Fortnite Sniper API

Pro and Elite plans can create a key. Send it as a bearer token. Only a name that comes back available uses one hit on the key owner’s account. Taken names, invalid names, errors, throttles, and retries are free. Keys are limited per minute. Base URL: https://fortnitesniper.com

Check a name

POST /api/v1/check

curl https://fortnitesniper.com/api/v1/check \
  -H "Authorization: Bearer snipr_your_key" \
  -H "Content-Type: application/json" \
  -d "{\"name\":\"Example\"}"

Python

import urllib.request
req = urllib.request.Request(
    "https://fortnitesniper.com/api/v1/check",
    data=b'{"name":"Example"}',
    headers={"Authorization": "Bearer snipr_your_key", "Content-Type": "application/json"},
)
print(urllib.request.urlopen(req).read().decode())

JavaScript

const response = await fetch("https://fortnitesniper.com/api/v1/check", {
  method: "POST",
  headers: {
    Authorization: "Bearer snipr_your_key",
    "Content-Type": "application/json",
  },
  body: JSON.stringify({ name: "Example" }),
});
console.log(await response.json());

Usage for the key: GET /api/v1/usage with the same Authorization header. The usage object includes hitsRemaining, allowanceUsed, allowanceLimit, credits, and period (lifetime or month). Responses include available, taken, invalid, limited, or error. Only available is charged. A 402 with upgrade: true means the account is out of available hits and the name was not returned. Keys start with snipr_.

Plan limits

Free is 5-letter scans only and 2 available hits, then the trial ends. Starter is 300 a month at $25 ($250 a year). Pro is 2,000 a month at $65 ($650 a year). Elite is 8,000 a month at $200, or $2,000 a year. Check packs are 100 checks for $10 and 500 checks for $45. Yearly checkout is 10 months of the monthly price for 12 months, and the monthly allowance stays the same. Paid allowances reset every 30 days from the payment date.

Accounts

Browser sign-in uses a session cookie. These JSON routes expect Content-Type: application/json. Signed-in changes also send the X-CSRF-Token header that matches the form-protection cookie.

• POST /api/auth/signup with username, email, password, passwordConfirm, and acceptedTerms true.
• POST /api/auth/login and POST /api/auth/logout.
• POST /api/auth/forgot and POST /api/auth/reset with a one-time token.
• GET /api/auth/verify and POST /api/auth/resend.
• POST /api/auth/password, POST /api/auth/email, and POST /api/auth/delete.

When ALLOW_DEV_LINKS=true and SMTP is not set, signup, resend, forgot-password, and email-change responses include the link on screen.