Mojang

aid: mojang
name: Mojang
description: >-
  Mojang Studios is the developer of Minecraft. The Mojang / Minecraft Services API surface covers Minecraft player
  identity (UUID and profile lookup), skins and capes, name history and name change, server session verification,
  blocked server lists, player attributes (privacy, chat, friends settings), friends graph, presence, public keys for
  profile signature verification, and account entitlements. Endpoints span three hosts: the legacy api.mojang.com, the
  session-server sessionserver.mojang.com (Yggdrasil), and the modern Microsoft-side api.minecraftservices.com. Most
  read endpoints are public and unauthenticated; player-account endpoints require a Bearer Minecraft access token
  obtained via the Xbox Live / XSTS authentication chain.
url: https://minecraft.wiki/w/Mojang_API
image: https://www.minecraft.net/etc.clientlibs/minecraft/clientlibs/main/resources/img/menu/menu-buy--reversed.gif
specificationVersion: '0.20'
created: '2026-05-28'
modified: '2026-05-30'
x-source: public-apis/public-apis
x-category: Games & Comics
x-type: company
x-tier: 2
x-tier-reason: enriched-from-public-documentation
tags:
  - Games And Comics
  - Minecraft
  - Gaming
  - Identity
  - Player Profiles
  - Session
  - Public APIs
apis:
  - name: Mojang Public API
    description: >-
      Legacy public Mojang API (api.mojang.com) covering username-to-UUID lookup, batch UUID resolution, and historical
      profile endpoints. Most operations are being migrated to api.minecraftservices.com but remain live for backward
      compatibility.
    humanURL: https://minecraft.wiki/w/Mojang_API
    baseURL: https://api.mojang.com
    tags:
      - Identity
      - Player Profiles
      - Public
    properties:
      - type: Documentation
        url: https://minecraft.wiki/w/Mojang_API
      - type: OpenAPI
        url: openapi/mojang-public-api-openapi.yml
  - name: Mojang Session Server
    description: >-
      Mojang's Yggdrasil session server (sessionserver.mojang.com) used during the Minecraft login handshake. Provides
      the canonical skin and cape texture lookup keyed by player UUID, the server-side hasJoined verification used by
      Minecraft servers, the join endpoint used by clients, and the blocked-servers SHA-1 hash list.
    humanURL: https://minecraft.wiki/w/Mojang_API
    baseURL: https://sessionserver.mojang.com
    tags:
      - Session
      - Authentication
      - Textures
      - Server
    properties:
      - type: Documentation
        url: https://minecraft.wiki/w/Mojang_API
      - type: OpenAPI
        url: openapi/mojang-session-server-openapi.yml
  - name: Minecraft Services API
    description: >-
      Modern Microsoft-managed Minecraft Services API (api.minecraftservices.com) covering authenticated player profile
      management, name change, skin and cape management, player attributes (chat / friends / profanity filter),
      blocklist, friends graph, presence reporting, signature keypair issuance, public Mojang keys, and entitlement /
      ownership checks. Requires a Minecraft Bearer access token obtained via the Xbox Live authentication chain for
      player-scoped endpoints.
    humanURL: https://minecraft.wiki/w/Mojang_API
    baseURL: https://api.minecraftservices.com
    tags:
      - Identity
      - Player Profiles
      - Friends
      - Presence
      - Skins
      - Capes
      - Entitlements
      - Authenticated
    properties:
      - type: Documentation
        url: https://minecraft.wiki/w/Mojang_API
      - type: OpenAPI
        url: openapi/mojang-minecraft-services-openapi.yml
common:
  - type: Website
    url: https://www.minecraft.net
  - type: Documentation
    url: https://minecraft.wiki/w/Mojang_API
  - type: Documentation
    url: https://minecraft.wiki/w/Microsoft_authentication
    title: Microsoft / Xbox Authentication Flow
  - type: GitHubOrganization
    url: https://github.com/Mojang
  - type: GitHubRepository
    url: https://github.com/Mojang/brigadier
    title: Brigadier Command Parser
  - type: GitHubRepository
    url: https://github.com/Mojang/DataFixerUpper
    title: DataFixerUpper
  - type: GitHubRepository
    url: https://github.com/Mojang/bedrock-protocol-docs
    title: Bedrock Network Protocol Docs
  - type: GitHubRepository
    url: https://github.com/Mojang/bedrock-samples
    title: Bedrock Edition Add-on Samples
  - type: GitHubRepository
    url: https://github.com/Mojang/minecraft-creator-tools
    title: Minecraft Creator Tools
  - type: GitHubRepository
    url: https://github.com/Mojang/minecraft-debugger
    title: Minecraft VS Code Debugger
  - type: PublicAPIsListing
    url: https://github.com/public-apis/public-apis
  - type: RateLimits
    url: rate-limits/mojang-rate-limits.yml
  - type: Vocabulary
    url: vocabulary/mojang-vocabulary.yaml
  - type: SpectralRules
    url: rules/mojang-spectral-rules.yml
  - type: JSONLD
    url: json-ld/mojang-api-context.jsonld
features:
  - name: Public UUID Lookup
    description: >-
      Look up a Minecraft player's UUID by username (case-insensitive) without authentication via
      /users/profiles/minecraft/{username}.
