Configure access
An authorized staff member issues guest access from the guest profile in Hallify. The guest receives a bootstrap capability in a URL fragment. Exchange it exactly once and send the returned continuation token as x-guest-portal-token.
First successful workflow
Follow these steps in order. Open each method for its exact body, required headers and response schema.
- Exchange the bootstrap token, then read the guest profile and its revision.
- Read loyalty, consent preferences and cursor-paginated history.
- Update editable profile or marketing fields using the expected revision; record consent as a new decision.
- Create and follow privacy requests where needed, then revoke the portal session on sign-out.
State, retries and recovery
The capability exposes only the owning guest identity and venue context. It is not a CRM export token. Previous consent decisions remain immutable. Continue history with the returned cursor and unchanged scope; do not construct cursors yourself.