Response

{
  "items": [
    { "id": 1, "slug": "pokemon", "name": "Pokémon TCG", "publisher": "The Pokémon Company",
      "logo_url": null, "website_url": "https://www.pokemon.com/tcg",
      "description": "...", "created_at": "2024-09-12T10:00:00Z" },
    ...
  ]
}

curl https://collectorstashmarket.com/tcgs

const r = await fetch("https://collectorstashmarket.com/tcgs");
const { items } = await r.json();

import requests
items = requests.get("https://collectorstashmarket.com/tcgs").json()["items"]

Path parameters

Response

{ "id": 1, "slug": "pokemon", "name": "Pokémon TCG", "publisher": "...",
  "logo_url": null, "website_url": "...", "description": "..." }

curl https://collectorstashmarket.com/tcgs/pokemon

const tcg = await (await fetch("https://collectorstashmarket.com/tcgs/pokemon")).json();

import requests
tcg = requests.get("https://collectorstashmarket.com/tcgs/pokemon").json()

Path / query

Response

{ "items": [
    { "id": 1, "tcg_id": 1, "name": "Base Set", "code": "BS",
      "release_date": "1999-01-09", "total_cards": 102, "logo_url": null }
  ],
  "total": 165, "limit": 50, "offset": 0 }

curl "https://collectorstashmarket.com/pokemon/sets?limit=10"

const sets = (await (await fetch(
  "https://collectorstashmarket.com/pokemon/sets?limit=10"
)).json()).items;

import requests
sets = requests.get(
    "https://collectorstashmarket.com/pokemon/sets",
    params={"limit": 10},
).json()["items"]

Response

{ "id": 1, "tcg_id": 1, "name": "Base Set", "code": "BS",
  "release_date": "1999-01-09", "total_cards": 102 }

curl https://collectorstashmarket.com/pokemon/sets/1

const set = await (await fetch("https://collectorstashmarket.com/pokemon/sets/1")).json();

set_obj = requests.get("https://collectorstashmarket.com/pokemon/sets/1").json()

Response

{ "set_id": 1, "card_count": 102, "min_price": 0.05, "max_price": 5800.00,
  "avg_price": 32.41, "total_value": 3308 }

Query

Response

[ { "card_id": 891, "name": "Charizard", "number": "4", "rarity": "Holo Rare",
    "image_url": "/static/images/pokemon/891.webp", "best_price": 894.61,
    "tcg_slug": "pokemon" }, ... ]

curl "https://collectorstashmarket.com/api/sets/1/top-cards?limit=5"

const top = await (await fetch(
  "https://collectorstashmarket.com/api/sets/1/top-cards?limit=5"
)).json();

top = requests.get(
    "https://collectorstashmarket.com/api/sets/1/top-cards",
    params={"limit": 5}
).json()

Query

Response

{ "items": [{ "id": 891, "card_set_id": 4, "name": "Charizard",
    "number": "4", "rarity": "Holo Rare", "card_type": "Pokémon",
    "image_url": "https://...", "local_image_url": "/static/images/pokemon/891.webp",
    "attributes": {...} }],
  "total": 20543, "limit": 50, "offset": 0 }

curl "https://collectorstashmarket.com/pokemon/cards?set_id=4&limit=10"

const cards = (await (await fetch(
  "https://collectorstashmarket.com/pokemon/cards?set_id=4&limit=10"
)).json()).items;

cards = requests.get(
    "https://collectorstashmarket.com/pokemon/cards",
    params={"set_id": 4, "limit": 10},
).json()["items"]

Response

{ "id": 891, "name": "Blaine's Charizard", "number": "2",
  "rarity": "Rare Holo", "card_type": "Pokémon",
  "image_url": "...", "local_image_url": "/static/images/pokemon/891.webp",
  "attributes": {...},
  "prices": [
    { "source": "tcgplayer", "market_price": 894.61, "currency": "USD", "variant": "1st_edition_holo" },
    { "source": "cardmarket", "market_price": 737.33, "currency": "EUR", "variant": "normal" }
  ]
}

