generated: '2026-08-13' method: searched source: https://help.sundaysky.com/hc/en-us/articles/6000894076957-Using-the-SundaySky-API-to-Connect-Data docs: - https://help.sundaysky.com/hc/en-us/articles/6000894076957-Using-the-SundaySky-API-to-Connect-Data - https://help.sundaysky.com/hc/en-us/articles/360009316897-Integrating-with-Player-Events - https://help.sundaysky.com/hc/en-us/articles/27302852000541-Content-Security-Policies-Required-for-the-SundaySky-Player authentication: style: capability-url summary: >- No auth header. The SundaySky Video ID in the path is the only credential. see: authentication/sundaysky-authentication.yml request: protocol: https method: POST url_template: https://apis.sundaysky.com/get-video/player-session/{sundayskyVideoId} path_parameters: - name: sundayskyVideoId required: true description: >- Found in the embed code snippet generated by the Embed Code Builder on the video's Share tab. body: media_type: application/json shape: flat-json-object description: >- A flat JSON object of name/value pairs. There is no nesting, no envelope, and no request metadata block — every key is a personalization field. field_naming: source_of_truth: >- The JSON field names are defined per-video in the Studio data library's Map Fields window, not by a global schema. Each JSON field name must be edited to match the caller's own schema exactly. case_sensitive: true case_sensitivity_note: >- The letter case used for the JSON field name in the mapping window must match the letter case in the request body exactly. reserved_fields: - name: id required: false case: lowercase description: >- A unique value per viewer. Recommended when individual viewer behavior should be tracked in SundaySky reports. The field name is case-sensitive and must be entered in lower case. example: |- {"firstName":"Mitch","department":"Finance","id":"110006"} response: media_type: application/json shape: base64-string description: >- A base64 string representing the player session. It is normally passed straight into the player embed snippet in place of the placeholder text "Base64 response from Video API". It can instead be decoded to extract individual components of the video, such as the video stream URL or the captions file URL, for use with a third-party video player. third_party_player_caveat: >- When the video is played in a non-SundaySky player, SundaySky-specific functions such as clickable CTAs and analytics are not available. idempotency: supported: false evidence: >- No idempotency key, request key, or retry-safety contract is documented for the SundaySky Video API, and none was observed on the live endpoint. The operation is a render-and-return call with no created resource to de-duplicate. No Idempotency pointer is emitted for this provider. pagination: supported: false evidence: >- The public API surface is a single non-collection operation. No list endpoints, cursors, or page parameters are documented. versioning: scheme: none-documented evidence: >- The endpoint path carries no version segment and no version header is documented. Platform releases are communicated through dated release notes rather than an API version. See changelog/sundaysky-changelog.yml. request_tracing: provider_documented: false observed: - header: x-amzn-requestid note: >- Returned by the underlying AWS API Gateway, not documented by SundaySky. Observed on a live probe 2026-08-13. Not a contractual identifier. - header: x-amz-apigw-id note: Same — infrastructure-level, undocumented. client_side: field: detail.sessionId note: >- The player emits a per-session token on nearly every browser event, which is the closest thing to a correlation identifier SundaySky documents. rate_limit_signaling: documented: false see: rate-limits/sundaysky-rate-limits.yml data_handling: storage: storage-less description: >- SundaySky states the API integration method is "completely storage-less, meaning that any data used for personalization is completely purged after the video is generated." Retention behavior differs per data connector; the API connector and Databricks connector are documented as not persisting viewer data on SundaySky servers. docs: https://help.sundaysky.com/hc/en-us/articles/5964449203613-SundaySky-Data-Connector-Marketplace browser_integration: cors: observed_headers: access-control-allow-origin: '*' access-control-allow-credentials: 'true' fetched: '2026-08-13' note: >- Observed on the live endpoint; permits direct browser-side calls. Not documented by the provider. content_security_policy: documented: true docs: https://help.sundaysky.com/hc/en-us/articles/27302852000541-Content-Security-Policies-Required-for-the-SundaySky-Player directives: default-src: "'self'" worker-src: 'blob:' child-src: 'blob:' connect-src: "'self' blob: *.sundaysky.com" img-src: "'self' data: *.sundaysky.com" font-src: "'self' blob: data:" media-src: "'self' blob: *.sundaysky.com" script-src: "'self' play.sundaysky.com 'unsafe-inline'" style-src: "'self' 'unsafe-inline'" frame-src: '*.sundaysky.com *.formstack.com' constraints: - The SundaySky landing page builder cannot be used together with the SundaySky API data connector; a different data connector must be selected to use the landing page. - The API data connector is supported only by the JavaScript embed method. The iframe embed does not support it, nor NPS/custom surveys or advanced player configuration. - Personalized videos requiring URL parameters are not compatible with certain CMS platforms; Google Sites and Wix are named as known-incompatible. cross_links: errors: errors/sundaysky-problem-types.yml authentication: authentication/sundaysky-authentication.yml lifecycle: lifecycle/sundaysky-lifecycle.yml rate_limits: rate-limits/sundaysky-rate-limits.yml components: components/sundaysky-components.yml data_model: data-model/sundaysky-data-model.yml