swgoh-api

For Discord bots, guild tools and fan sites

Galaxy of Heroes data, as a dependable API

Players, guilds, leaderboards, events and game data through one keyed, cached and rate-limited REST API. With a player's consent, your bot can read their own account too, and it never sees their game credentials.

Get a free API key Read the quick start

Free plan · no card required · 20,000 requests per key per day

Your first call
$ curl https://api.swgoh-api.dev/v1/players/123-456-789 \
    -H "Authorization: Bearer $SWGOH_API_KEY"

{
  "data": { "name": "…", "level": 85, "rosterUnit": [ … ] },
  "meta": {
    "route": "players.get",
    "cache": "hit",
    "data_age_secs": 42,
    "stale": false
  }
}

Everything a bot needs, none of the plumbing

Stop running your own game client, juggling guest accounts and guessing at rate limits.

  • Free, keyed reads

    Player and arena profiles, guilds, leaderboards, events, game data, localization and enums on the Free plan, with a clear daily quota per key.

  • Player-consented access

    Players link their game account in our portal and grant your bot read scopes through OAuth 2.1 with PKCE. Revoking access takes effect in under a second.

  • Cached and fair

    A shared cache absorbs repeat reads, cached data is served when the game is down, and a fair queue keeps any one organisation from crowding out the rest.

  • Signed webhooks

    Grant, quota and upstream-status events signed with HMAC-SHA256, retried for 24 hours, with a delivery log and one-click redelivery.

  • Predictable errors

    Every error is an RFC 9457 problem with a stable type you can switch on, and every response carries an X-Request-Id for support.

  • Typed SDKs

    TypeScript, Python and Rust clients with auth, request ids, Retry-After-aware retries, an OAuth helper and a webhook verifier built in.

Up and running in minutes

  1. Sign in

    Use GitHub, Discord or an email link at the developer portal, then add a passkey.

  2. Create an app and key

    Each bot or integration gets its own app, keys and usage dashboard.

  3. Make a call

    Send the key as a bearer token, or let an SDK handle retries and errors for you.

Pricing

Reads are free. Paid plans will add higher limits, fresher data and, for reviewed apps, player-approved write access.

Free

$0

  • All public read routes
  • Player-consented read scopes
  • 5 requests/s, burst of 10, per key
  • 20,000 requests per key per day
  • 3 apps, 2 keys per app, 5 members
  • Signed webhooks
Start free

Starter · Pro · Scale

Coming soon

  • Everything in Free
  • Higher rate limits and daily quotas
  • On-demand cache bypass for fresh data
  • Metered write access for reviewed apps
  • Larger share of game-server capacity
See what's coming

Enterprise

Custom

  • Custom limits and capacity
  • Dedicated support
  • Review and onboarding help
Talk to us

To keep the free tier free, a new free organisation needs a GitHub or Discord account at least 30 days old.

For players: you stay in control

When a bot asks to see your account, you link it in our player portal, never in the bot. Your EA one-time code is entered only on our site, and bots never see it.

Open the player portal
  • See every bot you've granted access to, with its scopes and when it was last used
  • Revoke any bot, or unlink your account entirely, in one click
  • An activity feed of what each bot did
  • Export or delete your data whenever you want

Questions

Is this an official EA or Capital Games product?

No. swgoh-api is an independent service and is not affiliated with, endorsed by or sponsored by Electronic Arts, Capital Games, Lucasfilm or Disney.

Can a bot change my game account?

Not today: player-consented access is read-only. Write access is planned only for reviewed apps, only with scopes you approve one at a time, and you'll be able to freeze all writes from the player portal.

How fresh is the data?

Every response tells you whether it came from the cache and how old it is (meta.cache, meta.data_age_secs). Cache lifetimes per route are listed in the caching guide.

I already use comlink. Do I have to rewrite my bot?

No. A comlink-compatible endpoint accepts existing comlink clients for guest and session reads, so you can move over first and adopt the REST API at your own pace.

Is the service up right now?

The status page shows live results from synthetic checks we run against every part of the API each minute.

Get in touch

Questions, partnerships or enterprise plans: hello@swgoh-api.dev.
Security reports: security@swgoh-api.dev.
Takedown and rights-holder requests: legal@swgoh-api.dev.