Query

Query

Query

curl "https://collectorstashmarket.com/api/compare?ids=891,11172,9669"

const data = await (await fetch(
  "https://collectorstashmarket.com/api/compare?ids=891,11172,9669"
)).json();

data = requests.get(
    "https://collectorstashmarket.com/api/compare",
    params={"ids": "891,11172,9669"},
).json()

Query

Query

Response

{ "card_id": 891, "variant": "normal",
  "cardmarket_url": "https://www.cardmarket.com/en/Pokemon/Products/Singles/Base-Set/Charizard",
  "tcgplayer_url":  "https://www.tcgplayer.com/product/...",
  "ebay_url":       "https://www.ebay.com/sch/i.html?_nkw=Charizard+Base+Set" }

Response

{ "card_id": 891, "chain": [
  { "stage": "Basic",  "name": "Charmander", "card_id": 12 },
  { "stage": "Stage 1","name": "Charmeleon", "card_id": 56 },
  { "stage": "Stage 2","name": "Charizard",  "card_id": 891 }
]}

Query

Query

Response

{ "items": [
  { "id": 891, "name": "Blaine's Charizard", "number": "2",
    "rarity": "Rare Holo", "card_type": "Pokémon",
    "display_image_url": "/static/images/pokemon/891.webp",
    "set_name": "Gym Challenge", "set_code": "GYM2",
    "tcg_slug": "pokemon", "best_price": 737.33,
    "price_change_7d": null }
], "total": 41 }

curl "https://collectorstashmarket.com/api/search?q=Charizard&tcg_slug=pokemon&limit=5"

const r = await fetch(
  "https://collectorstashmarket.com/api/search?q=Charizard&tcg_slug=pokemon&limit=5"
);
const { items } = await r.json();

items = requests.get(
    "https://collectorstashmarket.com/api/search",
    params={"q": "Charizard", "tcg_slug": "pokemon", "limit": 5},
).json()["items"]

Common errors

// 422 — q is missing
{ "detail": [{"loc":["query","q"], "msg":"field required", "type":"value_error.missing"}] }

// 429
{ "detail": "Rate limit exceeded. Retry after 42 seconds." }

Response

{ "card_id": 891,
  "sources": [
    { "source": "tcgplayer",  "market_price": 894.61, "low_price": 1070.99,
      "high_price": 2140.0, "currency": "USD", "variant": "1st_edition_holo",
      "recorded_at": "2026-05-06T08:49:14Z" },
    { "source": "cardmarket", "market_price": 737.33, "low_price": 70.0,
      "high_price": 692.02, "currency": "EUR", "variant": "normal",
      "recorded_at": "2026-05-06T08:35:59Z" }
  ]
}

curl https://collectorstashmarket.com/api/cards/891/prices

const data = await (await fetch(
  "https://collectorstashmarket.com/api/cards/891/prices"
)).json();
console.log(data.sources.map(s => `${s.source}: ${s.market_price} ${s.currency}`));

data = requests.get("https://collectorstashmarket.com/api/cards/891/prices").json()
for s in data["sources"]:
    print(f'{s["source"]:11s} {s["market_price"]:>10.2f} {s["currency"]}')

Query

Response

{ "card_id": 891,
  "snapshots": [
    { "date": "2026-04-08", "source": "tcgplayer", "market_price": 870.0 },
    ...
  ],
  "analysis": {
    "change_7d":  1.2,
    "change_30d": -3.4,
    "change_90d": 18.7,
    "volatility": 0.041,
    "trend": "rising"
  }
}

Query

Query

Query

Query

Response

{ "gainers":       [{ "card_id": 361, "name": "Fire Energy", "set_name": "Base",
                       "tcg_slug": "pokemon", "current_price": 7.09,
                       "change_pct": 500.0, "change_abs": 35.45 }],
  "losers":        [...],
  "most_volatile": [...],
  "period": "7d", "tcg": "all" }

curl "https://collectorstashmarket.com/api/market/movers?tcg=pokemon&period=30d&limit=10"

const m = await (await fetch(
  "https://collectorstashmarket.com/api/market/movers?tcg=pokemon&period=30d&limit=10"
)).json();
m.gainers.forEach(c => console.log(c.name, c.change_pct + "%"));

m = requests.get(
    "https://collectorstashmarket.com/api/market/movers",
    params={"tcg": "pokemon", "period": "30d", "limit": 10},
).json()
for c in m["gainers"]:
    print(f'{c["name"]:30s} {c["change_pct"]:+.1f}%')

Earlier version of the movers endpoint. Returns a flat list of cards (gainers OR losers, not both) with price-change deltas based on monthly snapshots.

