Authentication - PSNTools | Docs

Placeholder. The API is not live yet and none of the details below are final.

API keys

Every request will need an API key. Keys will be created from your PSNTools account settings and shown once at creation.

An API key is not the same thing as your NPSSO token. Your NPSSO is a PlayStation session cookie; an API key is issued by PSNTools. Never send your NPSSO to the API in place of a key.

Making a request

Pass the key as a bearer token:

curl https://api.psntools.com/v1/accounts/example \
  -H "Authorization: Bearer psn_live_xxxxxxxxxxxx"

Key types

Prefix	Environment	Notes
`psn_test_`	Sandbox	Returns fixture data, not billed
`psn_live_`	Production	Real data, counts against your quota

Errors

Status	Meaning
`401`	Missing or malformed key
`403`	Key is valid but lacks the required scope
`429`	Rate limit exceeded

Keeping keys safe

Treat a key like a password — anyone holding it can act as your account
Never commit keys to a repository or ship them in client-side code
Rotate a key immediately if you think it has leaked

Rotating a key takes effect instantly and does not invalidate your other keys.

Related topics

PSNTools API Create a PSNTools account