kaafxqi1om",
        "device_call_id": "string",
        "direction": "string",
        "started_at": "2026-10-06T05:30:00.000Z",
        "duration_sec": 0,
        "lead": {
          "id": "cmusrceel0000q7kaafxqi1om",
          "ref": "string",
          "name": "string"
        },
        "client": {
          "id": "cmusrceel0000q7kaafxqi1om",
          "client_name": "string"
        }
      }
    ],
    "server_time": "2026-10-06T05:30:00.000Z",
    "clock_offset_ms": 0
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
409 A unique value already exists, a concurrent change won, or the Idempotency-Key is still in use or was sent with a different request.
422 Invalid input; `error.fields` maps field paths to messages.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

GET/v1/mobile/contacts

The leads this phone keeps as contacts

The member’s own open leads (closing owner or pre-sales, inside their view scope) as phone contacts — one per person, newest given first, capped (`mobile.lead_contacts_max`, default 1500). Numbers leave the CRM only when the member’s `contact.phone` field rule is "visible"; otherwise (or when the company switched the feature off) `enabled` is false and the phone removes what it holds. Without parameters it answers the snapshot the built native tracker reconciles against (ETag / If-None-Match → 304). With `updated_since` it answers a delta — changed contacts and the keys to remove — in pages of `limit` (`cursor` / `meta.next_cursor`), for clients that do not want the whole list again. A lead reassigned away is found through its `prior_owner_ids`; a run of deltas should still be closed by a snapshot now and then. Accepts the member’s session or the phone’s device token.

Access: Signed-in members only (web or Android session) — not for API keys. Permission leads.view.

Parameters

updated_sincequery: DateTime
Delta mode: only contacts that changed after this instant (the `sync_token` of the previous run). Omit for the snapshot: every contact the phone should hold.
cursorquery: string
Delta mode: `meta.next_cursor` of the previous page of this run.
limitquery: integer
Delta page size (default 500); lowers the snapshot cap.
If-None-Matchheader: string
ETag of the copy the client holds; an unchanged resource answers 304 without a body.

Response · 200

datarequired: MobileLeadContacts
metarequired: PageMeta

Request

curl -X GET 'https://api.propzolo.com/v1/mobile/contacts' \
  -H 'Authorization: Bearer pz_live_…'

Response example

{
  "data": {
    "enabled": true,
    "reason": "ok",
    "mode": "snapshot",
    "items": [
      {
        "k": "string",
        "n": "string",
        "p": [
          "string"
        ],
        "c": "string",
        "t": "string",
        "h": "string"
      }
    ],
    "removed": [
      "string"
    ],
    "sync_token": "2026-10-06T05:30:00.000Z",
    "truncated": true
  },
  "meta": {
    "next_cursor": "string",
    "has_more": true
  }
}

Errors

304 Snapshot unchanged since the ETag in `If-None-Match`.
401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
422 Invalid input; `error.fields` maps field paths to messages.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

POST/v1/mobile/devices

Register this phone

Registers the app install of the signed-in member (an upsert: the app also calls it as its heartbeat) and answers with the company’s rules for the app. The first registration — and one made after sign-out, or 60 days after the last token — also returns a `device_token`. A phone removed by an admin stays removed (403, `fields.device = "revoked"`); a phone still signed in by another member of the company is a 409. The login session must have been opened for the same installation id.

Access: Signed-in members only (web or Android session) — not for API keys.

Request body

device_idrequired: InstallationId
Stable per-install id generated by the app (survives sign-out, not a reinstall).
platform: "android" | "ios"
The phone’s OS (U-02); an older app sends nothing and stays android.
build_flavor: BuildFlavor
Play Store build, or the sideloaded / MDM enterprise build.
brand: string or null
model: string or null
os_version: string or null
app_version: string or null
runtime_version: string or null
update_id: string or null
capabilities: map of boolean
What the native layer supports: call_log, recordings …
sims: array of SimSummary
permissions: map of boolean
Granted Android permissions (call_log, contacts …).
battery_optimized: boolean or null
push_token: FcmToken or null
The current push token (FCM or Expo); omit when push is unavailable.
rotate_device_token: boolean
The app lost its device token (a 401 in the background): issue a new one.
tracking_notice_ack: boolean
true: the member has just acknowledged the company’s call-tracking notice (`disclosure_text`) on this phone — audited.
holds_device_token: boolean
false: the app never received a device token for this sign-in (a lost answer) — a new one is issued; the sign-in itself is unchanged.

