Bosch Smart Home Camera — Python CLI Tool

Reverse-engineered Bosch Cloud API client for Bosch Smart Home cameras (Eyes Außenkamera, 360 Innenkamera, Gen1+Gen2). Live snapshots, live video stream (cloud + local LAN), privacy mode, light, notifications, pan control, intercom, camera sharing, automation rules, RCP protocol reads, and real-time event watching — all from the command line. No official API. No app needed after setup. v10.2.1

Disclaimer

This project is an independent, community-developed tool. It is not affiliated with, endorsed by, sponsored by, or in any way officially connected to Robert Bosch GmbH, Bosch Smart Home GmbH, or any of their subsidiaries or affiliates. "Bosch", "Bosch Smart Home", and related names and logos are registered trademarks of Robert Bosch GmbH.

This tool communicates with a reverse-engineered, undocumented, and unofficial API. The author(s) provide this software "as is", without warranty of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, or non-infringement.

By using this software, you agree that:

You use it entirely at your own risk.
The author(s) shall not be held liable for any direct, indirect, incidental, special, or consequential damages arising from the use of, or inability to use, this software — including but not limited to data loss, service disruption, account suspension, or device damage.
The API may be changed, restricted, or shut down by Bosch at any time without notice, which may render this tool non-functional.
You are solely responsible for ensuring your use complies with Bosch's Terms of Service and any applicable laws in your jurisdiction.
All rights and any legal recourse are expressly disclaimed by the author(s). Any use of this software is entirely your own responsibility.

Reverse engineering notice: The API was discovered solely for the purpose of achieving interoperability with the user's own devices and data, which is explicitly permitted under § 69e of the German Copyright Act (UrhG) and Article 6 of EU Directive 2009/24/EC on the legal protection of computer programs. No copy of Bosch's software was distributed. Only network protocol observations were used.

Features
Requirements
Quick Start
CLI Reference
What's New in v9.0.0
How It Works
Cloud API Reference
RCP Protocol — Low-Level Camera Reads
Undocumented API Endpoints (from iOS App Analysis)
Camera Models
Event Types
API Error Codes
Token Management
Config File Reference
Troubleshooting
Example: Event Monitoring & Automation
Known Limitations
Version History
Related

Features

Feature	Command
Camera status (ONLINE / OFFLINE)	`status`
Full camera info + live stream URLs	`info`
Latest event snapshot (motion-triggered JPEG)	`snapshot`
Live snapshot — current image, ~1.5 s	`liveshot`
Live stream — 30fps H.264 + AAC audio	`live`
Live stream in VLC	`live --vlc`
Live stream — high quality	`live --hq` or `live --quality high`
Live stream — low bandwidth	`live --quality low`
Live stream — select instance	`live --inst N`
Live stream LOCAL (LAN, TLS proxy)	`live --local [cam]`
Live stream LOCAL + best quality	`live --local --quality high [cam]`
Privacy mode — get/set via cloud API	`privacy [cam] [on\|off]`
Camera light — on/off via cloud API	`light [cam] [on\|off]`
Push notifications — on/off	`notifications [cam] [on\|off]`
Pan 360 camera	`pan [cam] [left\|center\|right\|<-120..120>]`
RCP reads via cloud proxy	`rcp [cam] <info\|clock\|snapshot\|alarms\|...>`
Real-time event watching	`watch [cam] [--interval N] [--duration N] [--snapshot]`
Real-time via FCM push (~2s)	`watch [cam] --push [--snapshot]`
Signal alerts with snapshot	`watch --signal http://signal:8080 --signal-sender +49... --signal-recipients +49...`
Motion detection — get/set	`motion [cam] [--enable\|--disable] [--sensitivity S]`
Audio alarm — get/set	`audio-alarm [cam] [--enable\|--disable] [--threshold N]`
Recording options — sound on/off	`recording [cam] [--sound-on\|--sound-off]`
Auto-follow — 360 camera motion tracking	`autofollow [cam] [on\|off]`
Intercom — listen to camera audio	`intercom [cam] [--duration N] [--speaker-level N]`
Siren — trigger acoustic alarm (360 only)	`siren [cam]`
Unread events count	`unread [cam]`
Push mode selection (auto/iOS/Android/polling)	`watch --push --push-mode auto\|ios\|android\|polling`
Privacy sound — audible privacy indicator	`privacy-sound [cam] [on\|off]`
Cloud automation rules	`rules [cam] [list\|add\|edit\|delete]`
Motion detection zones	`zones [cam] [list\|set\|clear]`
Privacy mask zones	`privacy-masks [cam] [list\|set\|clear]`
Lighting schedule	`lighting-schedule [cam] [set --on HH:MM --off HH:MM]`
Camera sharing with friends	`friends [list\|invite\|share\|unshare\|resend\|remove]`
Rename a camera	`rename [cam] "New Name"`
User profile management	`profile [--name\|--language]`
Account info & feature flags	`account`
Timestamp overlay — show/hide clock on video	`timestamp [cam] [on\|off]`
Notification type toggles	`notification-types [cam] [--set movement=on person=off]`
Automatic token via browser login	`get_token.py`
Silent token renewal / token fix	`token [fix\|browser]`

Prerequisites — Setting Up a New Camera

Before using this tool, your camera must be fully set up in the official Bosch Smart Camera app first.

Unbox and power on the camera
Open the Bosch Smart Camera app and follow the pairing wizard to add the camera to your account
Wait for the firmware update — new cameras typically receive a Zero-Day update during first setup. This can take up to 1 hour. The camera's LED blinks yellow/green during the update.
- Do not unplug or restart the camera during the update
- If the LED blink pattern doesn't change after 1 hour, leave the camera alone for up to 24 hours (Bosch Support)
- The app shows the update status — wait until it reports the camera as ready
Verify the camera works in the Bosch app — check live stream, settings, and notifications
Then use this CLI tool to control it (see Quick Start below)

For more help with camera setup, see:

Requirements

pip3 install requests
brew install ffmpeg          # macOS — provides ffplay for live video

Python 3.10+ required (uses str | None union type syntax).

Quick Start

1. First run

python3 bosch_camera.py

On first run the tool:

Creates bosch_config.json with empty defaults
Opens your browser for a one-time Bosch SingleKey ID login
Saves the refresh_token — all future logins are silent and automatic
Discovers all your cameras and saves them to config
Asks for the local IP of each camera (optional, press Enter to skip)
Opens the interactive menu

2. Interactive menu

Run without arguments to get the menu:

╔══════════════════════════════════════════════════════════╗
║        Bosch Smart Home Camera — Control Panel           ║
╚══════════════════════════════════════════════════════════╝

  1)  Camera status (ONLINE / OFFLINE)
  2)  Camera info (full details + stream URLs)
  3)  Latest event snapshot — Outdoor
  4)  Latest event snapshot — Indoor
  5)  Latest event snapshot — ALL cameras
  6)  Live snapshot — Outdoor  (remote/local)
  7)  Live snapshot — Indoor  (remote/local)
  8)  Live stream — Outdoor (ffplay, audio+video)
  9)  Live stream — Indoor (ffplay, audio+video)
  10) Live stream — Outdoor (VLC, audio+video)
  11) Live stream — Indoor (VLC, audio+video)
  ...
  0)  Exit

Press a number, the command runs, then press Enter to return to the menu.

CLI Reference

Status & Info

python3 bosch_camera.py status
python3 bosch_camera.py info               # full details + live stream URLs
python3 bosch_camera.py info --full        # also fetch firmware, motion, audio, ambient light, WiFi

Snapshots

python3 bosch_camera.py snapshot Outdoor          # latest motion-triggered JPEG
python3 bosch_camera.py liveshot Outdoor          # current live image (~1.5s)
python3 bosch_camera.py snapshot --live           # all cameras, live
python3 bosch_camera.py liveshot Outdoor --hq     # high-quality live snapshot

Live Stream — 30fps H.264 + AAC Audio

python3 bosch_camera.py live Outdoor              # opens in ffplay
python3 bosch_camera.py live Outdoor --vlc        # opens in VLC
python3 bosch_camera.py live Outdoor --hq         # request high-quality (highest bitrate tier)
python3 bosch_camera.py live Outdoor --inst 1     # use stream instance 1 instead of 2
python3 bosch_camera.py live Outdoor --quality high    # 30 Mbps stream (inst=1, highQualityVideo=true)
python3 bosch_camera.py live Outdoor --quality low     # low bandwidth (inst=4, ~1.9 Mbps)
python3 bosch_camera.py live Outdoor --quality auto    # default balanced (inst=2, ~7.5 Mbps)

Download Events

python3 bosch_camera.py download                  # all cameras
python3 bosch_camera.py download Outdoor
python3 bosch_camera.py download Outdoor --limit 50

Events

python3 bosch_camera.py events Outdoor --limit 20

Privacy Mode

python3 bosch_camera.py privacy                  # show all cameras' privacy state
python3 bosch_camera.py privacy Outdoor          # show one camera's privacy state
python3 bosch_camera.py privacy Outdoor on       # enable privacy mode (indefinite)
python3 bosch_camera.py privacy Outdoor on --minutes 30  # enable privacy for 30 minutes
python3 bosch_camera.py privacy Outdoor off      # disable privacy mode

