Expose (temporarily) the session ids.

src/api.js

@@ -534,6 +534,18 @@ Api.fn.xo = {
 			};
 		});
 	},
+
+	'getSessionId': function (req) {
+		var p_pool_id = req.params.id;
+		if (undefined === p_pool_id)
+		{
+			throw Api.err.INVALID_PARAMS;
+		}
+
+		return this.xo.pools.first(p_pool_id).then(function (pool) {
+			return pool.get('sessionId');
+		});
+	},
 };
 
 Api.fn.host = {

src/xo.js

@@ -353,6 +353,9 @@ Xo.prototype.start = function () {
 				pools = _.values(pools);
 				var pool_uuid = pools[0].id = pools[0].uuid;
 
+				// @todo Remove: security concerns.
+				pools[0].sessionId = xapi.sessionId;
+
 				var resolve = function (model, collection, props, include) {
 					/* jshint laxbreak: true */