Query

Query

Response

{ "total_cards": 133317, "total_prices": 2021340, "total_users": 7,
  "total_sellers": 6, "tcgs_covered": 12, "last_update": "..." }

Query

Query

Response

{ "card_id": 891, "card_name": "Charizard",
  "current_price": 894.61, "predicted_price": 921.04,
  "predicted_change_pct": 3.0, "confidence": "medium",
  "data_points": 12, "trend": "rising", "slope_per_day": 0.88,
  "future_points": [
    { "date": "2026-05-13", "price": 901.64 }, ...
  ] }

curl "https://collectorstashmarket.com/api/cards/891/predict?days_ahead=60"

const p = await (await fetch(
  "https://collectorstashmarket.com/api/cards/891/predict?days_ahead=60"
)).json();

p = requests.get(
    "https://collectorstashmarket.com/api/cards/891/predict",
    params={"days_ahead": 60},
).json()

Query

Query

Response

{ "card_id": 891, "price_summary": { "market_price_eur": 712.50,
    "low_eur": 670.00, "high_eur": 749.99, "confidence": 0.92 },
  "source_breakdown": [
    { "source": "cardmarket",  "median_eur": 710.00, "n_listings": 28 },
    { "source": "cardtrader",  "median_eur": 732.40, "n_listings": 11 }
  ],
  "correlation_notes": []
}

Query

Query

Response

{ "card_id": 891, "score": 72,
  "components": {
    "price_momentum": 18, "rarity": 22,
    "liquidity": 12, "source_agreement": 20
  },
  "label": "Strong hold" }

Body

Response

{ "ok": true, "user_id": 42, "username": "alice" }
// + Set-Cookie: tcg_session=...

curl -c cookies.txt -X POST https://collectorstashmarket.com/auth/register \
  -H 'Content-Type: application/json' \
  -d '{"username":"alice","email":"a@example.com","password":"hunter2hunter2"}'

const r = await fetch("https://collectorstashmarket.com/auth/register", {
  method: "POST",
  credentials: "include",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({ username: "alice", email: "a@example.com", password: "hunter2hunter2" }),
});
const data = await r.json();

s = requests.Session()
s.post("https://collectorstashmarket.com/auth/register",
       json={"username":"alice","email":"a@example.com","password":"hunter2hunter2"})

Common errors

// 400 — username taken or invalid email
{ "detail": "username already taken" }
// 400 — missing field
{ "detail": "username, email, and password required" }

Body

curl -c cookies.txt -X POST https://collectorstashmarket.com/auth/login \
  -H 'Content-Type: application/json' \
  -d '{"username":"alice","password":"hunter2hunter2"}'

await fetch("https://collectorstashmarket.com/auth/login", {
  method: "POST",
  credentials: "include",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({ username: "alice", password: "hunter2hunter2" }),
});

s.post("https://collectorstashmarket.com/auth/login",
       json={"username":"alice","password":"hunter2hunter2"})

Response

{ "id": 2, "username": "jeffreyplv", "email": "jeff@example.com",
  "is_admin": true, "is_seller": true, "created_at": "2025-09-12T..." }

Body

Body

Body

The account is flagged for deletion; you have 24h to cancel.