Camera Light

python3 bosch_camera.py light                    # show light state (all cameras)
python3 bosch_camera.py light Outdoor            # show light state (one camera)
python3 bosch_camera.py light Outdoor on         # turn camera light on
python3 bosch_camera.py light Outdoor off        # turn camera light off

Push Notifications

python3 bosch_camera.py notifications                # show notification state (all)
python3 bosch_camera.py notifications Outdoor on     # enable notifications (FOLLOW_CAMERA_SCHEDULE)
python3 bosch_camera.py notifications Outdoor off    # disable notifications (ALWAYS_OFF)

Pan (CAMERA_360 Only)

python3 bosch_camera.py pan Indoor left          # pan to left limit
python3 bosch_camera.py pan Indoor center        # pan to center (0°)
python3 bosch_camera.py pan Indoor right         # pan to right limit
python3 bosch_camera.py pan Indoor 45            # pan to absolute position (degrees)

Motion Detection

python3 bosch_camera.py motion Outdoor            # show current settings
python3 bosch_camera.py motion Outdoor --enable   # enable motion detection
python3 bosch_camera.py motion Outdoor --disable  # disable motion detection
python3 bosch_camera.py motion Outdoor --enable --sensitivity SUPER_HIGH
python3 bosch_camera.py motion Outdoor --sensitivity MEDIUM

Audio Alarm

python3 bosch_camera.py audio-alarm Outdoor       # show current settings
python3 bosch_camera.py audio-alarm Outdoor --enable  # enable audio alarm
python3 bosch_camera.py audio-alarm Outdoor --disable # disable audio alarm
python3 bosch_camera.py audio-alarm Outdoor --enable --threshold 60

Recording Options

python3 bosch_camera.py recording Outdoor         # show current settings
python3 bosch_camera.py recording Outdoor --sound-on   # record with audio
python3 bosch_camera.py recording Outdoor --sound-off  # record without audio

Auto-Follow (CAMERA_360 Only)

python3 bosch_camera.py autofollow Indoor         # show current state
python3 bosch_camera.py autofollow Indoor on      # enable motion tracking
python3 bosch_camera.py autofollow Indoor off     # disable motion tracking

Intercom

python3 bosch_camera.py intercom Indoor          # listen for 60s (default)
python3 bosch_camera.py intercom Outdoor --duration 120    # listen for 2 minutes
python3 bosch_camera.py intercom Indoor --speaker-level 80 # set camera speaker volume

Siren (CAMERA_360 Only)

python3 bosch_camera.py siren Indoor             # trigger acoustic alarm

Unread Events

python3 bosch_camera.py unread                   # show unread count for all cameras
python3 bosch_camera.py unread Outdoor            # show unread count for one camera

Privacy Sound (CAMERA_360 Only)

python3 bosch_camera.py privacy-sound Indoor          # show current privacy sound state
python3 bosch_camera.py privacy-sound Indoor on       # enable audible indicator on privacy change
python3 bosch_camera.py privacy-sound Indoor off      # disable audible indicator

Returns HTTP 442 on outdoor cameras (not supported).

Rules — Cloud Automation

python3 bosch_camera.py rules Outdoor                 # list all automation rules
python3 bosch_camera.py rules Outdoor add             # add a new time-based rule
python3 bosch_camera.py rules Outdoor edit RULE_ID    # edit an existing rule
python3 bosch_camera.py rules Outdoor delete RULE_ID  # delete a rule

Friends — Camera Sharing

# Motion detection zones
python3 bosch_camera.py zones Outdoor                  # list current motion zones
python3 bosch_camera.py zones Outdoor set --json '[{"x":0.0,"y":0.3,"w":0.67,"h":0.7}]'  # set zones
python3 bosch_camera.py zones Outdoor clear            # remove all zones

# Privacy mask zones
python3 bosch_camera.py privacy-masks Outdoor          # list current privacy masks
python3 bosch_camera.py privacy-masks Outdoor set --json '[{"x":0.0,"y":0.0,"w":0.3,"h":0.3}]'
python3 bosch_camera.py privacy-masks Outdoor clear    # remove all masks

# Lighting schedule (outdoor cameras with LED)
python3 bosch_camera.py lighting-schedule Outdoor      # show current light schedule
python3 bosch_camera.py lighting-schedule Outdoor set --on 20:00 --off 06:00 --motion  # set schedule

python3 bosch_camera.py friends                       # list all shared contacts
python3 bosch_camera.py friends invite user@example.com  # invite a new friend
python3 bosch_camera.py friends share Outdoor FRIEND_ID  # share a camera with a friend
python3 bosch_camera.py friends unshare Outdoor FRIEND_ID # stop sharing a camera
python3 bosch_camera.py friends resend FRIEND_ID      # resend invitation email
python3 bosch_camera.py friends remove FRIEND_ID      # remove a friend

Rename

python3 bosch_camera.py rename Outdoor "Garden Camera"  # rename a camera via cloud API

Profile

python3 bosch_camera.py profile                       # show user profile (name, email, language)
python3 bosch_camera.py profile --name "New Name"     # update display name
python3 bosch_camera.py profile --language en          # change language preference

Account

python3 bosch_camera.py account                       # show feature flags, T&C versions, subscription status

RCP Protocol Reads

python3 bosch_camera.py rcp info                 # all cameras: product name, FQDN, LAN IP, MAC
python3 bosch_camera.py rcp Outdoor info         # identity for one camera
python3 bosch_camera.py rcp Outdoor clock        # real-time camera clock
python3 bosch_camera.py rcp Outdoor snapshot     # RCP JPEG thumbnail 160x90 — save + open
python3 bosch_camera.py rcp Outdoor alarms       # alarm catalog (UTF-16-BE strings)
python3 bosch_camera.py rcp Outdoor privacy      # privacy mask state read
python3 bosch_camera.py rcp Outdoor dimmer       # LED dimmer value 0-100
python3 bosch_camera.py rcp Outdoor motion       # motion zone count + coordinates
python3 bosch_camera.py rcp Outdoor services     # network services list
python3 bosch_camera.py rcp Outdoor frame        # raw video frame 320x180 YUV422 -> JPEG
python3 bosch_camera.py rcp Outdoor script       # IVA automation script (gzip -> text)
python3 bosch_camera.py rcp Outdoor iva          # IVA rule types + resiMotion config
python3 bosch_camera.py rcp Outdoor bitrate      # bitrate ladder tiers in kbps
python3 bosch_camera.py rcp Outdoor all          # run all RCP reads

Watch — Real-Time Event Monitoring

python3 bosch_camera.py watch                    # all cameras, poll every 30s
python3 bosch_camera.py watch Outdoor             # one camera
python3 bosch_camera.py watch Outdoor --interval 15  # poll every 15s
python3 bosch_camera.py watch --duration 600     # stop after 10 minutes
python3 bosch_camera.py watch --push --push-mode auto      # try iOS first, then Android, then polling
python3 bosch_camera.py watch --push --push-mode ios       # FCM push via iOS credentials
python3 bosch_camera.py watch --push --push-mode android   # FCM push via Android credentials
python3 bosch_camera.py watch --push --push-mode polling   # disable FCM, use periodic polling only

Token Management

python3 bosch_camera.py token                    # show token info + expiry
python3 bosch_camera.py token fix                # silent renewal via refresh_token
python3 bosch_camera.py token browser            # force new browser login

Config & Rescan

python3 bosch_camera.py config                   # show current config
python3 bosch_camera.py rescan                   # re-discover cameras

What's New in v9.0.0

TCP keep-alive on TLS proxy sockets All TLS proxy sockets now enable SO_KEEPALIVE with 10 s idle / 5 s interval / 3 probes — detects dead connections before the OS default timeout, preventing zombie proxy threads on LOCAL streams.

Directional select timeout Camera-to-client direction has no timeout (dark/still outdoor scenes produce sparse RTP packets — TCP keep-alive handles dead connection detection). Client-to-camera direction uses 120 s timeout (FFmpeg sends periodic RTCP/keepalive). Prevents false proxy teardown during low-bitrate nighttime streams.

v7.0.0

LOCAL LAN streaming with TLS proxy New live --local command streams directly from the camera over your local network — no cloud proxy needed. A built-in TLS proxy handles the camera's self-signed certificate and Digest authentication, which FFmpeg cannot process natively. Audio + video in HD quality (30 Mbps) by default on LAN.

Menu: Local stream entries + exit with "q" The interactive menu now includes "Live stream LOCAL" entries for each camera. Exit changed from "0" to "q".

Code cleanup Removed download and events commands (cloud event access removed). 123 lines of dead code cleaned up.

v5.2.0

Live stream session — up to 60 minutes The live stream (live command) now uses maxSessionDuration=3600, giving you a full 60-minute session before a reconnect is needed.

Previous Version History

What's New in v5.0.0

New privacy-sound command Show or toggle the audible privacy indicator on CAMERA_360 indoor cameras. When enabled, the camera plays a sound when privacy mode changes. Returns HTTP 442 on outdoor cameras (not supported).

New rules command Manage cloud-side camera automation rules (time-based schedules). Subcommands: list, add, edit, delete. Rules are stored in the Bosch cloud, not on the camera firmware.

