VRChat Web API

The HTTP API at api.vrchat.cloud/api/1 that backs the VRChat client and the vrchat.com website — authentication, users, friends, worlds, avatars, instances, groups, files and notifications. VRChat operates this API publicly but explicitly does not document it, publish a machine-readable specification for it, or support third-party use of it. The only first-party guidance is the API section of the Creator Guidelines, which sets User-Agent, rate-limit and credential-handling rules for anyone who calls it anyway. The unauthenticated /api/1/config endpoint returns 200 with JSON and is the surface probed for this profile.

API entry from apis.yml

apis.yml Raw ↑
aid: vrchat:vrchat-web-api
name: VRChat Web API
description: The HTTP API at api.vrchat.cloud/api/1 that backs the VRChat client and the vrchat.com website
  — authentication, users, friends, worlds, avatars, instances, groups, files and notifications. VRChat
  operates this API publicly but explicitly does not document it, publish a machine-readable specification
  for it, or support third-party use of it. The only first-party guidance is the API section of the Creator
  Guidelines, which sets User-Agent, rate-limit and credential-handling rules for anyone who calls it
  anyway. The unauthenticated /api/1/config endpoint returns 200 with JSON and is the surface probed for
  this profile.
humanURL: https://hello.vrchat.com/creator-guidelines
baseURL: https://api.vrchat.cloud/api/1
tags:
- Virtual Reality
- Social Networks
- Gaming
x-support: undocumented-unsupported
x-evidence:
  fetched: '2026-08-05'
  url: https://api.vrchat.cloud/api/1/config
  http_status: 200
  content_type: application/json
  note: Live anonymous endpoint. No OpenAPI/Swagger published — /openapi.json, /openapi.yaml, /swagger.json,
    /api-docs, /docs and /redoc all return 404 on api.vrchat.cloud.
properties:
- type: Conventions
  url: conventions/vrchat-conventions.yml
- type: RateLimits
  url: conventions/vrchat-conventions.yml