Web API
API Endpoints
All endpoints require Authorization: Bearer <token> unless noted otherwise.
| Endpoint | Description |
|---|---|
GET /api/modules | List registered web modules |
GET /api/metrics | Server metrics (uptime, players, cache stats). Public if metrics-public: true. |
Each addon registers its own routes under /api/<name>/. For example, XBans provides /api/xbans/... and XLogin provides /api/xlogin/....
Authentication
Include the token from config.yml in the Authorization header:
curl -H "Authorization: Bearer YOUR_TOKEN" http://localhost:8085/api/modulesNever expose the dashboard port publicly without a reverse proxy (nginx, Caddy) and HTTPS.