New friends command Manage camera sharing with friends. Subcommands: list, invite, share, unshare, resend, remove. Uses the invitation-based sharing system discovered in the iOS app.

New rename command Rename a camera via the cloud API. The new name is reflected in the Bosch app and all API responses.

New profile command Show or edit user profile information: display name, email, language preference, marketing consent.

New account command Show account info including feature flags, Terms & Conditions versions, and subscription status.

HTTP 444 handling Proper handling of HTTP 444 responses (connection closed without response). Previously these caused unhandled exceptions; now they are caught and reported as transient errors with retry guidance.

What's New in v4.0.0

intercom command: listen to camera audio in real-time via cloud proxy RTSPS stream (listen-only, configurable duration + speaker volume)
siren command: trigger acoustic alarm on CAMERA_360 indoor camera (442 on outdoor)
unread command: show unread event count per camera
Person detection icon: PERSON_DETECTED events show a person icon in watch and events output
Mark-as-read: events auto-marked as read after download or push alert processing
--push-mode flag: select FCM push mode explicitly (auto/ios/android/polling)

What's New in v3.0.0

FCM push notifications (watch --push): real-time event detection via Firebase Cloud Messaging (~2s latency instead of 30s polling)
Signal messenger alerts: watch --signal sends snapshot + text to Signal via signal-cli-rest-api
Auto-follow command: get/set motion tracking on CAMERA_360
Fixed motion sensitivity enum: corrected DISABLED → OFF in PUT payload
Firebase API keys base64-encoded in source (public Bosch app keys, not personal)

What's New in v2.0.0

Code cleanup: removed dead code, consolidated helper functions, unified error handling

What's New in v1.9.0

Push notification architecture documented from APK analysis

What's New in v1.8.0

RCP session caching: 2-step handshake cached per proxy connection (5-min TTL)
watch --snapshot: auto-downloads event JPEG on new events
rcp snapshot resolution fix: reads 0x0a88 for actual resolution

What's New in v1.7.0

--quality flag: auto (default, ~7.5 Mbps), high (~30 Mbps), low (~1.9 Mbps)

What's New in v1.6.0

watch command: real-time event polling with --interval and --duration
motion command: get/set motion detection + sensitivity
audio-alarm command: get/set audio alarm + threshold
recording command: get/set cloud recording sound on/off

What's New in v1.5.0

maxSessionDuration 60 → 3600s, --hq flag, --inst N flag, rcp bitrate

What's New in v1.4.0

rcp frame (YUV422 → JPEG), rcp script (IVA automation), rcp iva (rule types)

What's New in v1.3.0

rcp command: low-level RCP protocol reads via cloud proxy

What's New in v1.2.0

info --full, privacy on --minutes N, WiFi info, proxy 404 retry, 3-state notifications

What's New in v1.1.0

light, privacy, notifications, pan commands, auto token renewal, interactive menu

How It Works

System Overview

┌─────────────┐    Bearer JWT     ┌──────────────────────────────┐
│  This tool  │ ────────────────► │  Bosch Cloud API             │
│  (Python)   │                   │  residential.cbs.bosch       │
└─────────────┘                   │  security.com                │
                                  └──────────────┬───────────────┘
                                                 │
                                  ┌──────────────▼───────────────┐
                                  │  Proxy Server (live only)    │
                                  │  proxy-NN.live.cbs.bosch     │
                                  │  security.com:42090          │
                                  └──────────────┬───────────────┘
                                                 │
                                  ┌──────────────▼───────────────┐
                                  │  Camera (via SHC)            │
                                  │  Bosch CAMERA_EYES / 360     │
                                  └──────────────────────────────┘

All camera access goes through the Bosch Cloud — there is no supported direct local API. The Smart Home Controller (SHC) bridges the camera to the cloud.

Authentication — Bearer JWT Token

The API uses OAuth2 with JWT Bearer tokens issued by Bosch's Keycloak server.

Token properties:

Issuer: smarthome.authz.bosch.com
Audience: https://residential.cbs.boschsecurity.com/app
Client ID: oss_residential_app
Lifetime: ~1 hour
Refresh token scope: offline_access → lasts very long (months)

Login flow (PKCE + client_secret):

1. Script generates code_verifier + code_challenge (SHA256, S256)
2. Browser opens:
   https://smarthome.authz.bosch.com/auth/realms/home_auth_provider/
   protocol/openid-connect/auth?client_id=oss_residential_app&
   response_type=code&scope=email+offline_access+profile+openid&
   redirect_uri=https://www.bosch.com/boschcam&
   code_challenge=...&code_challenge_method=S256
3. User logs in with SingleKey ID
4. Browser redirects to https://www.bosch.com/boschcam?code=...
   (shows a 404 page — that's expected)
5. User pastes the full URL into the terminal
6. Script extracts the code and POSTs to the token endpoint:
   POST /protocol/openid-connect/token
   grant_type=authorization_code&code=...&
   client_secret=...&code_verifier=...
7. Response: {access_token, refresh_token, expires_in}
8. Both tokens saved to bosch_config.json

Silent renewal (subsequent runs):

POST /protocol/openid-connect/token
grant_type=refresh_token&refresh_token={saved_token}&client_secret=...
→ New access_token + rotated refresh_token

All of this is handled automatically by get_token.py, which is imported and called by bosch_camera.py on startup when the saved token is missing.

Event Snapshots (motion-triggered)

Every time a camera detects motion, the Bosch backend stores:

A JPEG snapshot
An MP4 video clip (uploaded asynchronously, status: "Done" when ready)

GET /v11/events?videoInputId={camera-uuid}&limit=400
Authorization: Bearer {token}

Response (array):

[
  {
    "id": "abc123",
    "timestamp": "2026-03-19T12:00:00.000Z",
    "eventType": "MOTION_DETECTED",
    "imageUrl": "https://residential.cbs.boschsecurity.com/v11/events/abc123/snap.jpg",
    "videoClipUrl": "https://residential.cbs.boschsecurity.com/v11/events/abc123/clip.mp4",
    "videoClipUploadStatus": "Done"
  }
]

Both imageUrl and videoClipUrl are authenticated with the same Bearer token and downloaded directly. Files are named YYYY-MM-DD_HH-MM-SS_{type}_{id}.jpg/mp4.

Video clip re-request: If a clip has status Unavailable or was not generated, you can re-request it via POST /v11/events/{eventId}/clip_request. This tells the camera to re-upload the clip from its local storage (if still available). The clip status will change to Pending while uploading. Error -353 means the clip cannot be requested (too old or camera has overwritten the local recording).

Live Snapshot — Current Image

To get the current camera image (not the last motion event), the tool opens a live proxy connection:

PUT /v11/video_inputs/{camera-uuid}/connection
Authorization: Bearer {token}
Content-Type: application/json

{"type": "REMOTE"}

Response:

{
  "bufferingTime": 1000,
  "user": null,
  "password": null,
  "urls": ["proxy-20.live.cbs.boschsecurity.com:42090/{hash}"],
  "imageUrlScheme":  "https://{url}/snap.jpg",
  "videoUrlScheme":  "rtsp://{url}/rtsp_tunnel?inst=1&enableaudio=1&fmtp=1&maxSessionDuration=60",
  "httpsUrlScheme":  "https://{url}/",
  "rtspUrl": null
}

Replace {url} with urls[0] to get the live snap URL:

https://proxy-20.live.cbs.boschsecurity.com:42090/{hash}/snap.jpg

This URL requires no authentication — the session hash is the credential. It returns a full 1920x1080 JPEG of the current camera view.

The proxy session expires after ~60 seconds. A new PUT /connection opens a new session.

Connection types:

Type	URL returns	Auth for snap	Speed
`REMOTE`	Cloud proxy host:port/hash	None (hash = credential)	~1.5 s
`LOCAL`	Camera LAN IP:443	HTTP Digest (user/password in response)	~15 s

REMOTE is always faster. LOCAL is only useful as a fallback if the cloud is unreachable.

Live Video Stream — 30fps + Audio

Key discovery: The proxy exposes two ports:

Port 42090 — HTTP only (snap.jpg, video-only ~1fps fallback)
Port 443 — RTSP/1.0 over TLS (rtsps://) — full 30fps H.264 + AAC audio

URL from PUT /connection REMOTE → urls[0] = proxy-NN:42090/{hash}: replace port 42090 → 443, use rtsps:// scheme.

Default: ffplay (opened in a window, live command):

ffplay -rtsp_transport tcp -tls_verify 0 \
  "rtsps://proxy-NN.live.cbs.boschsecurity.com:443/{hash}/rtsp_tunnel?inst=2&enableaudio=1&fmtp=1&maxSessionDuration=3600"

VLC option (live --vlc): VLC can't skip TLS cert verification, so the tool pipes via ffmpeg:

ffmpeg (pulls rtsps:// with -tls_verify 0) → mpegts stdout → VLC stdin (-)

Stream specs: H.264 Main 1920x1080 30fps + AAC-LC 16kHz mono ~48kbps

No auth needed — the session hash is the credential. Session lasts ~60s.

Download

GET /v11/events?videoInputId={id}&limit=400

The tool iterates all events and downloads:

snap.jpg for each event with imageUrl

Already-downloaded files are skipped (by filename). Rate-limited to 0.5 s between requests to avoid API throttling.

