RSM Web API RESTJSON

Getting started

1. In RSM Web, open Settings → Developers → API Keys and choose Create key. You need settings manage access to see it.
2. Name the key after what will use it, pick when it expires, and give it access only to the modules it needs.
3. Copy the key when it is shown. It starts with rsm_ and is shown once; RSM Web keeps only a fingerprint of it, so a lost key has to be replaced.

Send the key in the Authorization header. The base URL is the address you open RSM Web on, followed by /api — port 3000 unless you changed it in config.json. The curl examples read both from environment variables, so the key stays out of your shell history:

export RSM_URL=http://your-server:3000
export RSM_KEY=rsm_your_key_here

Then ask for the server’s status. Every example shows the request as raw HTTP, headers included, and as a curl command:

GET /api/server/status
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/server/status" \
  -H "Authorization: Bearer $RSM_KEY"

200 OK

{
  "running": true,
  "pid": 4812,
  "startedAt": "2026-09-26T08:14:03.512Z",
  "rconConnected": true
}

Changing something works the same way, with a JSON body and a Content-Type header. This kicks a player:

POST /api/players/76561198000000001/kick
Authorization: Bearer rsm_your_key_here
Content-Type: application/json

{ "reason": "AFK" }

curl -X POST "$RSM_URL/api/players/76561198000000001/kick" \
  -H "Authorization: Bearer $RSM_KEY" \
  -H "Content-Type: application/json" \
  -d '{"reason":"AFK"}'

200 OK

{ "ok": true, "response": "" }

When it fails, the status says so and the body says why. The same request with a key that only has players view:

403 Forbidden

{ "error": "This API key needs manage access to players", "code": "FORBIDDEN" }

Keys and permissions

RSM Web groups what it can do into modules — server, players, wipes and so on — and a key has its own level on each:

Each endpoint below shows the module and level it needs. A few more rules:

• A key never outranks the person who made it. You can only give a key access you have yourself, and it keeps following you: if your access is later lowered, your keys lose it too. Disable the account and its keys stop working until it is enabled again; delete it and they are deleted with it.
• Secrets such as the RCON password, the Discord bot token and the Steam API key are only returned to keys with manage on their module. At view they come back blank.
• The request acts as the key’s creator: bans, notes and audit entries it makes carry that person’s name, and dashboard views belong to them.
• A key can’t be given access to user management, and keys can’t create, change or read other keys.

Expiry and revoking

A key expires after 30, 90 or 365 days, or never, chosen when it is made. The Developers tab shows when each key was last used and lets you rename it, change its access, or revoke it. Changes apply to the next request; the key itself stays the same, so nothing has to be redeployed. A revoked or expired key is refused with API_KEY_INVALID.

Requests and errors

Send bodies as JSON with Content-Type: application/json, except the few upload endpoints, which take a multipart form. Replies are JSON. A failed request returns a message you can show to a person, and for the cases a script should handle, a code:

401 Unauthorized  { "error": "Invalid or expired API key", "code": "API_KEY_INVALID" }
403 Forbidden  { "error": "This API key needs manage access to players", "code": "FORBIDDEN" }
403 Forbidden  { "error": "This action is not available to API keys", "code": "SESSION_REQUIRED" }
503 Service Unavailable  { "error": "RCON not connected" }

The file endpoints allow 300 reads and 120 changes a minute from each address, and answer 429 past that. Nothing else has a fixed limit, but the API runs on the same machine as your Rust server: polling status every few seconds is plenty.

Data formats

• Steam IDs are strings, such as "76561198000000001". They are too large for a JavaScript number, so don’t convert them.
• Times are UTC, but not all in one format. Parse whichever you get:

  Looks like	Where
  2026-09-26T14:02:11.483Z	Most things: server status, bans, demos, automation runs, updates.
  2026-09-26T14:02:11.4830000+00:00	Anything reported by the game: players, events, chat, kicks, mutes, staff changes.
  2026-09-26 14:02:11	When a record was saved: automations, notes, loadouts, dashboards, reports, wipe history.
  1790431331483	Milliseconds since 1970, in the history charts (t) and file lists (modifiedAt).

• Lists that can be long are paged with limit and offset and come back with a total, as in { "total": 5210, "messages": […] }. Ask for the next page until offset reaches total.
• Missing values are null or empty: a player with no country has "countryCode": "", and a server that has never run has "startedAt": null.

Recipes

Complete jobs, each one a few requests long, in the order a script would send them.

Restart with a warning, then wait until it’s back

Needs server manage.