Response · 200

datarequired: RegisteredDevice
metarequired: object

Request

curl -X POST 'https://api.propzolo.com/v1/mobile/devices' \
  -H 'Authorization: Bearer pz_live_…' \
  -H 'Content-Type: application/json' \
  -d '{"device_id":"pz-3f0c8a52-1b7e-4c11-9a52-0d1c2e3f4a5b","platform":"android","build_flavor":"play","brand":"string","model":"string","os_version":"string","app_version":"string","runtime_version":"string","update_id":"string","capabilities":{},"sims":[{"slot":0,"subscription_id":"string","carrier":"string","display_name":"string","number":"string","is_work":true}],"permissions":{},"battery_optimized":true,"push_token":"string","rotate_device_token":true,"tracking_notice_ack":true,"holds_device_token":true}'

Response example

{
  "data": {
    "id": "cmusrceel0000q7kaafxqi1om",
    "device_id": "pz-3f0c8a52-1b7e-4c11-9a52-0d1c2e3f4a5b",
    "device_token": "string",
    "device_token_expires_at": "2026-10-06T05:30:00.000Z",
    "tracking_enabled": true,
    "cursor_floor": 0,
    "config": {
      "min_app_version": "string",
      "backfill_days": 0,
      "sync_interval_min": 0,
      "require_tracking": true
    },
    "disclosure_text": "string",
    "server_time": "2026-10-06T05:30:00.000Z"
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
409 A unique value already exists, a concurrent change won, or the Idempotency-Key is still in use or was sent with a different request.
422 Invalid input; `error.fields` maps field paths to messages.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

DELETE/v1/mobile/devices/{id}

Remove a phone

Marks the phone removed for good: its device token stops working, its push token is cleared and every login session of that installation is revoked. A member removes their own phone; removing someone else’s needs `settings.users`. Repeating the call changes nothing.

Access: Signed-in members only (web or Android session) — not for API keys.

Parameters

idpathrequired: Id
Opaque record id.

Response · 200

datarequired: RevokedDevice
metarequired: object

Request

curl -X DELETE 'https://api.propzolo.com/v1/mobile/devices/{id}' \
  -H 'Authorization: Bearer pz_live_…'

Response example

{
  "data": {
    "id": "cmusrceel0000q7kaafxqi1om",
    "device_id": "pz-3f0c8a52-1b7e-4c11-9a52-0d1c2e3f4a5b",
    "revoked_at": "2026-10-06T05:30:00.000Z",
    "sessions_revoked": 0
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
404 Not found — records of another company are reported the same way.
422 Invalid input; `error.fields` maps field paths to messages.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

PUT/v1/mobile/devices/{id}/push-token

Rotate or clear the push token

Stores the FCM token the phone now has (the app calls it when Firebase rotates the token); `null` stops push to this phone. Only the member the phone belongs to may call it.

Access: Signed-in members only (web or Android session) — not for API keys.

Parameters

idpathrequired: Id
Opaque record id.

Request body

tokenrequired: FcmToken or null
Push token of this install: an FCM registration token (Android) or an Expo push token (iPhone).

Response · 200

datarequired: PushTokenState
metarequired: object

Request

curl -X PUT 'https://api.propzolo.com/v1/mobile/devices/{id}/push-token' \
  -H 'Authorization: Bearer pz_live_…' \
  -H 'Content-Type: application/json' \
  -d '{"token":"string"}'

Response example

{
  "data": {
    "id": "cmusrceel0000q7kaafxqi1om",
    "push_enabled": true
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
404 Not found — records of another company are reported the same way.
409 A unique value already exists, a concurrent change won, or the Idempotency-Key is still in use or was sent with a different request.
422 Invalid input; `error.fields` maps field paths to messages.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

POST/v1/mobile/devices/{id}/sign-out

Sign this phone out

Called by the app before it ends its login session: revokes the device token and clears the push token, so nothing of this member reaches the phone afterwards. The phone stays registered (signing in again re-issues the token); to remove it for good use DELETE.

