14.2.7
HomeGetting startedRegistering with an HTTP keyGetting a credential without DiscordServer claim flowReport rules and the block windowVersion check and 426Authentication and server keysThe blocking modelError handlingRate limitsVersions and compatibilityPOST /v1/servers/claimPOST /v1/servers/reportPOST /v1/servers/revokePOST /plugin/v1/claimPOST /plugin/v1/reportGET /plugin/v1/versionGET /maps/{seed}GET /jobs/{seed}GET /seedsGET /stats/overviewGET /stats/protectionAPI changelog
Changelog

API changelog

Changes to the blocking API v1, newest first.

RULE
v1 is additive only
Fields may be added but never removed or redefined. That opens a new v2 path; plugins already deployed keep calling v1.
  1. 2026-09-17
    added
    • Added POST /api/v1/servers/revoke: whoever holds a server key can revoke it. A leaked HTTP key can be ended without Discord.
    • Every 429 response now carries a Retry-After header (seconds).
    • The examples now send a User-Agent header; some library defaults are refused by the CDN.
  2. 2026-09-17
    changed
    • Block length changed: up to 1 hour for game-server registrations (plugin or self-claim), up to 20 minutes for Discord HTTP keys.
    • Each seed now has a lifetime budget: 1 hour for game-server registrations, 20 minutes for HTTP keys. A seed that used it up cannot be blocked again.
    • report gains exhausted: true when the seed has no budget left.
  3. 2026-09-17
    added
    • Added HTTP keys issued from Discord. Report seeds with /api/v1/servers/report alone, no plugin. These keys are not bound to an IP.
  4. 2026-09-16
    added
    • Added the server API /api/v1/servers/claim and report: a credential straight from the game server, no Discord.
    • Self-issuing checks with A2S_INFO that an SCP:SL server answers at the request address.
    • Self-issue limits: one per IP every 5 minutes, at most 3 live credentials per IP. Replacing a live registration at the same IP:port requires its credential (409 otherwise).
    • /api/plugin/v1/* stays untouched — plugins already deployed keep calling it.
  5. 2026-09-16
    changed
    • round_end now releases the window in every mode. It used to release only in sliding mode.
    • Cooldown grew from 30 seconds to 5 minutes.
    • One block window per server. While a window is alive, reports for another seed do not open one.
    • The per-credential report limit dropped from 30 to 12 per minute.
    • claim auto-registers at the address the request came from. Manual review remains only for old requests.
  6. plugin 1.2.0
    added
    • Added GET /api/plugin/v1/version.
    • Requests below the minimum version are refused with 426 plugin_outdated. 1.0.0 and 1.1.0 treat it as an unknown failure and retry.
  7. plugin 1.1.0
    added
    • Added POST /api/plugin/v1/claim. Registers a server with a code issued by the Discord bot.
  8. plugin 1.0.0
    initial
    • POST /api/plugin/v1/report, with blockedUntil in the response.
SLMAPS is the seed-map viewer for SCP: Secret Laboratory. These pages describe the public API of slmaps.com.slmaps.com ·