The tenant's currently ringing call, if any

GET 
/api/calls/ringing

Polled by the mobile app on open and on push tap to decide whether to raise the in-app call card — a push can arrive after the caller already hung up, so the app asks rather than trusting the notification.

Rings older than two minutes are treated as stale and reported as none: Meta ends unanswered calls at 30-60s, and the buffer absorbs clock skew. Returns null rather than 403 when the caller may not view the ringing conversation, so the app never learns that a call it cannot see exists.

It also answers the ROUTING decision, not merely the view gate (SES-1 F2): a ring aimed at specific seats (ring_target_user_ids, mirrored on GET /api/calls as ring_targets) reports null to everyone else, so the in-app card matches the phones the VoIP push actually rang. A null or empty target list is the everyone-ring and still answers everybody.

Responses

200

The ringing call, or null.

401

Not authenticated. code: account_disabled means the member's seat was deactivated in this workspace: the session is over even though the token was not revoked (clients sign out and clean up).