Standard OAuth 2.0
Authorization code flow with PKCE. Register your redirect URI, then send players to the iBunnyApp consent screen — no custom SDK required.
Drop one button into your sign-in screen. Players arrive with a verified Capygram identity, a friends list and an inbox already filled in — so your game never starts empty.
Authorization code flow with PKCE. Register your redirect URI, then send players to the iBunnyApp consent screen — no custom SDK required.
Every player explicitly approves your game and can disconnect it from their iBunnyApp dashboard whenever they want.
Read a player's iBunnyApp friends and messages so your lobby feels populated on their very first session.
/.well-known/oauth-protected-resource, then send the player through the standard OAuth 2.0 authorization code flow with PKCE and the scopes openid email profile.Already run your own accounts? Players can link an existing game account to their iBunnyApp profile instead and keep both — progress stays with you, the social layer syncs across the Capygram network.
Create a studio accountEvery request carries two headers: x-bunnycoin-key (which game is asking) and Authorization: Bearer <player access token> (who they are asking for). Reads run as the player, so they only ever see their own data.
GET /api/public/v1/me → profile, username, avatar, Bunnycoin balance
GET /api/public/v1/friends → accepted friends + pending requests
GET /api/public/v1/messages[?with=id] → inbox, or one conversation
POST /api/public/v1/messages { recipient_id, body }
GET /api/public/v1/wagers → the player's wagers and their status
POST /api/public/v1/wagers { action: "create", opponent_id, amount, note? }
{ action: "respond", wager_id, accept }
{ action: "cancel", wager_id }
{ action: "report", wager_id, winner_id }
GET /api/public/v1/bunnycoin → balance
POST /api/public/v1/bunnycoin { delta, memo?, external_ref? }Server-to-server jobs (leaderboard payouts, refunds) can skip the player token and pass user_id instead — that only works for players who connected your game. Always send a unique external_ref on balance changes so a retry is never applied twice. Errors come back as JSON: invalid_api_key, invalid_access_token, player_not_connected, insufficient_balance.
Wagers are escrowed by iBunnyApp and paid out to the winner once both players report the same result, so your game never has to hold funds.
Two free PDFs. Read the handbook yourself, then hand the AI guide to whichever coding assistant is building your game.
Plain-English walkthrough of what the platform does, how sign-in works, the two kinds of keys, your first afternoon of work and the questions studios always ask.
PDF · 5 pages
DownloadThe full machine-readable specification: OAuth 2.0 with PKCE, every endpoint with request and response schemas, error codes, security rules and a build checklist.
PDF · 8 pages
Download