Access: Signed-in members only (web or Android session) — not for API keys.

Parameters

idpathrequired: Id
Opaque record id.

Response · 200

datarequired: SignedOutDevice
metarequired: object

Request

curl -X POST 'https://api.propzolo.com/v1/mobile/devices/{id}/sign-out' \
  -H 'Authorization: Bearer pz_live_…'

Response example

{
  "data": {
    "id": "cmusrceel0000q7kaafxqi1om",
    "tokens_revoked": 0,
    "push_cleared": true
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
404 Not found — records of another company are reported the same way.
422 Invalid input; `error.fields` maps field paths to messages.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

POST/v1/mobile/diagnostics

Crash and health reports of the app

Crash / error reports of the Android app (JS and native). Always answers 200 once the body is readable, so the phone forgets what it sent even when a report was unusable; each report is clipped to fixed field lengths, stored once per `rid`, capped at 60 reports per member and hour, logged as `mobile app error report` and kept in a capped per-company list (the latest 500, 30 days) for the admin view. Accepts the member’s session or the phone’s device token.

Access: Signed-in members only (web or Android session) — not for API keys.

Request body

reports: array of any

Response · 200

datarequired: MobileDiagnosticsResult
metarequired: object

Request

curl -X POST 'https://api.propzolo.com/v1/mobile/diagnostics' \
  -H 'Authorization: Bearer pz_live_…' \
  -H 'Content-Type: application/json' \
  -d '{"reports":[null]}'

Response example

{
  "data": {
    "accepted": 0,
    "ignored": 0
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
409 A unique value already exists, a concurrent change won, or the Idempotency-Key is still in use or was sent with a different request.
422 Invalid input; `error.fields` maps field paths to messages.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

GET/v1/mobile/lookup

Is this number already in the CRM?

Behind the “add unknown caller as lead” notification and the dial pad: whether the company has a contact with the number — never who. A member session also learns which colleagues are working the number (names only); the phone’s device token gets yes or no. Rate-limited per member.

Access: Signed-in members only (web or Android session) — not for API keys.

Parameters

phonequeryrequired: string
Any phone format; E.164 is best (+919812345678).

Response · 200

datarequired: NumberLookup
metarequired: object

Request

curl -X GET 'https://api.propzolo.com/v1/mobile/lookup' \
  -H 'Authorization: Bearer pz_live_…'

Response example

{
  "data": {
    "known": true,
    "found": true,
    "holders": {
      "names": [
        "string"
      ],
      "count": 0
    }
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
422 Invalid input; `error.fields` maps field paths to messages.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

GET/v1/mobile/notifications

Notifications this phone has not shown yet

What the native call tracker polls while the app is closed (at most once a minute): the member’s unread notifications that no push reached (`pushed_at` empty), created since this phone last asked, at most 20 oldest first. Each is handed out once per phone — the hand-out position is kept in Redis, nothing is written to the notifications table — and none while the member’s quiet hours apply, or for events they muted or the company switched off for push. Accepts the member’s session or the phone’s device token. Rate-limited per member.

Access: Signed-in members only (web or Android session) — not for API keys.

Response · 200

datarequired: MobileNotificationBatch
metarequired: object

Request

curl -X GET 'https://api.propzolo.com/v1/mobile/notifications' \
  -H 'Authorization: Bearer pz_live_…'

Response example

{
  "data": {
    "items": [
      {
        "id": "cmusrceel0000q7kaafxqi1om",
        "event": "string",
        "title": "string",
        "body": "string",
        "link": "string"
      }
    ]
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

POST/v1/mobile/recordings

Confirm an uploaded call recording

After the PUT: the recording is claimed on its call and checked by the worker (exists, size, audio by its bytes, the real hash) before it is stored like a cloud recording — playable with `calls.recordings`, kept for the `call_recordings` retention, transcribed when the company asks. A replay answers the same.