Cloud API Reference

Base URL:  https://residential.cbs.boschsecurity.com
Auth:      Authorization: Bearer {token}
SSL:       Use verify=False — Bosch uses a private root CA not in the system store

All endpoints below use {id} to refer to the camera UUID (e.g. xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx). HTTP 442 means "feature not supported on this camera model."

Camera Management

Method	Path	Description
`GET`	`/v11/video_inputs`	List all cameras (id, title, model, firmware, mac, privacyMode)
`GET`	`/v11/video_inputs/{id}`	Single camera details (same shape as list entry)
`GET`	`/v11/video_inputs/{id}/ping`	Camera online status — returns `"ONLINE"` or `"OFFLINE"`
`PUT`	`/v11/video_inputs/{id}/connection`	Open live proxy session (body: `{"type": "REMOTE"}` or `{"type": "LOCAL"}`)
`GET`	`/v11/video_inputs/{id}/commissioned`	Current proxy connection info (read-only, no session opened)
`PUT`	`/v11/video_inputs/order`	Reorder cameras in the app
`POST`	`/v11/video_inputs`	Commission / add a new camera

Privacy & Security

Method	Path	Description
`GET/PUT`	`/v11/video_inputs/{id}/privacy`	Privacy mode ON/OFF (`{"privacyMode": "ON", "durationInSeconds": null}`)
`GET`	`/v11/video_inputs/{id}/privacy_masks`	Privacy mask zones (pixel regions hidden from recording)
`GET/POST`	`/v11/video_inputs/{id}/motion_sensitive_areas`	Motion detection zones (normalized 0.0–1.0 coordinates)
`GET/PUT/DELETE`	`/v11/video_inputs/{id}/motion_sensitive_areas/{zoneId}`	Individual motion zone
`GET`	`/v11/video_inputs/{id}/sensitive_polygon_zones`	Polygon-based detection zones (Gen2 cameras)
`GET/PUT/DELETE`	`/v11/video_inputs/{id}/sensitive_polygon_zones/{zoneId}`	Individual polygon zone
`GET/POST`	`/v11/video_inputs/{id}/private_areas`	Private area zones (Gen2 cameras)
`GET/PUT`	`/v11/video_inputs/{id}/intrusion_detection`	Intrusion detection config (Gen2 cameras)

Motion & Audio Detection

Method	Path	Description
`GET/PUT`	`/v11/video_inputs/{id}/motion`	Motion detection config — `enabled` (bool), `motionAlarmConfiguration`: `OFF` / `LOW` / `MEDIUM_LOW` / `MEDIUM_HIGH` / `HIGH` / `SUPER_HIGH`
`GET/PUT`	`/v11/video_inputs/{id}/audioAlarm`	Audio alarm — `enabled` (bool), `threshold` (dB 0–100), config: `OFF` or `CUSTOM`
`GET/PUT`	`/v11/video_inputs/{id}/audio`	Audio settings — `audioEnabled` (bool), `SpeakerLevel` (0–100)
`GET/PUT`	`/v11/video_inputs/{id}/audio_detection_config`	Advanced audio detection config (Gen2 cameras)
`GET/PUT`	`/v11/video_inputs/{id}/audio_event_config`	Audio event config — glass break / smoke detection (Gen2 / Audio+ subscription)

Camera Controls

Method	Path	Description
`GET/PUT`	`/v11/video_inputs/{id}/pan`	Pan position ±120° — `absolutePosition` (360 camera only, 442 on outdoor)
`GET/PUT`	`/v11/video_inputs/{id}/autofollow`	Auto-follow motion tracking — `{"result": true/false}` (360 camera only, 442 on outdoor)
`GET/PUT`	`/v11/video_inputs/{id}/recording_options`	Recording options — `recordSound` on/off
`PUT`	`/v11/video_inputs/{id}/enable_notifications`	Set notification schedule — `FOLLOW_CAMERA_SCHEDULE` / `ALWAYS_OFF`
`GET/PUT`	`/v11/video_inputs/{id}/notifications`	Per-type notification toggles: trouble, movement, person, audio, cameraAlarm
`GET/PUT`	`/v11/video_inputs/{id}/lens_elevation`	Lens elevation angle (Gen2 cameras)
`GET/PUT`	`/v11/video_inputs/{id}/mounting_height`	Mounting height config (Gen2 cameras)
`GET/PUT`	`/v11/video_inputs/{id}/timestamp`	Time/date overlay on video
`GET/PUT`	`/v11/video_inputs/{id}/privacy_sound`	Audible privacy mode indicator
`PUT`	`/v11/video_inputs/{id}/acoustic_alarm`	Trigger siren / acoustic alarm

Lighting (Outdoor Camera)

Method	Path	Description
`PUT`	`/v11/video_inputs/{id}/lighting_override`	Manual light on/off — `frontLightOn`, `wallwasherOn`, `frontLightIntensity` (0.0–1.0)
`GET/PUT`	`/v11/video_inputs/{id}/lighting_options`	Light schedule config (time-based on/off)
`GET`	`/v11/video_inputs/{id}/ambient_light_sensor_level`	Ambient light sensor reading (%)
`GET/PUT`	`/v11/video_inputs/{id}/ambient_light`	Ambient light detection config
`GET/PUT`	`/v11/video_inputs/{id}/general_light`	General (always-on) light config
`GET/PUT`	`/v11/video_inputs/{id}/motion_light`	Motion-triggered light config
`PUT`	`/v11/video_inputs/{id}/front_light_switch`	Front light toggle
`PUT`	`/v11/video_inputs/{id}/top_down_light_switch`	Top-down (wallwasher) light toggle
`GET`	`/v11/video_inputs/{id}/switches_lights`	All light switch states

All lighting endpoints return HTTP 442 on the 360 indoor camera.

Camera Settings & Diagnostics

Method	Path	Description
`GET/PUT`	`/v11/video_inputs/{id}/led_brightness`	Power LED brightness level
`GET`	`/v11/video_inputs/{id}/leds_lighting`	LED lighting state
`GET`	`/v11/video_inputs/{id}/credentials`	Camera credentials (local access)
`GET`	`/v11/video_inputs/{id}/smart_home_integration`	SHC integration status
`DELETE`	`/v11/video_inputs/{id}/smart_home_integration`	Unpair camera from SHC
`PUT`	`/v11/video_inputs/{id}/hard_reset`	Factory reset camera
`PUT`	`/v11/video_inputs/{id}/soft_reset`	Soft reset camera

Events & Clips

Method	Path	Description
`GET`	`/v11/events?videoInputId={id}&limit=N`	Event list for a camera (JPEG + clip URLs, timestamps, types)
`GET`	`/v11/events/{eventId}`	Single event details
`PUT`	`/v11/events/bulk`	Batch update events (mark as read, toggle favorite)
`POST`	`/v11/events/{eventId}/clip_request`	Re-request video clip — tells camera to re-upload clip from local storage
`GET`	`/v11/events/{eventId}/snap`	Event snapshot JPEG (direct download)
`GET`	`/v11/video_inputs/{id}/last_event`	Latest event for a camera (fast-path)
`GET`	`/v11/video_inputs/{id}/unread_events_count`	Unread event count

Firmware & WiFi

Method	Path	Description
`GET`	`/v11/video_inputs/{id}/firmware`	Firmware version + T&C info
`GET`	`/v11/video_inputs/{id}/firmware/info`	Extended firmware info with changelog
`GET`	`/v11/video_inputs/{id}/wifiinfo`	SSID, signal strength, local IP, MAC address
`GET`	`/v11/video_inputs/{id}/wifi_strength`	Signal strength only

User & Account

Method	Path	Description
`POST`	`/v11/devices`	Register FCM push token (`{"deviceType": "ANDROID", "deviceToken": "..."}`)
`GET`	`/v11/registration/check`	Logged-in user info + token expiration time
`GET`	`/v11/users/check`	Registration status check
`POST`	`/v11/users/logout`	Logout current session
`POST`	`/v11/users/logout_all`	Logout all devices
`DELETE`	`/v11/users`	Delete account
`GET`	`/v11/purchases`	Subscription / purchase status
`POST`	`/v11/purchases/receipt`	iOS receipt validation
`GET`	`/v11/contracts?locale=de_DE`	Terms & conditions + privacy policy URLs
`GET/PUT`	`/v11/users/contracts`	User contract management
`GET`	`/v11/features`	Feature flags for the account
`GET`	`/v11/feature_flags`	Feature flags (alternate endpoint)

Camera Sharing (Friends)

Method	Path	Description
`GET`	`/v11/friends`	List shared camera contacts
`GET/PUT/DELETE`	`/v11/friends/{friendId}`	Manage individual friend
`POST`	`/v11/friends/accept`	Accept a sharing invitation
`POST`	`/v11/friends/{friendId}/resend`	Resend sharing invitation
`GET`	`/v11/video_inputs/{id}/shared_with_friends`	Camera sharing status

Automation Rules

Method	Path	Description
`GET`	`/v11/video_inputs/{id}/rules`	List automation rules for a camera
`GET/PUT/DELETE`	`/v11/video_inputs/{id}/rules/{ruleId}`	Manage individual rule