1. Note when the current server process started.

   HTTP curl

   GET /api/server/status
   Authorization: Bearer rsm_your_key_here

   curl "$RSM_URL/api/server/status" \
     -H "Authorization: Bearer $RSM_KEY"

   Response

   200 OK
   
   {
     "running": true,
     "pid": 4812,
     "startedAt": "2026-09-26T08:14:03.512Z",
     "rconConnected": true
   }

2. Tell players why. Rust counts the restart down in chat by itself; this adds your reason.

   HTTP curl

   POST /api/server/command
   Authorization: Bearer rsm_your_key_here
   Content-Type: application/json
   
   { "command": "say Restarting for an update in 5 minutes" }

   curl -X POST "$RSM_URL/api/server/command" \
     -H "Authorization: Bearer $RSM_KEY" \
     -H "Content-Type: application/json" \
     -d '{"command":"say Restarting for an update in 5 minutes"}'

   Response

   200 OK
   
   { "response": "" }

3. Restart after a five-minute countdown.

   HTTP curl

   POST /api/server/restart
   Authorization: Bearer rsm_your_key_here
   Content-Type: application/json
   
   { "countdown": 300 }

   curl -X POST "$RSM_URL/api/server/restart" \
     -H "Authorization: Bearer $RSM_KEY" \
     -H "Content-Type: application/json" \
     -d '{"countdown":300}'

   Response

   200 OK
   
   { "restarting": true, "countdown": 300 }

4. Ask for the status every 10 seconds. The server is back once it is running, RCON is connected and startedAt has changed: a new process, not the old one shutting down.

   HTTP curl

   GET /api/server/status
   Authorization: Bearer rsm_your_key_here

   curl "$RSM_URL/api/server/status" \
     -H "Authorization: Bearer $RSM_KEY"

   Response

   200 OK
   
   {
     "running": true,
     "pid": 5190,
     "startedAt": "2026-09-26T14:08:37.904Z",
     "rconConnected": true
   }

Find a player by name and ban them

Needs players manage.

1. Search for the name. Names aren’t unique, so go on only if exactly one player’s name matches.

   HTTP curl

   GET /api/players?search=Rook&limit=10
   Authorization: Bearer rsm_your_key_here

   curl "$RSM_URL/api/players?search=Rook&limit=10" \
     -H "Authorization: Bearer $RSM_KEY"

   Response

   200 OK
   
   {
     "total": 1,
     "players": [
       {
         "steamId": "76561198000000001",
         "name": "Rook",
         "ip": "203.0.113.24:51820",
         "isAdmin": false,
         "firstSeen": "2026-08-02T19:40:11.2718830+00:00",
         "lastSeen": "2026-09-26T14:02:11.4830000+00:00",
         "totalPlaySeconds": 183420,
         "isOnline": true,
         "countryCode": "DE",
         "countryName": "Germany",
         "os": "windows",
         "isp": "Example Telecom",
         "isVpn": false,
         "steamAvatarUrl": "https://avatars.steamstatic.com/…_full.jpg",
         "vacBanned": false,
         "vacBanCount": 0,
         "gameBanCount": 0,
         "communityBanned": false,
         "daysSinceLastBan": null,
         "rustPlaytimeHours": 1412
       }
     ]
   }

2. Ban that player by Steam ID. duration is in minutes; leave it out for a permanent ban.

   HTTP curl

   POST /api/players/76561198000000001/ban
   Authorization: Bearer rsm_your_key_here
   Content-Type: application/json
   
   { "reason": "Cheating", "duration": 1440 }

   curl -X POST "$RSM_URL/api/players/76561198000000001/ban" \
     -H "Authorization: Bearer $RSM_KEY" \
     -H "Content-Type: application/json" \
     -d '{"reason":"Cheating","duration":1440}'

   Response

   200 OK
   
   { "ok": true, "response": "" }

Record a player and download the demo

Needs demos manage. The player has to be online; to catch someone the next time they join, put them on the auto-record list with PUT /api/demos/auto/{steamId} instead.

1. Start recording. minutes is how long to record for; leave it out to record until they leave.

   HTTP curl

   POST /api/demos/start
   Authorization: Bearer rsm_your_key_here
   Content-Type: application/json
   
   { "steamId": "76561198000000003", "minutes": 30 }

   curl -X POST "$RSM_URL/api/demos/start" \
     -H "Authorization: Bearer $RSM_KEY" \
     -H "Content-Type: application/json" \
     -d '{"steamId":"76561198000000003","minutes":30}'

   Response

   200 OK
   
   { "ok": true }

2. Once the time is up, list that player’s demos. A recording only appears here when it has finished; until then it is under sessions in /api/demos/status.

