API Overview

Base URL

All API requests use the following base URL:

https://api.playablelabs.studio/api

Request Format

The API accepts and returns JSON. Include these headers in every request:

Content-Type: application/json
Authorization: Bearer YOUR_TOKEN

Authentication

Every request must include a valid token. PlayableLabs supports two authentication methods:

• JWT session tokens -- Obtained via the web app login flow (NextAuth v5)
• API tokens -- Created in Developers > Tokens for programmatic access

See the Authentication guide for details.

Rate Limiting

The API enforces rate limits to ensure fair usage:

When rate-limited, the API returns 429 Too Many Requests with these headers:

X-RateLimit-Limit: 100
X-RateLimit-Remaining: 0
X-RateLimit-Reset: 1700000000
Retry-After: 30

Pagination

List endpoints return paginated results. Use query parameters to control pagination:

curl -H "Authorization: Bearer YOUR_TOKEN" \
  "https://api.playablelabs.studio/api/games?page=1&limit=20&sort=createdAt&order=desc"

Paginated responses include metadata:

{
  "data": [...],
  "meta": {
    "page": 1,
    "limit": 20,
    "total": 54,
    "totalPages": 3
  }
}

Multi-Tenant Scoping

All data is scoped by organization. Pass the organizationId as a query parameter or in the request body where required. You can only access data belonging to organizations you are a member of.

Error Codes

The API uses standard HTTP status codes and returns structured error responses:

{
  "statusCode": 400,
  "error": "VALIDATION_ERROR",
  "message": "Name is required"
}

Key Endpoints

Next Steps

• Authentication -- JWT and API token details
• SDKs and examples -- Client libraries and code samples