  - name: Batch UUID Resolution
    description: >-
      Resolve up to ten usernames to UUIDs in a single POST call to /profiles/minecraft (legacy) or
      /minecraft/profile/lookup/bulk/byname (modern).
  - name: Skin and Cape Textures
    description: >-
      Retrieve the Base64-encoded textures property for any player via sessionserver /session/minecraft/profile/{UUID},
      optionally signed.
  - name: Server Session Verification
    description: >-
      Yggdrasil hasJoined / join handshake used by every Minecraft server and client to validate that a logging-in
      player is authenticated.
  - name: Blocked Server List
    description: SHA-1 hash list of servers Mojang has flagged, served as plain text from sessionserver.mojang.com/blockedservers.
  - name: Authenticated Player Profile
    description: >-
      Fetch the signed-in player's own profile including all owned skins and capes via /minecraft/profile with Bearer
      auth.
  - name: Skin and Cape Management
    description: >-
      Change, upload, reset, hide, and show skins and capes for the authenticated player via /minecraft/profile/skins
      and /capes/active.
  - name: Name Change
    description: >-
      Check name availability, query cooldown / change history, and rename the authenticated player via
      /minecraft/profile/name endpoints.
  - name: Friends and Presence
    description: >-
      Manage the player's friends graph, accept and reject requests, and publish presence (offline / online / playing)
      for friends.
  - name: Player Attributes and Blocklist
    description: >-
      Read and modify the player's profanity filter, friends preferences, and chat settings, and read the player
      blocklist.
  - name: Signature Keypair and Public Keys
    description: Issue per-player RSA signing keypairs and serve Mojang's rotating public keys for chat signature verification.
useCases:
  - name: Minecraft Server Authentication
    description: >-
      Minecraft Java Edition servers call sessionserver.hasJoined during the login handshake to validate a player's
      session against Mojang.
  - name: Player Skin Display
    description: >-
      Third-party sites and tools (NameMC, MinecraftSkinStealer, server lobby plugins) read the textures property from
      sessionserver to render player skins and capes.
  - name: Username History Tools
    description: >-
      Username history dashboards once relied on /user/profiles/{uuid}/names; since deprecation tools now snapshot
      lookups from the public name-to- UUID endpoint over time.
  - name: Launcher Authentication
    description: >-
      The Microsoft / Xbox Live -> XSTS -> Minecraft access-token flow backs the official Minecraft launcher and every
      third-party launcher.
  - name: Blocked Server Enforcement
    description: >-
      Client-side enforcement of Mojang's EULA blocklist by hashing the server address and checking it against
      /blockedservers.
  - name: Community Skin Galleries
    description: >-
      Skin upload sites use the authenticated skin endpoints to push player- selected skins to a signed-in Minecraft
      account.
integrations:
  - name: Xbox Live
    description: >-
      Mandatory upstream identity provider for Microsoft-era Minecraft accounts; supplies the XSTS token that is
      exchanged for a Minecraft access token.
  - name: Microsoft Identity Platform
    description: >-
      OAuth 2.0 device-code and authorization-code flows against login.microsoftonline.com originate the access token
      used in the Xbox Live chain.
  - name: Minecraft Java Edition Servers
    description: Every Java Edition server speaks the session-server protocol to verify joining clients.
  - name: Minecraft Realms
    description: >-
      Mojang's hosted Realms service consumes the same identity, friends, and presence surface for invites and join
      flows.
solutions:
  - name: Minecraft Account Identity
    description: >-
      Resolve, verify, and manage Minecraft player identities across the legacy Mojang and modern Minecraft Services
      APIs from a single surface.
  - name: Minecraft Server Session Trust
    description: >-
      Use the Yggdrasil session-verification surface plus the blocked- servers list to validate clients and enforce
      Mojang's server policy.
  - name: Player Personalization at Scale
    description: Programmatic skin, cape, profanity, and friends management for hosted Minecraft platforms and community tools.
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com