Access: Signed-in members only (web or Android session) — not for API keys.

Request body

device_idrequired: InstallationId
Stable per-install id generated by the app (survives sign-out, not a reinstall).
device_call_idrequired: string
keyrequired: string
sha256required: string
SHA-256 of the file’s bytes (hex): one call per file; a re-scan never uploads it again.
file_namerequired: string
The recorder’s file name (it carries the number or the contact name and the time).
named_at: integer or null
Epoch ms: the start time in the file name, resolved on the phone’s clock.
modified_at: integer or null
Epoch ms: the file’s last-modified time.
duration_ms: integer or null

Response · 200

datarequired: PhoneRecordingConfirmation
metarequired: object

Request

curl -X POST 'https://api.propzolo.com/v1/mobile/recordings' \
  -H 'Authorization: Bearer pz_live_…' \
  -H 'Content-Type: application/json' \
  -d '{"device_id":"pz-3f0c8a52-1b7e-4c11-9a52-0d1c2e3f4a5b","device_call_id":"string","key":"string","sha256":"string","file_name":"string","named_at":0,"modified_at":0,"duration_ms":0}'

Response example

{
  "data": {
    "outcome": "accepted"
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
409 A unique value already exists, a concurrent change won, or the Idempotency-Key is still in use or was sent with a different request.
422 Invalid input; `error.fields` maps field paths to messages.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

POST/v1/mobile/recordings/status

Report the phone’s recording sync

Opt-in, access, last scan, pending, uploaded, errors — shown on the devices page. Answers the company’s switch, the recording disclosure and the retention period. Accepts the member’s app session or the device token.

Access: Signed-in members only (web or Android session) — not for API keys.

Request body

device_idrequired: InstallationId
Stable per-install id generated by the app (survives sign-out, not a reinstall).
opted_inrequired: boolean
accessrequired: "none" | "media" | "all_files"
none · media: shared audio through MediaStore · all_files: the enterprise build’s file access
wifi_onlyrequired: boolean
foldersrequired: integer
foundrequired: integer
pendingrequired: integer
uploadedrequired: integer
failedrequired: integer
last_scan_atrequired: DateTime or null
Instant in ISO 8601, e.g. 2026-10-03T04:30:00.000Z.
last_upload_atrequired: DateTime or null
Instant in ISO 8601, e.g. 2026-10-03T04:30:00.000Z.
last_errorrequired: string or null

Response · 200

datarequired: RecordingSyncConfig
metarequired: object

Request

curl -X POST 'https://api.propzolo.com/v1/mobile/recordings/status' \
  -H 'Authorization: Bearer pz_live_…' \
  -H 'Content-Type: application/json' \
  -d '{"device_id":"pz-3f0c8a52-1b7e-4c11-9a52-0d1c2e3f4a5b","opted_in":true,"access":"none","wifi_only":true,"folders":0,"found":0,"pending":0,"uploaded":0,"failed":0,"last_scan_at":"2026-10-06T05:30:00.000Z","last_upload_at":"2026-10-06T05:30:00.000Z","last_error":"string"}'

Response example

{
  "data": {
    "recordings_enabled": true,
    "disclosure_text": "string",
    "retention_days": 0
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
409 A unique value already exists, a concurrent change won, or the Idempotency-Key is still in use or was sent with a different request.
422 Invalid input; `error.fields` maps field paths to messages.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

POST/v1/mobile/recordings/uploads

Ask to upload a call recording from the phone

The phone found a recording of a call its tracker synced (work SIMs only). The server checks the company switch (`mobile.recordings_enabled`), the call, the match (number in the file name with the shared phone helpers, times, length) and the content hash, then answers a presigned PUT or why not. Accepts the member’s app session or the phone’s device token.

Access: Signed-in members only (web or Android session) — not for API keys.

