Zero-Knowledge Video Meetings for Your Platform

# 1. Create a customizable room with white-label parameters
curl -X POST https://ghostlink.chat/api/v1/rooms \
  -H "Authorization: Bearer gl_live_your_api_key_here" \
  -H "Content-Type: application/json" \
  -d '{
    "duration_minutes": 60,
    "max_participants": 5,
    "locked_lobby": true,
    "default_video": "off",
    "default_audio": "on",
    "hide_chat": false,
    "lobby_msg": "Dr. Jenkins will admit you to your consultation shortly.",
    "redirect_on_leave": "https://app.telehealth.co.uk/appointment-complete",
    "branding": { "brand_color": "#10b981" },
    "allowed_domains": ["https://app.telehealth.co.uk"],
    "webhook_url": "https://api.telehealth.co.uk/webhooks/ghostlink",
    "metadata": { "appointment_id": "appt_98214" }
  }'

# Response (201 Created):
# {
#   "success": true,
#   "room_id": "gl-8f92a1bc",
#   "embed_url": "https://ghostlink.chat/embed/gl-8f92a1bc?token=eyJhbG...",
#   "host_url": "https://ghostlink.chat/room/gl-8f92a1bc?token=eyJhbG...",
#   "guest_url": "https://ghostlink.chat/room/gl-8f92a1bc"
# }

import axios from 'axios';

interface CreateRoomResponse {
  success: boolean;
  room_id: string;
  embed_url: string;
  host_url: string;
  guest_url: string;
  expires_at: number;
}

export async function createConsultationRoom(appointmentId: string): Promise<CreateRoomResponse> {
  const { data } = await axios.post<CreateRoomResponse>(
    'https://ghostlink.chat/api/v1/rooms',
    {
      duration_minutes: 60,
      max_participants: 5,
      locked_lobby: true,
      default_video: 'off',
      lobby_msg: 'Your doctor will admit you shortly.',
      redirect_on_leave: 'https://app.yourcompany.com/feedback',
      allowed_domains: [process.env.APP_URL || 'https://app.yourcompany.com'],
      metadata: { appointment_id: appointmentId }
    },
    {
      headers: {
        'Authorization': `Bearer ${process.env.GHOSTLINK_API_KEY}`,
        'Content-Type': 'application/json'
      }
    }
  );

  return data;
}

import os
import requests

def create_telehealth_session(patient_ref: str) -> dict:
    url = "https://ghostlink.chat/api/v1/rooms"
    headers = {
        "Authorization": f"Bearer {os.environ.get('GHOSTLINK_API_KEY')}",
        "Content-Type": "application/json"
    }
    payload = {
        "duration_minutes": 60,
        "max_participants": 5,
        "locked_lobby": True,
        "default_video": "off",
        "lobby_msg": "Your physician will admit you shortly.",
        "allowed_domains": ["https://app.telehealth.com"],
        "metadata": {"patient_ref": patient_ref}
    }
    
    response = requests.post(url, json=payload, headers=headers)
    response.raise_for_status()
    return response.json()

import React, { useEffect } from 'react';

// Drop-in GhostLink Embed Component for React / Next.js
export function GhostLinkEmbed({ embedUrl, onRoomReady, onPeerCountChange, onRoomLeft }) {
  useEffect(() => {
    const handleMessage = (event) => {
      if (event.data?.type !== 'ghostlink:event') return;

      if (event.data.event === 'room.ready' && onRoomReady) {
        onRoomReady(event.data);
      }
      if (event.data.event === 'room.peer_count' && onPeerCountChange) {
        onPeerCountChange(event.data.count);
      }
      if (event.data.event === 'room.left' && onRoomLeft) {
        onRoomLeft(event.data);
      }
    };

    window.addEventListener('message', handleMessage);
    return () => window.removeEventListener('message', handleMessage);
  }, [onRoomReady, onPeerCountChange, onRoomLeft]);

  return (
    <div className="w-full h-[650px] rounded-2xl overflow-hidden border border-slate-800 bg-black shadow-2xl">
      <iframe
        src={embedUrl}
        title="GhostLink Confidential Room"
        className="w-full h-full border-0"
        allow="camera; microphone; display-capture; autoplay"
      />
    </div>
  );
}

// Verify incoming HMAC-SHA256 signature from GhostLink in Express / Next.js
import crypto from 'crypto';

export function verifyGhostLinkWebhook(payload: string, signature: string, secret: string): boolean {
  if (!signature || !secret) return false;
  const hmac = crypto.createHmac('sha256', secret);
  const digest = 'sha256=' + hmac.update(payload).digest('hex');
  return crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(digest));
}

// In your webhook route handler:
// app.post('/api/webhooks/ghostlink', (req, res) => {
//   const signature = req.headers['x-ghostlink-signature'];
//   if (!verifyGhostLinkWebhook(req.rawBody, signature, process.env.GHOSTLINK_WEBHOOK_SECRET)) {
//     return res.status(401).send('Invalid signature');
//   }
//   const { event, room_id, duration_seconds, room_hours_billed } = req.body;
//   if (event === 'room.ended') {
//     console.log(`Meeting ${room_id} closed (${duration_seconds}s, ${room_hours_billed} hrs billed)`);
//   }
//   res.sendStatus(200);
// });

// 1. Claude Desktop Setup: Add to ~/Library/Application Support/Claude/claude_desktop_config.json
// or %APPDATA%\Claude\claude_desktop_config.json
{
  "mcpServers": {
    "ghostlink": {
      "command": "npx",
      "args": ["-y", "ghostlink-mcp@latest"],
      "env": {
        "GHOSTLINK_API_KEY": "gl_live_your_api_key_here"
      }
    }
  }
}

// 2. Direct HTTP JSON-RPC 2.0 (Cursor / Windsurf / Custom Agents):
// Endpoint: POST https://ghostlink.chat/api/mcp
// Header:   Authorization: Bearer gl_live_your_api_key_here (or gl_test_sandbox)
//
// Payload to create a disposable room:
// {
//   "jsonrpc": "2.0",
//   "id": 1,
//   "method": "tools/call",
//   "params": {
//     "name": "create_ghostlink_room",
//     "arguments": {
//       "duration_minutes": 45,
//       "lobby_msg": "Consultation starting shortly"
//     }
//   }
// }

// 3. Client-Side E2EE Passphrase Injection:
// Simply append #key=your-secret to the returned guest_url or embed_url.
// The browser encrypts text/notes with AES-256-GCM. 0 keys touch the server.