DepotBox Tools

API Documentation

Public validation API reference for depot keys, app tokens, package tokens, and manifests.

Base URL http://depotbox.org/api/tools/v1

Endpoints

POST /validate/depot-keys

Validate depot decryption keys.

Request Body

{
  "keys": [
    { "depot_id": 12345, "depot_key": "abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789" }
  ]
}

Response

{
  "results": [
    { "depot_id": 12345, "valid": true }
  ]
}

Example

curl -X POST http://depotbox.org/api/tools/v1/validate/depot-keys \
  -H "Content-Type: application/json" \
  -d '{"keys":[{"depot_id":12345,"depot_key":"abcdef..."}]}'

POST /validate/app-tokens

Validate Steam app access tokens.

Request Body

{
  "tokens": [
    { "app_id": 730, "token": "1234567890" }
  ]
}

Response

{
  "results": [
    { "app_id": 730, "valid": true }
  ]
}

Example

curl -X POST http://depotbox.org/api/tools/v1/validate/app-tokens \
  -H "Content-Type: application/json" \
  -d '{"tokens":[{"app_id":730,"token":"1234567890"}]}'

POST /validate/package-tokens

Validate Steam package access tokens.

Request Body

{
  "tokens": [
    { "package_id": 100, "token": "9876543210" }
  ]
}

Response

{
  "results": [
    { "package_id": 100, "valid": true }
  ]
}

Example

curl -X POST http://depotbox.org/api/tools/v1/validate/pack-tokens \
  -H "Content-Type: application/json" \
  -d '{"tokens":[{"package_id":100,"token":"9876543210"}]}'

POST /validate/manifests

Check whether manifest IDs are current.

Request Body

{
  "manifests": [
    { "depot_id": 12345, "manifest_id": "1234567890123456" }
  ]
}

Response

{
  "results": [
    {
      "depot_id": 12345,
      "manifest_id": "1234567890123456",
      "current": false,
      "latest_manifest_id": "9876543210123456"
    }
  ]
}

POST /validate/all

Validate everything at once. All fields are optional. Max 500 total items across all fields.

Request Body

{
  "depot_keys": [{ "depot_id": 12345, "depot_key": "abcdef..." }],
  "app_tokens": [{ "app_id": 730, "token": "1234567890" }],
  "package_tokens": [{ "package_id": 100, "token": "9876543210" }],
  "manifests": [{ "depot_id": 12345, "manifest_id": "123456789" }]
}

Or paste a Lua/VDF script:

{ "text": "addappid(730)\\nsetManifestid(731, \\"123...\\", 0)" }

Response

{
  "depot_keys": [{ "depot_id": 12345, "valid": true }],
  "app_tokens": [{ "app_id": 730, "valid": true }],
  "package_tokens": [{ "package_id": 100, "valid": false }],
  "manifests": [{
    "depot_id": 12345,
    "manifest_id": "123456789",
    "current": false,
    "latest_manifest_id": "987654321"
  }]
}

Example

curl -X POST http://depotbox.org/api/tools/v1/validate/all \
  -H "Content-Type: application/json" \
  -d '{"depot_keys":[...],"manifests":[...]}'

POST /validate/parse

Parse input text only — extract depot keys, tokens, and manifests without validating.

Request Body

{ "text": "..." }

Error Responses

All error responses return a JSON body with an error field.

StatusCodeDescription
400Bad RequestInvalid request body or missing fields
413Payload Too LargeRequest body exceeds size limit
429Too Many RequestsRate limit exceeded
500Internal ErrorServer-side error, try again later
502Bad GatewayUpstream validation service error

Security Check

Complete the Cloudflare Turnstile challenge to access DepotBox Tools. Your session is verified for 1 hour.