# Realtime

Socket.IO clients authenticate with an access token. The API derives authorized
organization rooms from database memberships; clients cannot select arbitrary
tenant rooms. Events use `organization:{id}` and `server:{id}`. The web dashboard
polls every 15 seconds when realtime delivery is unavailable.