scripts · API

read endpoints (no auth)

GET https://scripts.nitaimaarek.com/api/list?page=1&per=20&sort=popular
  → { "page":1, "per":20, "total":N, "total_pages":N, "sort":"popular", "items":[...] }
GET https://scripts.nitaimaarek.com/api/list?sort=new            (most recent)
GET https://scripts.nitaimaarek.com/api/list?q=jump              (search)

GET https://scripts.nitaimaarek.com/api/<id>
  → { id, name, owner, kind, thumbnail, created_at, copies, code, raw_url }

GET https://scripts.nitaimaarek.com/<id>/raw            (raw text/plain)
POST https://scripts.nitaimaarek.com/api/<id>/copy      (bump copies)

all GET endpoints send Access-Control-Allow-Origin: * so client-side fetchers work.

post a script (cookie auth)

curl -c jar.txt -X POST -d 'username=YOU&password=YOURS' \
  https://profiles.nitaimaarek.com/login

curl -b jar.txt -X POST \
  --data-urlencode 'name=Auto Jump' \
  --data-urlencode 'kind=loadstring' \
  --data-urlencode 'thumbnail=https://i.imgur.com/abc.png' \
  --data-urlencode 'code=loadstring(game:HttpGet("https://example.com/x.lua"))()' \
  https://scripts.nitaimaarek.com/api/post
  → { "ok":true, "id":"…", "raw_url":"https://scripts.nitaimaarek.com/…/raw" }