Alexa Integration

Method	Path	Description
`GET`	`/v11/alexa/app_url`	Alexa app URL
`GET`	`/v11/alexa/status`	Alexa link status
`POST`	`/v11/alexa/link`	Link camera to Alexa
`DELETE`	`/v11/alexa/link`	Unlink camera from Alexa

System & Maintenance

Method	Path	Description
`GET`	`/v11/protocol_support`	Protocol version support check
`GET`	`/v11/maintenance`	Backend maintenance status
`GET`	`/v11/state/pre-maintenance`	Server pre-maintenance mode check
`GET`	`/v11/support`	Support info
`GET`	`/v11/support/mail`	Support email address
`POST`	`/v11/logging`	Remote logging (diagnostic uploads)

Live Stream URLs (from PUT /connection response)

After PUT /v11/video_inputs/{id}/connection, the response contains proxy URLs:

# Snapshot — no auth needed, hash is the credential
https://proxy-NN.live.cbs.boschsecurity.com:42090/{hash}/snap.jpg

# Smaller snapshot (1206px wide)
https://proxy-NN.live.cbs.boschsecurity.com:42090/{hash}/snap.jpg?JpegSize=1206

# Live RTSPS stream — 30fps H.264 1920x1080 + AAC-LC 16kHz mono
rtsps://proxy-NN.live.cbs.boschsecurity.com:443/{hash}/rtsp_tunnel?inst=2&enableaudio=1&fmtp=1&maxSessionDuration=3600

# RCP protocol tunnel
https://proxy-NN.live.cbs.boschsecurity.com:42090/{hash}/rcp.xml

Port 443 for RTSPS (not 42090). No auth needed — the hash IS the credential. Session lasts ~60 seconds.

Push Notification Modes (FCM)

The Bosch Smart Camera app uses Firebase Cloud Messaging for push notifications. Both Android and iOS credentials work with the same Firebase project.

Mode	App ID	Project
Android	`1:404630424405:android:9e5b6b58e4c70075`	`bosch-smart-cameras`
iOS	`1:404630424405:ios:715aae2570e39faad9bddc`	`bosch-smart-cameras`

GCM Sender ID: 404630424405
API keys: Base64-encoded in the source code (public Bosch app keys, not personal)
Auto mode: Tries iOS credentials first, then Android, then falls back to polling
Push flow: Camera → CBS cloud → Firebase FCM → silent push → app/tool polls GET /v11/events
Latency: ~2–3 seconds from camera trigger to push delivery

iOS push payload keys:

IOSPayloadEventId — event identifier
IOSPayloadEventType — event type (MOVEMENT, AUDIO_ALARM, PERSON, GLASS_BREAK, etc.)
IOSPayloadVideoId — camera/video input ID
IsSilentMessage — silent push (triggers background fetch)

Endpoint Availability by Camera Model

Endpoint	Outdoor (CAMERA_EYES)	Indoor (CAMERA_360)
`/autofollow`	442	read/write
`/pan`	442	read/write
`/lighting_override`, `/lighting_options`	read/write	442
`/ambient_light_sensor_level`	read	442
`/front_light_switch`, `/top_down_light_switch`	write	442
`/acoustic_alarm`	442	write
All other endpoints	read/write	read/write

HTTP 442 = feature not supported on this camera model.

Privacy Mode

GET  /v11/video_inputs/{id}/privacy
→ {"privacyMode": "ON"} or {"privacyMode": "OFF"}

PUT  /v11/video_inputs/{id}/privacy
Content-Type: application/json
{"privacyMode": "ON", "durationInSeconds": null}
→ HTTP 204 No Content on success

Also available from the GET /v11/video_inputs response — each camera object includes a top-level "privacyMode" field, so no extra poll is needed for status.

Camera Light Override

GET  /v11/video_inputs/{id}/lighting_override
→ {"frontLightOn": false, "wallwasherOn": false}

PUT  /v11/video_inputs/{id}/lighting_override
Content-Type: application/json

# Turn on:
{"frontLightOn": true, "wallwasherOn": true, "frontLightIntensity": 1.0}

# Turn off:
{"frontLightOn": false, "wallwasherOn": false}
→ HTTP 204 No Content on success

Notifications

PUT  /v11/video_inputs/{id}/enable_notifications
Content-Type: application/json

# Disable all notifications:
{"enabledNotificationsStatus": "ALWAYS_OFF"}

# Follow the camera schedule:
{"enabledNotificationsStatus": "FOLLOW_CAMERA_SCHEDULE"}
→ HTTP 204 No Content on success

RCP Protocol — Low-Level Camera Reads

After a REMOTE proxy connection is opened (PUT /connection), the same proxy hash also exposes the camera's RCP (Remote Configuration Protocol) endpoint at:

https://proxy-NN.live.cbs.boschsecurity.com:42090/{hash}/rcp.xml

RCP is Bosch's proprietary binary protocol used internally for low-level camera configuration. All payloads are hex-encoded in the URL query string. Responses are XML containing a <str>HEX</str> field with the result bytes.

Session handshake:

# Step 1: HELLO (0xff0c WRITE P_OCTET) — initiates session, returns sessionid
GET /rcp.xml?command=0xff0c&direction=WRITE&type=P_OCTET&payload=0102004000...

# Step 2: SESSION_INIT (0xff0d WRITE P_OCTET) — activates the session
GET /rcp.xml?command=0xff0d&direction=WRITE&type=P_OCTET&sessionid=0xXXXXXXXX&payload=...

Basic auth empty:empty is used (the proxy hash is the real credential). Auth level via cloud proxy = 3 (viewer) — read-only. Writes require auth level 5 (service account), which is not accessible via the cloud proxy.

893 accessible RCP commands at auth level 3. Most useful reads:

Command	Type	Description
`0x099e`	P_OCTET	JPEG thumbnail snapshot (160x90)
`0x0a0f`	P_OCTET	Camera real-time clock (8 bytes: YYYY MM DD HH MM SS DOW)
`0x0aea`	P_OCTET	Product name (null-terminated ASCII)
`0x0aee`	P_OCTET	Cloud FQDN (null-terminated ASCII)
`0x0a36`	P_OCTET	LAN IP address (4-byte big-endian)
`0x0a30`	P_OCTET	MAC address (6 bytes)
`0x0d00`	P_OCTET	Privacy mask state (byte[1]: 0=off, 1=on)
`0x0c22`	T_WORD	LED dimmer value (0-100)
`0x0c0a`	P_OCTET	Motion zones (8 bytes each: x1 y1 x2 y2 in 0-10000 coords)
`0x0c38`	P_OCTET	Alarm catalog (UTF-16-BE encoded string list)
`0x0c62`	P_OCTET	Network services list (null-separated ASCII)
`0x0c98`	P_OCTET	Live raw video frame 320x180 YUV422 (115,200 bytes)
`0x09f3`	P_OCTET	IVA automation script (gzip-compressed Bosch scripting language)
`0x0ba9`	P_OCTET	IVA rule type names (null-separated ASCII)
`0x0a1b`	P_OCTET	resiMotion config (polygon coordinates + sensitivity parameters)
`0x0c81`	P_OCTET	Bitrate ladder (1875, 3750, 7500, 15000, 30000 kbps)
`0x00bc`	P_OCTET	MAC address (alternative)
`0x0a33`	P_OCTET	HTTP port
`0x0a37`	P_OCTET	Network interface config
`0x0a88`	P_OCTET	Snapshot resolution config
`0x0b78`	P_OCTET	Video encoder config
`0x0b8f`	P_OCTET	Bitrate config (max 2.68 Mbps)
`0x0b91`	P_OCTET	Camera TLS certificate (455B DER X.509)
`0x0bdc`	P_OCTET	User account list (service, live, CBS cloud accounts)
`0x0bed`	P_OCTET	Crypto capabilities
`0x0c75`	P_OCTET	CBS endpoint URL
`0x0ca7`	P_OCTET	Video thumbnail resolution
`0x0987`	P_OCTET	DST transition table (20 entries)
`0x0b60`	P_OCTET	IVA analytics module catalog (65 entries)
`0xff00`	P_OCTET	RCP protocol version (1.2.9.225)
`0xff10`	P_OCTET	Capability list
`0xff12`	P_OCTET	Full command manifest (893 IDs)

Note: The rcp snapshot subcommand (0x099e) returns a small 160x90 JPEG thumbnail directly from the camera's firmware — distinct from the cloud proxy snap.jpg which is a full 1920x1080 image.

Undocumented API Endpoints (from iOS App Analysis)

The following endpoints were discovered by analyzing the Bosch Smart Camera iOS app v2.11.2 (Xamarin.iOS / .NET 9.0 AOT). These are not documented by Bosch and may require Gen2 cameras or specific subscription tiers.

