Desk Toilet API · Private preview

Fleet and
collection events.

The private-preview API exposes fleet health, maintenance, collection, and organization-level Impact Ledger records. Access is limited to approved pilot organizations and their integration partners.

Request sandbox accessPrivate preview

# Event stream
device.health_changed
filter.replacement_due
cartridge.collection_ready
collection.state_changed
collection.custody_accepted
impact.ledger_posted

# Preview version
DT-API-Version: 2026-07-preview

Resource model

API
resources.

Resources cover devices, service work, cartridge custody, and qualified reporting. Personal activity stays in the personal account and has no API resource.

Read only

Devices and fleet

Unit readiness, battery, filter, seal, firmware, and service state for authorized organizations and sites. Named assignment remains in a separate identity domain.

Operational

Collection and service

Eligibility, pickup windows, custody status, cartridge inventory, and service tickets with policy-controlled write operations.

Qualified output

Impact and exports

Organization-level Impact Ledger records, processing outcomes, and sustainability exports with estimate and eligibility labels preserved.

Event delivery

Webhook
delivery.

Signed webhooks report operational changes without continuous polling. Each request includes a delivery identifier, event name, preview API version, timestamp, and HMAC-SHA256 signature.

Canonical events

`device.health_changed`	Device readiness, battery, seal, or service state changed.
`filter.replacement_due`	An AirSeal Filter entered its configured replacement window.
`cartridge.collection_ready`	A C12 met local fill, age, seal, temperature, and route rules.
`collection.state_changed`	A collection request moved to a canonical operational or exception state.
`collection.custody_accepted`	An authorized operator recorded Accepted into custody and issued a receipt.
`impact.ledger_posted`	A qualified processing allocation was posted to Impact Ledger.

Preview event names are versioned. Consumers should ignore unrecognized fields and process each delivery identifier once.

Signed delivery sample

POST /webhooks/desk-toilet HTTP/1.1
DT-Event: collection.custody_accepted
DT-Delivery: dlv_01JY7D4X3Q0W
DT-Timestamp: 1783788120
DT-Signature: v1=8b3e...c921

{
  "event_version": "2026-07-preview",
  "data": {
    "cartridge_id": "c12_7F24",
    "site_id": "site_NYC_04",
    "service_request_id": "sr_10482",
    "state": "accepted_into_custody",
    "transit_vessel_id": "tv_318",
    "accepted_at": "2026-07-11T12:14:00Z"
  }
}

Signed

Raw-body verification

Validate the timestamped HMAC-SHA256 signature before parsing or acting on a delivery.

At least once

Idempotent handling

Failed deliveries are retried with backoff. Delivery identifiers support safe duplicate suppression.

Versioned

Controlled change

Preview resources and events are pinned to an explicit API version with advance migration notes.

Canonical collection states

`collection_ready`	Collection ready
`pickup_scheduled`	Pickup scheduled
`prepared_for_handoff`	Prepared for handoff
`awaiting_collection`	Awaiting collection
`collection_delayed`	Collection delayed
`collection_held`	Collection held
`inspection_required`	Inspection required
`accepted_into_custody`	Accepted into custody
`in_transit`	In transit
`processing_received`	Processing received
`sanitized_replacement_ready`	Sanitized replacement ready

Scheduling or arrival does not transfer service custody. The transition to accepted_into_custody occurs only after an authorized operator verifies and records the handoff.

Integration patterns

Supported integration
patterns.

Pilot integrations can send maintenance and collection states to existing workplace systems. Every export retains its estimate labels, tenant boundary, and organization-level privacy controls.

Maintenance

Slack and Teams

Send filter and service alerts to approved operations channels. Enterprise collection readiness follows the proposed twice-daily service refresh and has no initiating-session timestamp.

Facilities

Building systems

Export unit health and site-level service state to building-management and work-order platforms.

Workspace

Smart desks

Coordinate approved readiness and maintenance states with compatible desk-control and deployment-planning systems.

Reporting

Sustainability exports

Move qualified processing-chain and Impact Ledger records into facility reporting workflows with estimate labels intact.

Operations

Service management

Create work orders from device-health events and synchronize closure state back to DT Fleet.

Enterprise

Data warehouse

Export delayed, organization-level operational aggregates for planning, capacity, and procurement analysis.

Scopes and privacy

Scopes and
excluded data.

A service account belongs to one organization, uses explicit scopes, and can be limited to approved sites. The API exposes fleet operations, not personal activity or named assignment. It does not include live occupied or unoccupied state.

Preview scopes

`fleet:read`	Read unit health, readiness, firmware, and service state within an authorized organization.
`collection:read`	Read collection eligibility, order state, custody status, and completion records.
`collection:write`	Create or reschedule eligible collection requests under configured site policy.
`service:write`	Open and update device service tickets for authorized sites.
`impact:read`	Read organization-level Impact Ledger entries and qualified sustainability exports.

Available

Fleet and unit service health
Cartridge inventory and custody state
Collection scheduling under site policy
Qualified organizational impact records
Audit records for integration actions

Outside the API

Individual session history
Body metrics or biometric data
Personal resource-credit balances
Exact live occupancy history
Cross-organization identifiers

Private-preview access is reviewed per use case. Production availability, limits, schemas, and retention controls remain subject to validation and enterprise agreements.