API

Endpoints

• GET/serverWhether the server is up, who is on, and when the last snapshot came in.
• GET/players/{name or uuid}A player's balance, stats and rank, and whether they are online.
• GET/players/{name or uuid}/history?days=30Their balance day by day, up to a year back.
• GET/leaderboards/{board}balance, kills, deaths, playtime or bounty.
• GET/auctions?q=diamond&sort=priceLive listings. Sort by price, unit price or newest.
• GET/orders?material=DIAMONDOpen buy orders, and how much is still wanted.
• GET/pricesWhat the shop pays and charges, item by item.
• GET/economyMoney in circulation and how it is spread out.
• GET/activityRecent sales and filled orders.
• GET/meYour own figures. Needs the read:self scope.

Your first request

Run /api new in game. The token is shown there once, so copy it somewhere safe. Send it with every request:

curl -H "Authorization: Bearer lsmp_..." \
  https://api.lootsmp.com/v1/server

What comes back looks like this. The numbers are made up.

{
  "online": true,
  "players": { "online": 12, "max": 100 },
  "version": "26.2",
  "motd": "LootSMP",
  "latencyMs": 24,
  "lastSnapshot": "2026-09-19T12:00:00Z",
  "checkedAt": "2026-09-19T12:00:10Z"
}

Good to know

• Every request needs a token. Without one the answer is 401 token_required.
• 1,200 requests a minute per token. x-ratelimit-remaining says how many are left, and a 429 comes with retry-after.
• Two scopes: read:public for everything public, read:self for /me.
• A token lasts two years, and you can have five. Revoke one here or with /api revoke <id>.
• Money is in cents, so 12345 is $123.45. Times are UTC. Playtime is in seconds.
• Lists take limit and offset, up to 100 at a time.
• Keep track of players by UUID. Names can change.
• Your token is a secret. Call the API from a server or a script, never from a web page.

Your tokens

Checking...