How the Track-o-Bot API works

api-doc.md

Authentication

Access any profile page by providing the username and API key (generated in the settings -> API) , e.g. https://trackobot.com/profile/history.json?username=cool-ancient-tree-1337&token=fhyf238cv2eh879

JSON

Any profile page can be requested as JSON. Simply add .json at the end of the url (but before the query string which starts with ?), see example above.

Use the browser to see the JSON structure. JSONView is an excellent browser extension which shows JSON in a nice way.

POSTing

You can upload results with POSTing to /profile/results.json (don't forget to add the username and API key at the end).

The body of the POST should look like this:

{
   "result": {
     "hero": "Shaman",
     "opponent": "Warrior",
     "mode": "ranked",
     "coin": true,
     "win": true
   }
 }

You can include additional (optional) information, e.g.:

{
 "result": {
   "hero": "Shaman",
   "opponent": "Warrior",
   "mode": "ranked",
   "coin": true,
   "win": true,
   "duration": 634,
   "card_history": [
     {
       "card_id": "EX1_405",
       "player": "opponent"
     },
     {
       "card_id": "GAME_005",
       "player": "me",
       "turn": 3
     }
   ]
 }
}

@fverdoja I just had success POSTing the following result to https://trackobot.com/profile/results.json after:

1. Setting the HTTP Content-Type header to application/json
2. Setting the HTTP Authorization header to Basic USERNAME:TOKEN
   • make sure to base64 encode the username:token portion as per the spec

{
  "result": {
    "hero": "Hunter",
    "opponent": "Warlock",
    "mode": "ranked",
    "rank": 17,
    "coin": true,
    "win": false,
    "added": "2017-02-12T17:52:35Z"
  },
  "username": "XXX",
  "token": "XXX"
}

I got back a 201 Created.

You'll note that I have the authorization included in both the headers and the JSON body. Looking through the source code, it appears that the headers are what the Track-o-Bot app uses, but i threw it into the body as well just because the doc above is pretty vague. Feel free to let us know if it works without them in the JSON body.

@justinpawela I tried your method, but it didn't work (404) ☹️. Does it still work for you?

Never mind, it still works. Body username and token are necessary.