Gen2 Camera Features

Endpoint	Description
`GET/PUT /v11/video_inputs/{id}/lens_elevation`	Adjust camera viewing angle
`GET/PUT /v11/video_inputs/{id}/mounting_height`	Camera height calibration
`GET/PUT /v11/video_inputs/{id}/privacy_sound`	Audible indicator when privacy mode changes
`GET/PUT /v11/video_inputs/{id}/timestamp`	Time/date overlay on video stream
`GET/PUT /v11/video_inputs/{id}/intrusion_detection`	Intrusion detection zones
`GET /v11/video_inputs/{id}/sensitive_polygon_zones`	Polygon-based detection zones
`GET/PUT /v11/video_inputs/{id}/audio_detection_config`	Advanced audio detection
`GET/PUT /v11/video_inputs/{id}/audio_event_config`	Glass break + smoke detection config

Audio+ Subscription Features

Feature	Event Type	Description
Glass break detection	`GLASS_BREAK`	AI-based glass breakage detection
Smoke/CO alarm detection	`SmokeAlarm`	Smoke or carbon monoxide alarm sound detection
Person detection	`PERSON` / `PERSON_DETECTED`	AI-based person classification (distinct from motion)
Pre-alarm mode	—	Escalating alerts before main alarm triggers

Two-Way Audio (Intercom)

The iOS app implements full bidirectional audio:

Push-to-talk button with keep-alive heartbeat
Speaker level control (0–100)
Microphone level control
Audio routed via the same cloud proxy media tunnel

Currently, the CLI tool supports listen-only via RTSPS. Two-way talk (microphone → camera) requires the proprietary media tunnel protocol.

Camera Wake (SocketKnocker / TinyOn)

Gen2 cameras support a low-power standby mode. The SocketKnocker / TinyOn mechanism sends a network packet to wake the camera from sleep. This is handled automatically by the Bosch app but is not yet reverse-engineered for CLI use.

Camera Sharing System

Full invitation-based sharing discovered in the iOS app:

GET    /v11/friends                          — list all shared contacts
GET    /v11/friends/{friendId}               — friend details
PUT    /v11/friends/{friendId}               — update friend permissions
DELETE /v11/friends/{friendId}               — remove friend
POST   /v11/friends/accept                   — accept sharing invitation
POST   /v11/friends/{friendId}/resend        — resend invitation email
GET    /v11/video_inputs/{id}/shared_with_friends — camera sharing status

Automation Rules Engine

Time-based automation rules can be created per camera:

GET    /v11/video_inputs/{id}/rules          — list rules
GET    /v11/video_inputs/{id}/rules/{ruleId} — rule details
PUT    /v11/video_inputs/{id}/rules/{ruleId} — update rule
DELETE /v11/video_inputs/{id}/rules/{ruleId} — delete rule

Additional Light Controls (Gen2 Outdoor)

Endpoint	Description
`PUT /v11/video_inputs/{id}/front_light_switch`	Direct front light toggle
`PUT /v11/video_inputs/{id}/top_down_light_switch`	Direct wallwasher toggle
`GET /v11/video_inputs/{id}/switches_lights`	All light switch states
`GET/PUT /v11/video_inputs/{id}/general_light`	Always-on light config
`GET/PUT /v11/video_inputs/{id}/motion_light`	Motion-triggered light config
`GET/PUT /v11/video_inputs/{id}/ambient_light`	Ambient light detection settings

Gen2 outdoor cameras also support color picker and softline fading for lights.

Alexa Integration

GET    /v11/alexa/app_url                    — Alexa skill URL
GET    /v11/alexa/status                     — link status
POST   /v11/alexa/link                       — link camera to Alexa
DELETE /v11/alexa/link                       — unlink from Alexa

Camera Models

Gen1 (fully supported)

Model ID	Type	Name
`CAMERA_EYES`	Outdoor	Bosch Smart Home Eyes Outdoor Camera
`CAMERA_360`	Indoor	Bosch Smart Home 360° Indoor Camera

Gen2 (supported since v9.0.0)

Model ID	Type	Name
`EyesIndoor2Camera`	Indoor	Bosch Smart Home Eyes Indoor Camera II
`EyesOutdoor2Camera`	Outdoor	Bosch Smart Home Eyes Outdoor Camera II

SHC Integration Variants

Model ID	Type	Description
`HOME_Eyes_Indoor`	Indoor	Camera paired via Smart Home Controller
`HOME_Eyes_Outdoor`	Outdoor	Camera paired via Smart Home Controller

Gen2 cameras use a separate SSL certificate chain from Gen1. The iOS app includes both Gen1 (BoschStRootCAPem) and Gen2 (CbsRoot2ndGenCertPem) root certificates.

Event Types

Event Type	Description	Detection
`MOVEMENT`	Generic motion detected	Built-in motion sensor
`MOTION_DETECTED`	Motion detected (alternate name)	Built-in motion sensor
`PERSON_DETECTED` / `PERSON`	Person specifically detected	AI-based (may require subscription)
`AUDIO_ALARM`	Audio threshold exceeded	Built-in microphone
`GLASS_BREAK`	Glass breakage sound detected	Audio+ subscription
`SmokeAlarm` / `Smoke`	Smoke/CO alarm sound detected	Audio+ subscription
`CAMERA_ALARM`	Camera-triggered alarm	Siren / acoustic alarm
`TROUBLE_CONNECT`	Camera came online	System
`TROUBLE_DISCONNECT`	Camera went offline	System
`TROUBLE_RECORDING_ON`	Recording started	System
`TROUBLE_RECORDING_OFF`	Recording stopped	System

API Error Codes

Code	Meaning
`-101`	Not logged in / invalid token
`-102`	Invalid authorization code
`-103`	Invalid / stale refresh token
`-200`	Unknown RCP error
`-201`	Camera audio back / auth error
`-304`	General internal server error
`-306`	Camera offline
`-307`	Too many requests (rate limited)
`-311`	Camera unauthorized
`-333`	Response challenge failed
`-350`	Camera URL not available
`-351`	Camera busy (another audio/video session active)
`-352`	CIAM (identity provider) internal error
`-353`	Event clip cannot be requested (recording overwritten or too old)
`-700`	Local connection failed → automatic fallback to Internet

Token Management

Automatic (recommended)

python3 get_token.py           # first login → browser → saves refresh_token
python3 get_token.py --refresh # force silent renewal via saved refresh_token
python3 get_token.py --show    # show token info + expiry time
python3 get_token.py --browser # force new browser login (if refresh expired)

After the first login, bosch_camera.py renews the token automatically on every run — no browser, no user interaction.

Manual (mitmproxy fallback)

If the browser login flow fails, you can capture a token directly from the Bosch Smart Home Camera app using mitmproxy:

Install: pip3 install mitmproxy
Find your Mac's local IP: ipconfig getifaddr en0

Start the proxy:

mitmdump --listen-host YOUR_MAC_IP --listen-port 8890

On your iPhone: Settings → WiFi → your network → Configure Proxy → Manual
- Server: YOUR_MAC_IP, Port: 8890
Visit http://mitm.it on the phone → install CA cert → enable Certificate Trust
Force-close and reopen the Bosch Smart Home Camera app
The terminal shows the Bearer token — copy it
Add to bosch_config.json:
```
"bearer_token": "eyJ..."
```

Note: The Bosch Smart Camera app has no SSL certificate pinning (NSAllowsArbitraryLoads: true on iOS). mitmproxy intercepts at the OS level after installing the CA cert.

Capturing App Traffic with mitmproxy

The included start_proxy.py script sets up mitmproxy with everything pre-configured for Bosch Smart Camera app traffic analysis. This is useful for:

Investigating motion detection rules — the camera reverts motion settings within ~1s; capturing app traffic may reveal which endpoint the official app uses
Discovering new API endpoints — see exactly what the app sends
Capturing local camera credentials — Digest auth headers when the app connects directly to cameras on LAN

Quick Start

pip3 install mitmproxy          # one-time install
python3 start_proxy.py          # starts proxy, auto-detects your Mac IP
python3 start_proxy.py --dump   # same, but saves all flows to captures/ folder

Phone Configuration

WiFi proxy: Settings → WiFi → your network → Configure Proxy → Manual
- Server: your Mac's IP (shown by the script), Port: 8890
Install CA cert: open http://mitm.it in phone browser → download + install
iOS only: Settings → General → About → Certificate Trust Settings → enable mitmproxy
Force-close and reopen the Bosch Smart Camera app
All traffic appears in the terminal

What to Look For

Goal	Watch for
Motion detection rules	`PUT /v11/video_inputs/{id}/rules/{ruleId}`
Motion settings	`PUT /v11/video_inputs/{id}/motion`
Local camera credentials	`Authorization: Digest ...` to `192.168.x.x`
Bearer tokens	`Authorization: Bearer eyJ...`
New endpoints	Any `PUT`/`POST` to `residential.cbs.boschsecurity.com`

Saved Flows

When using --dump, flows are saved to captures/bosch_flows_YYYY-MM-DD_HHMMSS.mitm. View them later:

mitmproxy --rfile captures/bosch_flows_2026-03-25_143000.mitm

Important: Captured flows contain your Bearer token and personal data. Never share .mitm files publicly. The captures/ folder is in .gitignore.