Request body

device_idrequired: InstallationId
Stable per-install id generated by the app (survives sign-out, not a reinstall).
device_call_idrequired: string
The call’s id in the phone’s call log.
sha256required: string
SHA-256 of the file’s bytes (hex): one call per file; a re-scan never uploads it again.
content_typerequired: string
sizerequired: integer
file_namerequired: string
The recorder’s file name (it carries the number or the contact name and the time).
named_at: integer or null
Epoch ms: the start time in the file name, resolved on the phone’s clock.
modified_at: integer or null
Epoch ms: the file’s last-modified time.
duration_ms: integer or null

Response · 200

datarequired: PhoneRecordingClaim
metarequired: object

Request

curl -X POST 'https://api.propzolo.com/v1/mobile/recordings/uploads' \
  -H 'Authorization: Bearer pz_live_…' \
  -H 'Content-Type: application/json' \
  -d '{"device_id":"pz-3f0c8a52-1b7e-4c11-9a52-0d1c2e3f4a5b","device_call_id":"string","sha256":"string","content_type":"string","size":1,"file_name":"string","named_at":0,"modified_at":0,"duration_ms":0}'

Response example

{
  "data": {
    "outcome": "upload",
    "reason": "string",
    "upload": {
      "key": "string",
      "url": "string",
      "method": "PUT",
      "headers": {},
      "expires_at": "2026-10-06T05:30:00.000Z"
    }
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
409 A unique value already exists, a concurrent change won, or the Idempotency-Key is still in use or was sent with a different request.
422 Invalid input; `error.fields` maps field paths to messages.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

GET/v1/mobile/updates/latest

The newest app build this phone may install

The newest published build of the phone’s flavour on its channel — `null` when nothing is published, the enterprise APK is not offered, or (Play builds) no Play Store listing is set. OTA updates of the JavaScript need no new build; this is for native changes and new phones.

Access: Signed-in members only (web or Android session) — not for API keys.

Parameters

flavorquery: BuildFlavor
The build asking; default: the flavour this login’s phone registered with, else enterprise.
channelquery: string
Release channel of the build (default production).
version_codequery: integer
The asking build’s versionCode; default: what its phone last reported.

Response · 200

datarequired: InstallableAppBuild or null
metarequired: object

Request

curl -X GET 'https://api.propzolo.com/v1/mobile/updates/latest' \
  -H 'Authorization: Bearer pz_live_…'

Response example

{
  "data": {
    "flavor": "play",
    "version": "0.3.0",
    "version_code": 0,
    "url": "string",
    "notes": "string",
    "required": true,
    "min_supported_version_code": 0,
    "size_bytes": 0,
    "sha256": "string",
    "published_at": "2026-10-06T05:30:00.000Z",
    "url_expires_at": "2026-10-06T05:30:00.000Z"
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
422 Invalid input; `error.fields` maps field paths to messages.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

curl -X POST 'https://api.propzolo.com/v1/mobile/calls/sync' \ -H 'Authorization: Bearer pz_live_…' \ -H 'Content-Type: application/json' \ -d '{"device_id":"string","calls":[{"device_call_id":"string","number":"string","name":"string","type":0,"date":0,"duration":0,"sim_slot":0,"subscription_id":"string","sim_label":"string","sim_number":"string","attempt_ms":null,"net":null}],"app_version":"string","device_now":0,"want_notifications":true}'

{ "data": { "received": 0, "inserted": 0, "duplicates": 0, "matched": 0, "unmatched": 0, "skipped": 0, "skipped_by": { "personal_sim": 0, "unknown_sim": 0, "invalid_date": 0, "before_backfill": 0, "not_in_crm": 0, "other_device": 0 }, "stored": 0, "tracking_disabled": true, "pending_outcomes": [ { "id": "cmusrceel0000q7kaafxqi1om", "device_call_id": "string", "direction": "string", "started_at": "2026-10-06T05:30:00.000Z", "duration_sec": 0, "lead": { "id": "cmusrceel0000q7kaafxqi1om", "ref": "string", "name": "string" }, "client": { "id": "cmusrceel0000q7kaafxqi1om", "client_name": "string" } } ], "server_time": "2026-10-06T05:30:00.000Z", "clock_offset_ms": 0 }, "meta": {} }

