Schotten Totten has a public HTTP API. Read endpoints are open — no key needed — and return only public, redacted data: profiles, completed games, and an iframe-able board view. Hidden hands and deck order are never exposed.
Private data (your own account) and writing bot moves require a Personal Access Token. Sign in, open Account settings, and create a token with the scopes you need. The token is shown once — store it safely and send it as an Authorization: Bearer header.
The full contract is described by an OpenAPI 3 document at /openapi.yaml. Paste that URL into any OpenAPI viewer, such as Swagger UI or Redoc, to browse every endpoint, parameter, and response.
Automated bot play mirrors Lichess: a token with the bot:play scope streams a game's state and submits one move at a time. Every move is validated on the server through the same engine as a human move, and external bot games are always unrated.