Body

Response

{ "items": [
  { "id": 17, "name": "production",
    "prefix": "csm_prod_a4b3", "tier": "pro",
    "is_active": true, "daily_limit": 25000, "rate_limit_per_minute": 300,
    "calls_today": 1247, "last_used_at": "2026-05-06T15:42:11Z",
    "created_at": "2026-04-12T...", "expires_at": null }
]}

Body

Response

{ "id": 18, "name": "staging",
  "key": "csm_stg_e9c2b…f102", "tier": "free", ... }

Body

Query

Response

{ "items": [
  { "id": 132, "card_id": 891, "card_name": "Charizard",
    "tcg_slug": "pokemon", "set_name": "Base Set",
    "quantity": 2, "condition": "NM", "variant": "1st_edition_holo",
    "price_paid": 350.00, "graded": false, "grade": null,
    "current_value": 894.61, "image_url": "/static/images/pokemon/891.webp",
    "added_at": "2025-12-04T..." }
], "total": 47 }

Body

curl -b cookies.txt -X POST https://collectorstashmarket.com/collection/add \
  -H 'Content-Type: application/json' \
  -d '{"card_id":891,"quantity":1,"condition":"NM","price_paid":300}'

await fetch("https://collectorstashmarket.com/collection/add", {
  method: "POST", credentials: "include",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({ card_id: 891, quantity: 1, condition: "NM", price_paid: 300 }),
});

s.post("https://collectorstashmarket.com/collection/add",
       json={"card_id": 891, "quantity": 1, "condition": "NM", "price_paid": 300})

Body: any of quantity, condition, variant, price_paid, graded, grade.

Response

{ "total_value": 12483.41, "card_count": 47,
  "change_24h": 184.20, "change_24h_pct": 1.5,
  "change_7d": -342.10, "change_7d_pct": -2.7,
  "by_tcg": {"pokemon": 9234.50, "mtg": 1842.91, "yugioh": 1406.0},
  "top_card": { "card_id": 891, "name": "Charizard", "value": 894.61 } }

Returns text/csv with columns: card_id, name, set, tcg, quantity, condition, variant, price_paid, current_value.

multipart/form-data with a file field. Header row required: card_id, quantity, condition, price_paid.

Body

curl -b cookies.txt -X POST https://collectorstashmarket.com/wishlist/add \
  -H 'Content-Type: application/json' -d '{"card_id":891,"max_price":750}'

await fetch("https://collectorstashmarket.com/wishlist/add", {
  method:"POST", credentials:"include",
  headers:{"Content-Type":"application/json"},
  body: JSON.stringify({ card_id: 891, max_price: 750 })
});

s.post("https://collectorstashmarket.com/wishlist/add",
       json={"card_id": 891, "max_price": 750})

Response

{ "items": [
  { "id": 7, "card_id": 891, "card_name": "Charizard",
    "target_price": 800.00, "condition": "below",
    "currency": "EUR", "is_active": true,
    "triggered_at": null, "created_at": "2026-04-15T..." }
]}

Body

Body

Body

Body

multipart/form-data with a file field. JPEG / PNG / WebP, ≤ 5 MB. Auto-cropped to 256×256 WebP.

Body

Response

{ "ok": true, "is_collection_public": true }

curl -b cookies.txt -X POST https://collectorstashmarket.com/me/privacy \
  -H 'Content-Type: application/json' \
  -d '{"is_collection_public": true}'

await fetch("https://collectorstashmarket.com/me/privacy", {
  method: "POST", credentials: "include",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({ is_collection_public: true })
});

s.post("https://collectorstashmarket.com/me/privacy",
       json={"is_collection_public": True})

Query

Body

curl -b cookies.txt -X POST https://collectorstashmarket.com/seller/listings \
  -H 'Content-Type: application/json' \
  -d '{"card_id":891,"price":650,"condition":"NM","quantity":1,"accepts_offers":true}'

await fetch("https://collectorstashmarket.com/seller/listings", {
  method:"POST", credentials:"include",
  headers:{"Content-Type":"application/json"},
  body: JSON.stringify({ card_id:891, price:650, condition:"NM", quantity:1, accepts_offers:true })
});

s.post("https://collectorstashmarket.com/seller/listings",
       json={"card_id":891,"price":650,"condition":"NM","quantity":1,"accepts_offers":True})

No body required. An optional variant field disambiguates when the listing has multiple variants.