{ "data": { "enabled": true, "reason": "ok", "mode": "snapshot", "items": [ { "k": "string", "n": "string", "p": [ "string" ], "c": "string", "t": "string", "h": "string" } ], "removed": [ "string" ], "sync_token": "2026-10-06T05:30:00.000Z", "truncated": true }, "meta": { "next_cursor": "string", "has_more": true } }

curl -X POST 'https://api.propzolo.com/v1/mobile/devices' \ -H 'Authorization: Bearer pz_live_…' \ -H 'Content-Type: application/json' \ -d '{"device_id":"pz-3f0c8a52-1b7e-4c11-9a52-0d1c2e3f4a5b","platform":"android","build_flavor":"play","brand":"string","model":"string","os_version":"string","app_version":"string","runtime_version":"string","update_id":"string","capabilities":{},"sims":[{"slot":0,"subscription_id":"string","carrier":"string","display_name":"string","number":"string","is_work":true}],"permissions":{},"battery_optimized":true,"push_token":"string","rotate_device_token":true,"tracking_notice_ack":true,"holds_device_token":true}'

{ "data": { "id": "cmusrceel0000q7kaafxqi1om", "device_id": "pz-3f0c8a52-1b7e-4c11-9a52-0d1c2e3f4a5b", "device_token": "string", "device_token_expires_at": "2026-10-06T05:30:00.000Z", "tracking_enabled": true, "cursor_floor": 0, "config": { "min_app_version": "string", "backfill_days": 0, "sync_interval_min": 0, "require_tracking": true }, "disclosure_text": "string", "server_time": "2026-10-06T05:30:00.000Z" }, "meta": {} }

{ "data": { "id": "cmusrceel0000q7kaafxqi1om", "device_id": "pz-3f0c8a52-1b7e-4c11-9a52-0d1c2e3f4a5b", "revoked_at": "2026-10-06T05:30:00.000Z", "sessions_revoked": 0 }, "meta": {} }

{ "data": { "items": [ { "id": "cmusrceel0000q7kaafxqi1om", "event": "string", "title": "string", "body": "string", "link": "string" } ] }, "meta": {} }

curl -X POST 'https://api.propzolo.com/v1/mobile/recordings' \ -H 'Authorization: Bearer pz_live_…' \ -H 'Content-Type: application/json' \ -d '{"device_id":"pz-3f0c8a52-1b7e-4c11-9a52-0d1c2e3f4a5b","device_call_id":"string","key":"string","sha256":"string","file_name":"string","named_at":0,"modified_at":0,"duration_ms":0}'

curl -X POST 'https://api.propzolo.com/v1/mobile/recordings/status' \ -H 'Authorization: Bearer pz_live_…' \ -H 'Content-Type: application/json' \ -d '{"device_id":"pz-3f0c8a52-1b7e-4c11-9a52-0d1c2e3f4a5b","opted_in":true,"access":"none","wifi_only":true,"folders":0,"found":0,"pending":0,"uploaded":0,"failed":0,"last_scan_at":"2026-10-06T05:30:00.000Z","last_upload_at":"2026-10-06T05:30:00.000Z","last_error":"string"}'

curl -X POST 'https://api.propzolo.com/v1/mobile/recordings/uploads' \ -H 'Authorization: Bearer pz_live_…' \ -H 'Content-Type: application/json' \ -d '{"device_id":"pz-3f0c8a52-1b7e-4c11-9a52-0d1c2e3f4a5b","device_call_id":"string","sha256":"string","content_type":"string","size":1,"file_name":"string","named_at":0,"modified_at":0,"duration_ms":0}'

{ "data": { "outcome": "upload", "reason": "string", "upload": { "key": "string", "url": "string", "method": "PUT", "headers": {}, "expires_at": "2026-10-06T05:30:00.000Z" } }, "meta": {} }

{ "data": { "flavor": "play", "version": "0.3.0", "version_code": 0, "url": "string", "notes": "string", "required": true, "min_supported_version_code": 0, "size_bytes": 0, "sha256": "string", "published_at": "2026-10-06T05:30:00.000Z", "url_expires_at": "2026-10-06T05:30:00.000Z" }, "meta": {} }