Config File Reference

bosch_config.json (auto-created on first run):

{
  "account": {
    "username":      "your.email@example.com",
    "bearer_token":  "eyJ...",
    "refresh_token": "eyJ..."
  },
  "cameras": {
    "Outdoor": {
      "id":              "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
      "name":            "Outdoor",
      "model":           "CAMERA_EYES",
      "firmware":        "x.xx.xx",
      "mac":             "xx:xx:xx:xx:xx:xx",
      "download_folder": "Outdoor",
      "local_ip":        "",
      "local_username":  "",
      "local_password":  ""
    }
  },
  "settings": {
    "download_base_path":    "",
    "scan_interval_seconds": 30,
    "request_delay_seconds": 0.5
  }
}

Field	Description
`bearer_token`	Current JWT access token (auto-renewed on startup)
`refresh_token`	Long-lived token for silent renewal, keep this safe
`id`	Bosch Cloud camera UUID — discovered automatically
`download_folder`	Subfolder name for downloaded events
`local_ip`	Optional: LAN IP for direct camera access
`local_username`	Optional: Digest auth username (randomly set by SHC)
`local_password`	Optional: Digest auth password (randomly set by SHC)
`download_base_path`	Where to save events. Empty = same folder as script

Local credentials (local_username / local_password) are randomly generated by the Smart Home Controller during camera pairing. They can be captured via mitmproxy from the Bosch Smart Home (not Camera) app traffic. These are optional — the cloud API works without them.

Troubleshooting

Token expired / HTTP 401 → Run python3 get_token.py to renew. If the refresh_token is also expired (after months of inactivity), use python3 get_token.py --browser for a new browser login.

Camera OFFLINE → Check the Bosch Smart Home Controller app. The camera may have lost its LAN connection to the SHC.

Live stream shows only one frame → Make sure ffmpeg / ffplay is installed: brew install ffmpeg

Live snapshot slow (~15 s) → The tool tried LOCAL first and it timed out. This is normal if no local credentials are set. REMOTE fallback works in ~1.5 s.

get_token.py browser login fails → Make sure you paste the full redirect URL (starting with https://www.bosch.com/boschcam?code=...), not just the code. The page shows a 404 — that is expected.

Download stops mid-way → Token expired during a large download. Re-run python3 get_token.py and restart the download. Already-downloaded files are skipped.

Error -353 on clip request → The video clip cannot be re-requested. The camera has already overwritten the local recording, or the event is too old. Only recent events with locally stored footage can be re-requested.

Error -307 (rate limited) → Too many API requests in a short time. Wait a few minutes and retry. The tool uses a 0.5s delay between download requests to avoid this.

Error -351 (camera busy) → Another session (e.g., the official app) is using the camera's audio/video channel. Close the other session and retry.

Example: Event Monitoring & Automation

Watch for live events (CLI)

# Watch all cameras, print new events every 30 seconds
python3 bosch_camera.py watch

# Watch only one camera, poll every 15 seconds
python3 bosch_camera.py watch Outdoor --interval 15

# Watch for 10 minutes then exit
python3 bosch_camera.py watch --duration 600

# Real-time via FCM push (~2s latency)
python3 bosch_camera.py watch --push

Example output:

Watching 2 camera(s)... (Ctrl+C to stop)
  [14:32:07] MOVEMENT       cam=Outdoor       2026-03-22T14:32:05Z
             snap: https://...events/.../snap.jpg
             clip: https://...events/.../clip.mp4
  [14:33:45] PERSON_DETECTED cam=Outdoor       2026-03-22T14:33:43Z
             snap: https://...events/.../snap.jpg
  [14:35:12] AUDIO_ALARM    cam=Indoor        2026-03-22T14:35:10Z

Motion detection control

# Enable motion with max sensitivity
python3 bosch_camera.py motion Outdoor --enable --sensitivity SUPER_HIGH

# Lower sensitivity (reduce false alarms)
python3 bosch_camera.py motion Outdoor --sensitivity MEDIUM

Audio alarm control

# Enable audio alarm with threshold 60
python3 bosch_camera.py audio-alarm Outdoor --enable --threshold 60

Home Assistant Automation Examples

Motion alert with camera snapshot

automation:
  - alias: "Bosch Camera — Motion Alert"
    trigger:
      - platform: state
        entity_id: sensor.bosch_outdoor_last_event
    condition:
      - condition: template
        value_template: >
          {{ trigger.to_state.state not in ['unknown', 'unavailable', '']
             and trigger.to_state.state != trigger.from_state.state }}
      - condition: template
        value_template: >
          {{ state_attr('sensor.bosch_outdoor_last_event', 'event_type') == 'MOVEMENT' }}
    action:
      - service: notify.mobile_app_xxx
        data:
          title: "Motion — Outdoor Camera"
          message: >
            {{ now().strftime('%H:%M') }} —
            {{ state_attr('sensor.bosch_outdoor_last_event', 'event_type') }}
          data:
            image: "{{ state_attr('sensor.bosch_outdoor_last_event', 'image_url') }}"

Privacy mode at night

automation:
  - alias: "Camera — Privacy Mode at Night"
    trigger:
      - platform: time
        at: "22:00:00"
    action:
      - service: switch.turn_on
        target:
          entity_id: switch.bosch_indoor_privacy_mode

  - alias: "Camera — Privacy Mode Off in Morning"
    trigger:
      - platform: time
        at: "07:00:00"
    action:
      - service: switch.turn_off
        target:
          entity_id: switch.bosch_indoor_privacy_mode

Camera light on motion after sunset

automation:
  - alias: "Camera — Light on Motion After Sunset"
    trigger:
      - platform: state
        entity_id: sensor.bosch_outdoor_last_event_type
        to: "MOVEMENT"
    condition:
      - condition: sun
        after: sunset
        before: sunrise
    action:
      - service: switch.turn_on
        target:
          entity_id: switch.bosch_outdoor_camera_light
      - delay:
          minutes: 5
      - service: switch.turn_off
        target:
          entity_id: switch.bosch_outdoor_camera_light

Known Limitations

LOCAL stream startup delay (25–35s) — the camera's H.264 encoder needs 25s (360 Innenkamera) to 35s (Eyes Außenkamera) after connection setup before producing valid frames. The stream will show a black screen initially, then start playing.
Motion sensitivity changes revert after ~1s — the camera's internal IVA rules engine overwrites cloud-set motion sensitivity via RCP. Not fixable via the API.
Proxy session = 60 s — after 60 seconds the proxy hash expires and the live stream stops. The live command opens a new session each time. Note: Setting maxSessionDuration=3600 in the RTSP URL extends the session to 60 minutes (confirmed working despite the 60s value in the PUT /connection response).
Cloud dependency — everything goes through residential.cbs.boschsecurity.com. There is no documented local API on the SHC for camera images.
VLC needs ffmpeg — the live --vlc option requires ffmpeg to proxy the stream, because VLC cannot skip TLS certificate verification for rtsps://.
Camera light control — the light on/off command uses PUT /v11/video_inputs/{id}/lighting_override (cloud API, no SHC needed). Full light schedule control is only available via the SHC local API with mutual TLS.
Two-way audio — the intercom command is listen-only. Sending audio to the camera (microphone → speaker) requires the proprietary media tunnel protocol, which is not yet reverse-engineered.
Gen2 cameras — many Gen2-only features (lens elevation, intrusion detection, polygon zones, SocketKnocker wake) are documented but not yet implemented as CLI commands.
Audio+ features — glass break detection and smoke alarm detection require an active Audio+ subscription from Bosch.

File Structure

tool/
  bosch_camera.py      — main CLI tool (all commands + interactive menu)
  get_token.py         — OAuth2 PKCE token manager (browser login + renewal)
  bosch_config.json    — auto-created config (credentials + camera list)
  README.md            — this file
  Outdoor/             — downloaded outdoor camera events (JPEG + MP4)
  Indoor/              — downloaded indoor camera events (JPEG + MP4)

