Assign a harvester to a screen

put/v1/screens/{screen_id}/harvester

This endpoint is in the contract, but the API doesn't serve it during early access. It returns 404 for now.

Pairs a harvester the org already owns to this screen. The harvester is atomically detached from any other screen in the org. Re-assigning the harvester already on this screen is a no-op (safe to retry). If this screen has a different harvester, returns 409 screen_already_paired — unassign it first. Not an activation path: use POST /v1/harvesters for a new device.

curl -X PUT "https://api.vojo-media.com/v1/screens/$SCREEN_ID/harvester" \
  -H "Authorization: Bearer $VOJO_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "harvester_id": "cm1hrv7c3b0001q9z5l2n8x4tg",
  "harvester_screen_location": "top_right"
}'

const { data, error } = await api.PUT("/v1/screens/{screen_id}/harvester", {
  params: { path: { screen_id: screenId } },
  body: {
    harvester_id: "cm1hrv7c3b0001q9z5l2n8x4tg",
    harvester_screen_location: "top_right",
  },
});
if (error) throw new VojoApiError(error);

Response 200

{
  "data": {
    "id": "cm1scr2w6n0001h8d4k9t3m7ve",
    "name": "Lobby North",
    "brand": "iiyama",
    "model": "LH5560UHS",
    "condition": "new",
    "notes": null,
    "orientation": "portrait",
    "screen_24_hour": false,
    "harvester_screen_location": "top_right",
    "size_range": {
      "id": "cm1ssr1a5e0001t7y3u9i2o6pj",
      "label": "50–59 in",
      "min_inches": 50,
      "max_inches": 59
    },
    "last_evidence_at": "2026-10-07T09:29:41Z",
    "quality_bad": false,
    "site": {
      "id": "cm1sit5r9j0001p3l7v2x8c4qd",
      "name": "Leeds Trinity",
      "latitude": 53.7966,
      "longitude": -1.5432
    },
    "harvester": {
      "id": "cm1hrv7c3b0001q9z5l2n8x4tg",
      "mac_address": "D8:3A:DD:41:7C:02"
    },
    "created_at": "2025-04-11T12:30:00Z",
    "updated_at": "2026-10-07T09:30:00Z"
  },
  "meta": {}
}

Access

Authentication: Secret key or OAuth access token.
Scope: screens:write
User permission: networkUpdateHarvester

Path parameters

screen_idstringRequired
Screen id.

Headers

Vojo-Organisationstring
The organisation this request acts on (org id). Required for oauth2 callers — a missing header returns 400 organisation_header_required; an org the user cannot access (a membership or an access grant, and granted to this OAuth client) returns 403 organisation_access_denied. Secret keys are bound to one org: the header may be omitted, and if sent it must match the key's org (else 403). Every query is scoped by the resolved org, never by an id in the body.
Vojo-Versionstring
Optional API version pin (a date). Overrides the version pinned on the secret key / organisation for this request. Echoed in the Vojo-Version response header. Within /v1 only additive changes ship, so most callers can omit it.
date

Request body

harvester_idstringRequired
A harvester the org already owns. Detached from any other screen atomically.
harvester_screen_locationstring
Corner of the screen the harvester sensor is mounted on.
One of top_left, top_right, bottom_left, bottom_right

Response 200

dataobjectRequired
A physical display. status and verification are derived server-side.
Show 16 fields
- idstringRequired
  Screen id. Opaque string — treat as an identifier, never parse it.
- namestringRequired
  Unique within the org.
- brandstring or nullRequired
- modelstring or nullRequired
- conditionstring or nullRequired
- notesstring or nullRequired
- orientationstringRequired
  Physical orientation of the display.
  One of landscape, portrait
- screen_24_hourbooleanRequired
  True when the screen runs 24 hours and ignores site operating times.
- harvester_screen_locationstring or nullRequired
  Corner of the screen the harvester sensor is mounted on.
  One of top_left, top_right, bottom_left, bottom_right
- size_rangeobject or nullRequired
  Global reference data: a diagonal size band used for fingerprint geometry.
  Show 4 fields
  - idstringRequired
    Screen size range id. Opaque string — treat as an identifier, never parse it.
  - labelstringRequired
    Display label.
  - min_inchesnumberRequired
  - max_inchesnumber or nullRequired
    Null for the open-ended top range.
- last_evidence_atstring or nullRequired
  The reported time of the newest Passport or Harvester event in this screen's latest play; null if there isn't one. A fact, not a status — Vojo does not say whether a screen is on, off or working. Draw your own conclusion.
  date-time
- quality_badbooleanRequired
  The harvester currently reports a quality problem.
- siteobject or nullRequired
  The site the screen is assigned to, or null.
  Show 4 fields
  - idstringRequired
    Site id. Opaque string — treat as an identifier, never parse it.
  - namestringRequired
  - latitudenumber or nullRequired
  - longitudenumber or nullRequired
- harvesterobject or nullRequired
  Paired harvester, or null.
  Show 2 fields
  - idstringRequired
    Harvester id. Opaque string — treat as an identifier, never parse it.
  - mac_addressstringRequired
- created_atstringRequired
  RFC 3339 / ISO-8601 UTC timestamp.
  date-time
- updated_atstring or nullRequired
  RFC 3339 / ISO-8601 UTC timestamp, or null.
  date-time
metaobjectRequired
Response metadata for single-resource responses. Reserved; currently empty. Clients must ignore unknown members.

Response headers

Vojo-Versionstring
The API version (date) this response was rendered with — the request's Vojo-Version, else the key/org pin.
RateLimitstring
IETF RateLimit header: remaining quota in the current window, e.g. "default";r=97;t=42.
RateLimit-Policystring
IETF RateLimit-Policy header, e.g. "default";q=100;w=60. Portal OAuth clients get a higher tier.

Errors

Every error is application/problem+json. Branch on its code.

400
Malformed request: invalid JSON, a bad cursor, a missing Vojo-Organisation for an OAuth caller, or an unknown Vojo-Version.
401
Missing, invalid, expired or revoked credential.
403
The caller is authenticated but not allowed: missing scope (insufficient_scope), missing Permissions flag (permission_denied), a client/installer persona on an operator endpoint (operator_access_required), or no access to the requested org (organisation_access_denied).
404
The resource does not exist, or belongs to another organisation. Cross-org ids always 404, never 403.
409
The request conflicts with current state (duplicate name, device already paired, idempotency key reuse).
422
Well-formed request that failed validation. errors[] lists each failing field.
429
Rate limit exceeded for this principal. Back off for Retry-After seconds.
500
Unexpected server failure.