get /api/v1/openapi.json
This document
Developer API
Third parties deal and resolve rounds through /api/v1. The server owns the wallet and the math. Authenticate with X-Api-Key. Default limit is 60 requests a minute. Webhooks are signed sha256= HMAC over the raw body.
get /api/v1/game/config
Effective paytable for the key owner's state
Scope read:game. Returns RTP target, scale, and stake-scaled symbol pays.
get /api/v1/leaderboard
Skill rating leaderboard
Scope read:leaderboard.
get /api/v1/wallet
Key owner's virtual wallet
Scope read:wallet.
get /api/v1/rounds
Recent rounds for the key owner
Scope read:game.
post /api/v1/game/spin
Deal a 5x5 round
Scope write:game. Debits the stake. Body: { stake, idempotencyKey?, lat?, lng? }.
post /api/v1/game/resolve
Lock wild placement and fifth-tile symbol
Scope write:game. Body: { roundId, wildIndex, skillSymbol }. Server scores and credits the wallet.
get /api/v1/webhooks
List webhook endpoints
Scope write:webhooks.
post /api/v1/webhooks
Create a webhook
Scope write:webhooks. Body: { url, events }. Events: round.completed, bonus.completed. Signature header x-skillspins-signature is hex HMAC-SHA256 of the raw body.