Supermeet

Video SDK

A video SDK that ships the secure mode with it.

The same SDKs our apps are built on. Your backend creates sessions and mints single-use join grants; your app joins, plays and — in secure mode — draws the invisible mark on every frame. Meetings, webinars and live classes, on Android, iPhone, iPad, Mac and the web, metered per participant-minute and viewer-minute.

  • Client SDKs: Android, iPhone, iPad, Mac, web
  • Host SDK for your backend
  • Secure mode inside the SDK
  • Metered per participant-minute

Why Supermeet

What you would otherwise build yourself.

Leaks trace to your app and the account

Register your app with its bundle id or package name, its signing-certificate digest and a minimum build; unregistered apps are refused, and you can revoke a registration. The mark carries the account, so a clip leaked from inside your app becomes a leak case that a person reviews before anyone is named.

Security & honest limits →

Host SDK for your backend

@supermeet/host-sdk for Node: sessions in your tenant, single-use join grants, app registration and webhook verification, with no runtime dependencies.

Roles decided on the server

A join grant fixes session, identity and role; the device never decides who may publish.

Broadcast sessions in your app

Webinars and live classes on the broadcast path — low-latency HLS through a content network — with secure playback and the per-viewer mark for Secure classes.

Signed webhooks

session.started, session.ended and participant.joined, HMAC-signed in the X-Supermeet-Signature header and checked with one call to verifyWebhook.

Metered, not seat-licensed

Usage is metered per participant-minute and viewer-minute; sandbox keys are there for building and testing.

How it works

Three calls to a session in your app.

01 · BACKEND

Create and start the session

host.sessions.create({ product: 'live_class' }) then sessions.start(); your tenant, your webhooks.

02 · GRANT

Mint a join grant per user

host.grants.mint({ session_id, identity, role }) — single-use and short-lived, two minutes by default.

03 · APP

Join, play, mark

Your app joins with the grant through SupermeetClient; secure playback loads the per-session key, and the render pass marks every frame before it is shown.

Platforms

The SDKs are given to registered developers; they are not published on public package registries.

  • Android (Kotlin): SupermeetClient, SecureWindow, PlayIntegrityAttestation, RealTimeSession, WatermarkEffect for Media3.
  • iPhone, iPad and Mac (Swift): SupermeetClient, SupermeetSecure (CaptureGuardShim, AppAttestClient), SecureVideoView with the Metal render pass, RealTimeSession.
  • Web (TypeScript): the control-plane client, the real-time data channel, the surfaces layout engine and the embeddable <supermeet-session> element — non-secure products only, by design.
  • Host (TypeScript for Node): @supermeet/host-sdk.

Obligations

Keep the capture guard enabled and the SDK unmodified, never put tokens or grants in URLs, register your apps and rotate keys through the developer endpoints, and tell participants that what they see is marked to their account. Full list →

Honest limits. A hostile integrator can weaken window-level protections in its own app; the mark is what traces a leak back to that app and the account. Prevention is best-effort per operating system; attribution is the aim, and the mark has been tested on synthetic video, not yet with a real camera.

Questions

Frequently asked

Is this like the Zoom Video SDK?
In shape, yes: embed video in your own app with your own UI. Supermeet's SDKs add the secure mode — attested join, secure playback, capture guard and the invisible per-participant mark — and broadcast sessions for webinars and live classes.
Which platforms are supported?
Android 8 or later, iPhone and iPad, the Mac (secure sessions need macOS 27 or later on Apple silicon) and the web (non-secure products only). React Native and Flutter wrappers are not offered.
How is usage billed?
Usage is metered per participant-minute and viewer-minute against your developer account; sandbox keys are there for testing.
Do I have to build the UI?
You can build your own UI on the client SDKs. On the web, the embeddable supermeet-session element gives you a ready-made session view.

Put video — and traceable sessions — in your app.

The SDKs and sandbox keys are given to registered developers.

Request developer access