Quick Start

Fetch the latest scripts with a single GET request:

# List approved scripts
curl "https://scriptblock.pages.dev/api/scripts?sortBy=created_at&order=desc"

# Live platform stats
curl "https://scriptblock.pages.dev/api/stats"

# Search the library
curl "https://scriptblock.pages.dev/api/search?q=blox&type=scripts"

That's it. All responses are JSON. Read the API Keys section to learn about authenticated access.

Base URL

All API requests are made against a single origin. Append the resource path to the base URL.

The production route /api/* is proxied to the Workers backend. Mutation requests (POST/DELETE on private resources) require a reCAPTCHA token.

Status

Returns the current operational state of the platform and its services.

GET /api/status

{
  "overall": "operational",
  "services": {
    "api": "operational",
    "database": "operational"
  },
  "servicesUp": 2,
  "servicesTotal": 2,
  "checkedAt": "2026-09-01T00:00:00.000Z"
}

GET /api/health

Lightweight liveness check with latency and database state.

{ "status": "ok", "database": "operational", "latency_ms": 41 }

Scripts

Browse the public script library with pagination, filtering, and sorting.

GET /api/scripts

curl "https://scriptblock.pages.dev/api/scripts?sortBy=views&order=desc&mode=free"

The response shape is { scripts: [...], totalPages, total }.

GET /api/scripts/featured

Returns pinned/featured scripts shown on the site banner.

GET /api/scripts/trending

Returns top scripts by engagement over the last 48 hours (falls back to all-time).

Executors

GET /api/executors

{
  "executors": [
    {
      "id": "37f75376-3427-4eb0-a0f7-733bed8a18fd",
      "name": "Arcana",
      "platform": "windows",
      "type": "free",
      "version": "1.0",
      "website": "https://arcana.gg",
      "patched": 0,
      "downloads": 0
    }
  ]
}

Stats

GET /api/stats

Public, real-time platform aggregates backed by D1.

{
  "stats": {
    "users": 14,
    "scripts": 27,
    "games": 8,
    "collections": 1,
    "follows": 1,
    "copies": 12,
    "likes": 4,
    "comments": 3,
    "executors": 25,
    "total_views": 51988,
    "total_downloads": 13,
    "total_likes": 1999,
    "today_users": 1,
    "today_scripts": 0
  }
}

Search

GET /api/search

curl "https://scriptblock.pages.dev/api/search?q=blox&type=scripts"
curl "https://scriptblock.pages.dev/api/search?q=universal&type=all"

Script results are ranked by title, then tags, then description.

API Keys

Create scoped API keys from the Developer page. Keys unlock authenticated access and rate-aware usage on public read endpoints via the X-API-Key header.

Create a key

curl -X POST "https://scriptblock.pages.dev/api/keys" \
  -H "Authorization: Bearer <JWT>" \
  -d '{"name":"my-app"}'
# responds once with the full key: prefix.secret

Use a key

curl "https://scriptblock.pages.dev/api/stats" \
  -H "X-API-Key: sbx_abc123.secretvalue"

List & revoke

Authentication

Manage your ScriptBlock account session programmatically.

Authenticate with Authorization: Bearer <JWT>. Mutation requests require a valid reCAPTCHA token.

Rate Limits

Public endpoints are rate-limited per IP to protect the backend. Authenticated API-key requests receive a higher quota. Exceeding the limit returns HTTP 429 with a Retry-After header.

Errors

The API uses conventional HTTP status codes.

Error bodies follow { "error": "message", "code": "..." }.