Body (optional)

Response

{ "ok": true,
  "transaction_id": 4912,
  "redirect_url": "/checkout/4912",
  "amount": 650.00,
  "currency": "EUR",
  "buyer_total": 657.50,
  "handling_fee": 7.50 }

Errors

curl -b cookies.txt -X POST https://collectorstashmarket.com/api/listings/123/buy-now \
  -H 'Content-Type: application/json' -d '{}'

const r = await fetch("https://collectorstashmarket.com/api/listings/123/buy-now", {
  method: "POST", credentials: "include",
  headers: { "Content-Type": "application/json" },
  body: "{}"
});
const { redirect_url } = await r.json();
location.assign(redirect_url);

r = s.post("https://collectorstashmarket.com/api/listings/123/buy-now", json={})
print(r.json()["redirect_url"])

Owner-only. Idempotent within a 60-second window. Increments renewal_count on the listing for analytics.

Response

{ "ok": true,
  "expires_at": "2026-06-06T10:00:00Z",
  "renewal_count": 3 }

Public HTML page hit from the renewal-reminder email. The token is signed with SESSION_SECRET and contains the listing id + a 7-day TTL. Renews the listing on GET, then renders a confirmation page. No authentication needed — possession of the token is proof.

Query

Response

{ "marketplace_rate": 0.05,
  "marketplace_amt": 32.50,
  "image_protection_rate": 0.01,
  "image_protection_amt": 6.50,
  "total_amt": 39.00,
  "seller_payout": 611.00 }

curl 'https://collectorstashmarket.com/api/listings/fee-preview?price=650&image_protection=true'

const fees = await (await fetch(
  "https://collectorstashmarket.com/api/listings/fee-preview?price=650&image_protection=true"
)).json();

fees = requests.get("https://collectorstashmarket.com/api/listings/fee-preview",
                    params={"price": 650, "image_protection": True}).json()

Body

Creates a transaction in awaiting_payment state, marks the listing as sold.

Body

Body

multipart/form-data with a file field; expects the CSV format Cardmarket emits in "My account → Stock → Export".

Body

Body

Body

Each party can rate exactly once per transaction; second submit returns 409.

Response

{ "avg": 4.85,
  "count": 42,
  "recent_reviews": [
    { "rating": 5, "review": "Lightning-fast shipping, mint card.",
      "buyer": "ash_collector", "ts": "2026-05-04T18:22:11Z" },
    { "rating": 5, "review": "As described, would buy again.",
      "buyer": "misty99",      "ts": "2026-05-02T09:11:03Z" }
  ] }

curl https://collectorstashmarket.com/api/reputation/jeffreyplv

const rep = await (await fetch("https://collectorstashmarket.com/api/reputation/jeffreyplv")).json();

rep = requests.get("https://collectorstashmarket.com/api/reputation/jeffreyplv").json()

multipart/form-data with a file field. JPEG/PNG/WebP, ≤ 8 MB. Returns a permanent CDN-style URL to use in image_urls when creating a listing.

Response

{ "url": "/static/listing_images/2026/05/abc123.webp", "size": 184320 }

Case-insensitive. Codes are 6–8 chars, alphanumeric (no 0/O/1/I).

Response — valid code

{ "valid": true,
  "code": "K7H2QP",
  "status": "active",
  "card_name": "Charizard",
  "set_name": "Base Set",
  "condition": "NM",
  "seller_username": "jeffreyplv",
  "watermark_enabled": true,
  "created_at": "2026-05-01T10:14:08Z",
  "listing_url": "/listings/4912" }

Response — unknown / expired

{ "valid": false, "code": "K7H2QP" }

curl https://collectorstashmarket.com/api/verify/K7H2QP

const v = await (await fetch("https://collectorstashmarket.com/api/verify/K7H2QP")).json();
if (v.valid) console.log(v.card_name, v.seller_username);

v = requests.get("https://collectorstashmarket.com/api/verify/K7H2QP").json()
print(v.get("card_name"), v.get("seller_username"))

Plain HTML page with a search box. Enter a code → 302 to /verify/{code}.

