Capture

Record screens, input actions and optional audio into an account timeline.

Beeuni Capture records a member’s own computer 24/7:

• the screen: video, the app, the window title, the URL and the on-screen text;
• input actions (clicks, typing) with a screenshot of each;
• audio, with a transcript, when the account’s policy turns it on.

Beeuni indexes the recordings into one timeline per person. You can rewatch any moment and search all of it. Capture v1 is raw capture: it records, uploads and indexes. It does no further processing.

Capture belongs to the Beeuni account (your organization), not to a project. One account has one Capture workspace: one switch and one policy. Devices sign in to the account.

Turn Capture on

A person with the capture.manage permission turns Capture on for the account. Account owners and admins have it. Capture is off by default. While it is off:

• recording and data routes answer 403 with code: "capture_disabled";
• a device cannot sign in or get storage credentials;
• Beeuni indexes nothing new.

Everything about Beeuni Capture lives under /capture in Beeuni. Open Beeuni Capture (command palette, or /capture), then Settings (owners and admins), and turn on Beeuni Capture for the organization. The same page holds the organization’s rules: what computers record, how long Beeuni keeps it, an account-wide pause and an optional notice.

From the API: PATCH /v1/accounts/<account_id>/capture with {"enabled": true}. From TypeScript: beeuni.capture.account(accountId).workspace.setEnabled(true).

Install Beeuni Capture

Beeuni Capture is its own app, installed apart from the Beeuni app. It runs in the background on Windows, macOS and Linux, shows an icon in the notification area (the menu bar on macOS), and records into one Beeuni account. A computer connects in one of two ways:

Download the installer for the computer: Windows (.msi), macOS (.pkg) or Linux (.deb).

Install a newer installer over the old one to update; the configuration stays.

To sign in with Beeuni:

1. Install Beeuni Capture and open it from the Beeuni Capture icon.
2. Choose Sign in with Beeuni…. The browser opens /capture/authorize with a code. Check that the code matches, then choose the account. Only accounts with Capture on are listed.
3. On macOS, grant the permissions when asked: Screen Recording for the screen, Accessibility and Input Monitoring for actions, Microphone for audio. Windows and Linux ask for none.

The computer records into the selected account as you and uploads finished items. You can revoke its access from Capture → Devices. Forgetting a time range on the device removes it from Beeuni too.

Link a computer to a person

Every computer is a device in Capture → Devices. A computer you signed in records for you. A computer IT enrolled with a personal token records for the member the token names. A computer IT enrolled with a company token records for the account, linked to no one. That is a normal state: link it to a person only when you want it in their timeline.

To link or change it, choose Link to a person… on the device (capture.manage). From then on the computer records for that person. What it recorded linked to no one moves to them within minutes; what it recorded for an earlier person stays theirs. From the API: PUT /v1/accounts/<account_id>/capture/devices/<device_id>/link with {"user_id": "<member>"}, or {"user_id": null} to unlink.

Only people with capture.read_all see a computer linked to no one. Every read of it writes capture.device_view to the audit log. An agent never reads it.

Who sees what

Access is Beeuni IAM. Capture has no roles of its own.

Account owners and admins have capture.read_all and capture.manage by default. To give either one to someone else, add it to a custom role (Account → Roles, area Capture). A Beeuni API key acts as the person who made it, with the same permissions.

Every read of another member’s data writes capture.member_view to the account’s audit log. An account-wide read (all devices, account search) writes capture.account_view. An agent’s read writes capture.agent_read. Turning Capture on or off writes capture.enable or capture.disable.

The policy

One policy applies to every device of the account:

• layers: screen, actions, audio (audio is off until someone turns it on);
• an account-wide pause;
• Screen frames: one frame every 0.5 to 10 s, and the resolution (720p to 4K). Left on Each computer decides, a computer uses its own (one frame every 2 s, 1440p). Set, every computer uses it and shows it locked. Clicks, typing and scrolling are recorded with their own screenshots at any interval; pick 1 s when screens change fast without input, such as live dashboards;
• how long Beeuni keeps recordings (remote_days);
• an optional notice: each person sees it once, and again when its text changes;
• Experimental → Privacy controls (off by default) shows two more: personal-data masking on the computer (each computer first downloads a ~1 GB model), and the apps and websites no computer records. Each computer skips those before it records, so they are never saved or uploaded; a person can add their own in Beeuni Capture but cannot remove these. Turning the switch off hides the controls; what is set keeps applying.

Each computer chooses how long it keeps recordings after uploading them (7 days by default).

Every device follows the account policy. A person cannot remove the exclusions set by an account admin.

A device records every connected display, the active one (the display with the focused window) first. Each display is its own recorded item; the timeline names the display of every item and frame.

Beeuni Capture API

Everything Capture records is readable with a Beeuni API key, from a script, a notebook, a BI tool or an agent.

Auth. Create a key in Beeuni (Settings → API keys) or with POST /v1/accounts/tokens. Send it as Authorization: Bearer beeuni_pat_….

Base URL. https://api.beeuni.ai/v1/accounts/<account_id>/capture. GET /v1/accounts lists your accounts.

Scoping. Every route reads your own data by default. With capture.read_all, pass user_id=<member> (audited as capture.member_view) or, where the route takes it, scope=account for every member (audited as capture.account_view). A device linked to no one is read by its device_id without user_id (capture.read_all, audited as capture.device_view); without that permission the same request returns only your own rows of it. A read outside your permissions answers 403 capture_forbidden. While Capture is off, recording and data routes answer 403 capture_disabled. The workspace endpoints remain available so an admin can turn Capture on.

Use GET /v1/accounts/<account_id>/members to look up names and emails for user_id values within your directory permissions. A member without member.read sees only their own entry. Listing all account members requires member.read; capture.read_all does not grant it.

Example:

curl -s -H "Authorization: Bearer $BEEUNI_API_KEY" \
  "https://api.beeuni.ai/v1/accounts/$ACCOUNT/capture/search?q=invoice&limit=5"

The TypeScript SDK wraps the same routes: beeuni.capture.account(accountId) (see SDK → reference).

Agents in a session

An agent in a member’s private session reads that member’s timeline through /v1/capture/me/search, /v1/capture/me/timeline and /v1/capture/me/frames/<frame_id>, or with beeuni capture search, timeline and frame. It reads only that person, in the session’s account. A trigger run or a shared session acts for no person and gets 403 capture_no_human.

Build on it

See SDK → reference (beeuni.capture) for the client surface and the React hooks.