Version History

Version	Changes
v10.2.1	Revert privacy-mode cross-check from v10.2.0. A/B testing 2026-04-27 (toggle privacy ON↔OFF, read RCP 0x0d00 before and after) proved `0x0d00 byte[1]` stays `1` independent of the user-facing privacy-mode toggle. That byte does not represent the mode flag — `rcp_findings.txt`'s "PRIVACY MASK state" label refers to a separate static configuration. The "Privacy MISMATCH" line therefore produced a permanent false positive. The Bosch cloud `/v11/video_inputs.privacyMode` field is the correct source. Kept: the v10.2.0 `?JpegSize=1206` snap.jpg latency fix (still valid).
v10.2.0	Cross-version sync with HA integration v10.4.5 + v10.4.8. Two changes: (1) Fix: LOCAL `snap.jpg` is now ~1.4 s instead of ~6–10 s when the camera is idle. Append `?JpegSize=1206` to the local snap URL — without the parameter, the camera triggers a slow on-demand full-sensor capture; with it, the cached path serves quickly. Same fix that landed in HA integration v10.4.5; the Python CLI was using the unparameterised URL on the local Digest path (`bosch_camera.py:806`). (2) New: privacy-mode cross-check in `--status` RCP block. Bosch cloud `/v11/video_inputs.privacyMode` has been observed to misreport `'OFF'` for ONLINE cameras that are physically in privacy (Gen2 Outdoor, FW 9.40.25, 2026-04-27). The CLI now reads RCP `0x0d00` via the cloud-proxy session it already has open and compares byte[1] to the cloud-reported `privacyMode`. On mismatch it prints a `⚠️ Privacy MISMATCH: cloud='OFF', hardware=ON (via RCP)` line — the camera hardware is authoritative. Read-only diagnostic; no behavior change in any other path. The HA integration takes the corresponding fix one step further by overriding its internal cache so the privacy switch flips automatically. The CLI just surfaces the discrepancy at status time.
v10.1.2	Atomic save_config. `save_config()` now writes to a temp file in the same directory and `os.replace()`s atomically (POSIX rename guarantee), so a crash during write can no longer leave a half-written `bosch_config.json` that breaks the next startup.
v10.1.1	Switch FCM push to official Bosch OSS Google API key. Firebase/FCM registration now uses the official OSS key provided by Bosch instead of the app-embedded Firebase key from the APK. Bosch added the required Firebase Installations and FCM registration permissions on 2026-04-20 — confirmed working end-to-end. No user action required.
v10.1.0	Thread safety + TLS proxy reliability. (1) Pre-emptive token refresh. New `_is_token_near_expiry(token_str, buffer_secs=60)` — stdlib-only JWT decode (no extra library). Called at the top of each watch-loop iteration and in the FCM callback; refreshes the token 60 s before expiry, preventing the single failed API call at the exact expiry moment. (2) TLS proxy reconnect with exponential backoff. The LOCAL RTSP TLS proxy thread retries on connection failure: 1 s → 2 s → 4 s. After 3 consecutive failures it exits cleanly with a clear stderr message instead of looping forever. Counter resets after 30 s of stable uptime. (3) Connection pooling. Singleton `requests.Session` with `HTTPAdapter(pool_connections=10, pool_maxsize=20)` — avoids TCP handshake overhead on repeated API calls. (4) Graceful shutdown. `threading.Event` SIGTERM/SIGINT handler; watch loop exits cleanly on signal. (5) Retry with backoff. `_request_with_retry`: 3 attempts, 1 s/2 s/4 s backoff on 5xx/Timeout/ConnectionError; 401 always passed through unchanged.
v10.0.0	Security hardening release (full pentest). Based on a comprehensive penetration test. (1) `urllib3.disable_warnings()` scoped to `InsecureRequestWarning` only (was global suppression). (2) `bosch_config.json` file permissions set to `0600` (owner-only) on every save — was world-readable `0644`.
v9.0.4	Version bump only.
v9.0.3	Fix: Mark events as read uses correct API shape. `api_mark_events_read` previously tried `PUT /v11/events/bulk` with body `{events: [{id, isSeen: true}]}` (wrong endpoint method, wrong key) and fell back to `PUT /v11/events/{id}` with `{isSeen: true}` (wrong path, wrong key). Network capture analysis showed the actual shape is `PUT /v11/events` with body `{id, isRead: true}` per event, and the bulk endpoint is `POST {ids, action: "DELETE"}` only. Function now sends per-event PUTs with the correct payload — events actually get marked as read on the cloud now.
v9.0.2	Automatic OAuth login. `get_token.py` now uses a local HTTP callback server (`localhost:8321`) — after browser login, Bosch Keycloak redirects back automatically and the auth code is captured without manual URL copy-paste. Redirect URI `localhost:8321/callback` registered by Bosch for the OSS OAuth client. Falls back to manual paste if port is busy.
v9.0.1	Info: intrusion detection + ambient light fix. `info --full` now shows `intrusionDetectionConfig` (enabled, detectionMode, sensitivity, distance) for Gen2 cameras. Fixed ambient light field name (`ambientLightSensorLevel`), shows percentage.
v9.0.0	Gen2 camera support. Gen2 model names (`CAMERA_OUTDOOR_GEN2`, `CAMERA_INDOOR_GEN2`, `HOME_Eyes_Outdoor`, `HOME_Eyes_Indoor`). Firmware update detection (`UPDATING_REGULAR` → 🔄). Proxy dump path fix.
v8.0.4	OSS OAuth credentials. Switched to dedicated Bosch OSS OAuth client (`oss_residential_app`) — provided by Bosch for open source projects. Firebase/FCM API keys unchanged (OSS key lacks FCM permissions). Re-login required (`python3 get_token.py`).
v8.0.3	New commands + protocol check. New: `accept-invite` (accept friend invitation), `shared` (show which friends have camera access). Protocol version check on startup (warns if Bosch API v11 unsupported). Feature flags in `info --full`. Dynamic hardware version display (human-readable names).
v8.0.0	Complete Gen1 Support. All discovered Bosch Cloud API endpoints implemented — 100% coverage for Gen1 cameras. Includes: motion zones (`zones`), privacy masks (`privacy-masks`), lighting schedule (`lighting-schedule`), extended rules edit (`--name`/`--start`/`--end`/`--days`), friends/sharing, and all camera controls. Next milestone: Gen2 cameras + permanent local user (Summer 2026).
v7.4.0	Lighting schedule command (`lighting-schedule`): view and modify light schedule for outdoor cameras (on/off times, motion trigger, darkness threshold). Supports `--on`, `--off`, `--motion`, `--threshold` parameters.
v7.3.0	Privacy masks command (`privacy-masks`): list, set, and clear privacy mask zones via cloud API. Same coordinate system as motion zones (normalized 0.0–1.0).
v7.2.0	Motion zones command (`zones`): list, set, and clear motion detection zones via cloud API (normalized 0.0–1.0 coordinates). Rules edit extended: `edit` now supports `--name`, `--start`, `--end`, `--days` in addition to `--active`/`--inactive`. HTTP 443 handling (privacy mode blocks zone access).
v7.1.0	TCP keep-alive on TLS proxy sockets (10 s idle / 5 s interval / 3 probes). Directional select timeout for stable LOCAL streams.
v7.0.0	LOCAL LAN streaming with TLS proxy. Menu: local stream entries + exit with "q". Code cleanup.
v5.2.0	Fix live stream session duration (`maxSessionDuration=3600` — stream runs up to 60 min).
v5.1.0	New commands: privacy-sound, rules, friends, rename, profile, account. HTTP 444 handling.
v4.0.0	Intercom (listen-only), siren command, unread events, person detection icon, mark-as-read, `--push-mode` flag
v3.0.0	FCM push notifications, Signal alerts, auto-follow, fixed motion sensitivity enum
v2.0.0	Code cleanup
v1.9.0	Push notification architecture documented
v1.8.0	RCP session caching, `watch --snapshot`, resolution fix
v1.7.0	`--quality` flag (auto/high/low)
v1.6.0	`watch`, `motion`, `audio-alarm`, `recording` commands
v1.5.0	`maxSessionDuration` fix, `--hq`, `--inst N`, `rcp bitrate`
v1.4.0	`rcp frame`, `rcp script`, `rcp iva`
v1.3.0	`rcp` command with RCP protocol reads
v1.2.0	`info --full`, `privacy --minutes`, WiFi info, 404 retry
v1.1.0	`light`, `privacy`, `notifications`, `pan`, auto token renewal, interactive menu
v1.0.0	Initial release — status, snapshot, liveshot, live, download, events

Related Projects

Bosch Smart Home Camera — Home Assistant Integration — custom HA integration with live video, FCM push alerts, sensors, switches
Bosch Smart Home Camera — Python Frontend (concept) — planned NiceGUI web dashboard — community interest welcome

References

Bosch SHC API Issue #63 — community discussion on camera API
Bosch SHC API Issue #30 — camera integration discussion
boschshcpy — Python library for the local SHC API (not camera images)
Bosch RCP Documentation

FilesExpand file tree

README.md

Latest commit

History

README.md

File metadata and controls

Bosch Smart Home Camera — Python CLI Tool

Disclaimer

Table of Contents

Features

Prerequisites — Setting Up a New Camera

Requirements

Quick Start

1. First run

2. Interactive menu

CLI Reference

Status & Info

Snapshots

Live Stream — 30fps H.264 + AAC Audio

Download Events

Events

Privacy Mode

Camera Light

Push Notifications

Pan (CAMERA_360 Only)

Motion Detection

Audio Alarm

Recording Options

Auto-Follow (CAMERA_360 Only)

Intercom

Siren (CAMERA_360 Only)

Unread Events

Privacy Sound (CAMERA_360 Only)

Rules — Cloud Automation

Friends — Camera Sharing

Rename

Profile

Account

RCP Protocol Reads

Watch — Real-Time Event Monitoring

Token Management

Config & Rescan

What's New in v9.0.0

What's New in v5.0.0

What's New in v4.0.0

What's New in v3.0.0

What's New in v2.0.0

What's New in v1.9.0

What's New in v1.8.0

What's New in v1.7.0

What's New in v1.6.0

What's New in v1.5.0

What's New in v1.4.0

What's New in v1.3.0

What's New in v1.2.0

What's New in v1.1.0

How It Works

System Overview

Authentication — Bearer JWT Token

Event Snapshots (motion-triggered)

Live Snapshot — Current Image

Live Video Stream — 30fps + Audio

Download

Cloud API Reference

Camera Management

Privacy & Security

Motion & Audio Detection

Camera Controls

Lighting (Outdoor Camera)

Camera Settings & Diagnostics

Events & Clips

Firmware & WiFi

User & Account

Camera Sharing (Friends)

Automation Rules

Alexa Integration

System & Maintenance

Live Stream URLs (from PUT /connection response)

Push Notification Modes (FCM)

Endpoint Availability by Camera Model