Server-rendered result page. Renders the same data as /api/verify/{code} but in a styled card with the listing thumbnail and a "view listing" link.

Static help page explaining the watermark + confirmation code, where to find them, and what an "expired" status means.

Query

Response

{ "items": [
  { "id": 14, "sender_id": 2, "recipient_id": 5,
    "from_username": "jeffreyplv", "to_username": "cardchef",
    "listing_id": null, "subject": "Re: 🏆 Bod geaccepteerd",
    "body": "Thnx!", "is_read": false, "is_system": false,
    "parent_id": null, "created_at": "2026-04-15T...",
    "direction": "sent" }
], "messages": [...], "unread_count": 0, "folder": "inbox" }

Body

curl -b cookies.txt -X POST https://collectorstashmarket.com/api/messages \
  -H 'Content-Type: application/json' \
  -d '{"to_username":"cardchef","body":"Is this card still available?","listing_id":42}'

await fetch("https://collectorstashmarket.com/api/messages", {
  method:"POST", credentials:"include",
  headers:{"Content-Type":"application/json"},
  body: JSON.stringify({ to_username:"cardchef", body:"Is this card still available?", listing_id:42 })
});

s.post("https://collectorstashmarket.com/api/messages",
       json={"to_username":"cardchef", "body":"Is this card still available?", "listing_id":42})

Query

Marks all received messages as read on each call.

Body

Response

{ "items": [
  { "id": 1234, "kind": "alert_triggered",
    "title": "Charizard hit your target", "body": "Now €712.50 (target: €750)",
    "data": {"card_id": 891, "alert_id": 7},
    "is_read": false, "created_at": "..." },
  { "id": 1233, "kind": "new_message",
    "title": "Bericht van cardchef", "body": "Is this card still available?",
    "data": {"message_id": 14, "from_username": "cardchef"},
    "is_read": false, "created_at": "..." }
]}

Body

multipart/form-data with one image field. JPEG / PNG / WebP, ≤ 10 MB.

Form fields

Response

{ "scan_id": "20260506_215125",
  "candidates": [
    { "card_id": 891, "name": "Charizard", "set_name": "Base Set",
      "tcg_slug": "pokemon", "score": 0.91, "confidence": "high",
      "components": { "embedding":0.88, "collector_number":1.0,
                      "name":0.95, "feature_match":0.7, "set_context":1.0 } }
  ],
  "capture_quality": {
    "overall_score": 0.78, "color_reliability": "high",
    "glare_severity": "none", "verdict": "likely_real", "fake_risk": 0.04
  } }

curl -b cookies.txt -X POST https://collectorstashmarket.com/api/cards/recognize \
  -F image=@charizard.jpg -F tcg_slug=pokemon

const fd = new FormData();
fd.append("image", fileInput.files[0]);
fd.append("tcg_slug", "pokemon");
const r = await fetch("https://collectorstashmarket.com/api/cards/recognize", {
  method: "POST", credentials: "include", body: fd,
});
const data = await r.json();

with open("charizard.jpg", "rb") as f:
    r = s.post("https://collectorstashmarket.com/api/cards/recognize",
               files={"image": f}, data={"tcg_slug": "pokemon"})
print(r.json()["candidates"][0])

Tells the recogniser the user actually owned card card_id from scan scan_id. The image is appended to static/confirmed_scans/{tcg}/{card_id}/ for self-learning. Does not consume quota.

Body

Same form-data shape as /recognize; returns just the contour overlay so the camera UI can prompt "move closer" before consuming a recognise quota slot.

Returns the camera + recognise UI. Unauthenticated requests 302 to /login?next=/scan-pwa. Has its own manifest.json + service worker so users can "Add to Home Screen".

Review screen after a scan session: list of recognised cards with confidence, edit/discard controls, and a "save to collection / create listings" action.

Owner endpoint. Creates a session bound to the calling user. The returned claim_token is the only credential the phone needs — keep it on the desktop and never log it.

