---
title: "Serve Linphone remote provisioning XML for an extension (QR code target)."
method: GET
path: "/provisioning/extension"
tags: ["Extension"]
---

# Serve Linphone remote provisioning XML for an extension (QR code target).

`GET /provisioning/extension`

Returns Linphone lpconfig provisioning XML (`Content-Type: application/xml`) containing
the SIP account configuration for the extension bound to the given provisioning token.
This endpoint is the target of the QR code generated via
`POST /extensions/{id}/provisioning-token`; the Linphone mobile app fetches it when the
QR code is scanned.

This endpoint is unauthenticated. The provisioning token acts as proof of authorization.

Note: unlike the other endpoints in this specification, this endpoint is served at
`/provisioning/extension` WITHOUT the `/v1.0` prefix.

The `token` query parameter must be a 64-character lowercase hex string issued by
`POST /extensions/{id}/provisioning-token`. Tokens expire 10 minutes after issuance.
Any invalid, expired, or unknown token returns HTTP 400.

## Query parameters

- `token` string, required

## Response `200`

Linphone lpconfig provisioning XML rendered successfully.

## Other responses

- `400` — Token is missing, malformed, unknown, or expired (tokens expire after 10 minutes). All failure cases return the same empty 400 response.

---

[API](https://skmtc.net/voipbin/apis/voipbin-api.md) · [All operations](https://skmtc.net/voipbin/apis/voipbin-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/voipbin/voipbin-api/revisions/48dafc7da0a6/schema)