Response

{ "session_id": "01HW6Q8...",
  "claim_token": "ct_8e2a4c91f3...",
  "confirmation_code": "428193",
  "qr_url":   "/api/scan-sessions/01HW6Q8.../qr.png",
  "deeplink": "https://collectorstashmarket.com/scan-pwa?session=01HW6Q8...&t=ct_8e2a4c91f3...",
  "expires_at": "2026-05-07T13:32:11Z" }

curl -b cookies.txt -X POST https://collectorstashmarket.com/api/scan-sessions

const r = await fetch("https://collectorstashmarket.com/api/scan-sessions", {
  method: "POST", credentials: "include"
});
const session = await r.json();

session = s.post("https://collectorstashmarket.com/api/scan-sessions").json()

Accepts either the owner's session cookie or a ?token=ct_… query string. Used by both sides to poll if SSE isn't an option.

Response

{ "session_id": "01HW6Q8...",
  "status": "claimed",                  // pending | claimed | active | completed | expired
  "device_name": "Pixel 8",
  "results": [ /* card objects pushed by the phone */ ],
  "expires_at": "2026-05-07T13:32:11Z" }

Streams every state change on the session. Owner-only (session cookie). Use EventSource in browsers. Events:

event: claimed   data: { "device_name": "Pixel 8" }
event: photo     data: { "card_index": 0, "image_url": "/static/scans/.../0.webp" }
event: result    data: { "card_index": 0, "recognition": { ... } }
event: completed data: { "count": 12 }

Authenticated by the ?token=ct_… query parameter (or X-Scan-Token header). Marks the session as claimed and pushes a claimed event on the desktop SSE stream.

Body

multipart/form-data with a single file field. The server applies a +90° clockwise rotation (matches the typical hand-held landscape capture) and strips EXIF before saving. Token-authenticated.

Response

{ "ok": true,
  "image_url": "/static/scans/01HW6Q8.../0.webp",
  "size": 184320 }

Token-authenticated. Body batches one or more cards. Each entry can include a pre-computed recognition object (from a phone-side /api/cards/recognize call) — saves an extra round-trip.

Body

{ "cards": [
  { "card_index": 0,
    "captured_at": "2026-05-07T13:14:01Z",
    "image_url": "/static/scans/.../0.webp",
    "recognition": { /* /api/cards/recognize response */ } }
]}

Marks the session completed and pushes a completed event on the desktop SSE stream. Token-authenticated. After this, no further uploads are accepted.

Returns a 256×256 PNG of the QR code that encodes the deeplink. Public — no auth — because the URL itself contains the (single-use, time-bound) claim_token.

GET /api/scan-sessions/01HW6Q8.../qr.png  →  Content-Type: image/png

Response

{ "status": "ok" }

Response

{ "status": "ok", "db": true }   // 200
{ "status": "degraded", "db": false }   // 503

Response

{ "status": "ok", "cards": 133317, "prices": 2021340,
  "users": 7, "sellers": 6, "active_alerts": 0,
  "db_size_mb": 1250.13, "version": "1.0.0" }

curl https://collectorstashmarket.com/api/health

const h = await (await fetch("https://collectorstashmarket.com/api/health")).json();

h = requests.get("https://collectorstashmarket.com/api/health").json()

Redirects to the localised stats page; for JSON use /api/stats.

Response

{ "items": [
  { "target": "api", "status": "operational", "last_check": "...", "latency_ms": 41 },
  { "target": "redis", "status": "operational", "last_check": "...", "latency_ms": 1 },
  { "target": "scrapers", "status": "operational", "last_check": "...", "latency_ms": null }
]}

Query

Response

{ "android": { "version_name": "1.10.0", "version_code": 21, "min_supported": "1.8.0", "release_notes": "..." },
  "ios":     { "version_name": "1.10.0", "version_code": 21, "min_supported": "1.8.0", "release_notes": "..." } }

Body

Body

Response

{ "seller_fee_pct": 5.0, "buyer_protection_pct": 0.0,
  "min_payout_eur": 25.0, "site_announcement": null }