   HTTP curl

   GET /api/demos?steamId=76561198000000003&limit=1
   Authorization: Bearer rsm_your_key_here

   curl "$RSM_URL/api/demos?steamId=76561198000000003&limit=1" \
     -H "Authorization: Bearer $RSM_KEY"

   Response

   200 OK
   
   {
     "demos": [
       {
         "id": 7,
         "steamId": "76561198000000003",
         "name": "Hatch",
         "file": "demos/rsm/76561198000000003/2026-09-26_13-52-07Z.dem",
         "fileName": "2026-09-26_13-52-07Z.dem",
         "startedAt": "2026-09-26T13:52:07.000Z",
         "endedAt": "2026-09-26T14:22:07.000Z",
         "durationMs": 1800000,
         "sizeBytes": 148934656,
         "reason": "timed",
         "startedBy": "admin",
         "endReason": "expired",
         "stoppedBy": "",
         "parentId": null,
         "status": "saved",
         "error": "",
         "recovered": false,
         "pinned": false,
         "note": ""
       }
     ],
     "total": 3,
     "totalBytes": 402653184
   }

3. Ask for a ticket for that demo’s id.

   HTTP curl

   POST /api/demos/download-ticket
   Authorization: Bearer rsm_your_key_here
   Content-Type: application/json
   
   { "ids": [7] }

   curl -X POST "$RSM_URL/api/demos/download-ticket" \
     -H "Authorization: Bearer $RSM_KEY" \
     -H "Content-Type: application/json" \
     -d '{"ids":[7]}'

   Response

   200 OK
   
   {
     "ticket": "e4a17c90d3b6…",
     "filename": "76561198000000003_2026-09-26_13-52-07Z.dem",
     "archive": false,
     "fileCount": 1
   }

4. Fetch the file with the ticket within a minute. As with any download, the ticket is the permission, so this request has no Authorization header.

   HTTP curl

   GET /api/files/download?ticket=e4a17c90d3b6…

   curl -OJ "$RSM_URL/api/files/download?ticket=$TICKET"

   Response

   200 OK
   Content-Type: application/octet-stream
   Content-Disposition: attachment; filename="76561198000000003_2026-09-26_13-52-07Z.dem"
   
   The demo itself.

Post the player count to Discord

Needs players view and config view, plus a webhook from your Discord channel’s Integrations settings. RSM Web’s own Discord bot can also show this; a webhook suits a channel the bot isn’t in.

1. Read the player limit once. The reply is the whole configuration; the limit is maxplayers.

   HTTP curl

   GET /api/config
   Authorization: Bearer rsm_your_key_here

   curl "$RSM_URL/api/config" \
     -H "Authorization: Bearer $RSM_KEY"

   Response

   200 OK
   
   The configuration, with "maxplayers": 100 among it.

2. Every five minutes, list who is online and count them.

   HTTP curl

   GET /api/players/online
   Authorization: Bearer rsm_your_key_here

   curl "$RSM_URL/api/players/online" \
     -H "Authorization: Bearer $RSM_KEY"

   Response

   200 OK
   
   [
     {
       "steamId": "76561198000000001",
       "name": "Rook",
       "ip": "203.0.113.24:51820",
       "isAdmin": false,
       "joinedAt": "2026-09-26T12:20:05.9120000+00:00",
       "os": "windows",
       "countryCode": "DE",
       "countryName": "Germany",
       "isp": "Example Telecom",
       "isVpn": false,
       "steamAvatarUrl": "https://avatars.steamstatic.com/…_full.jpg",
       "vacBanned": false,
       "vacBanCount": 0,
       "gameBanCount": 0,
       "communityBanned": false,
       "daysSinceLastBan": null,
       "rustPlaytimeHours": 1412,
       "x": 1204.5,
       "z": -388.2,
       "ping": 38
     }
   ]

3. Post the count to the webhook. This goes to Discord, not RSM Web, so it carries no API key.

   HTTP curl

   POST https://discord.com/api/webhooks/…
   Content-Type: application/json
   
   { "content": "37/100 players online" }

   curl -X POST "$DISCORD_WEBHOOK_URL" \
     -H "Content-Type: application/json" \
     -d '{"content":"37/100 players online"}'

   Response

   204 No Content

Download a file

Needs files view.

1. Ask for a ticket. Several paths, or a folder, come back as one zip.

   HTTP curl

   POST /api/files/download-ticket
   Authorization: Bearer rsm_your_key_here
   Content-Type: application/json
   
   { "root": "server", "paths": ["server/rsm/cfg/server.cfg"] }

   curl -X POST "$RSM_URL/api/files/download-ticket" \
     -H "Authorization: Bearer $RSM_KEY" \
     -H "Content-Type: application/json" \
     -d '{"root":"server","paths":["server/rsm/cfg/server.cfg"]}'

   Response

   200 OK
   
   {
     "ticket": "c1f0e6a4b8d2…",
     "filename": "server.cfg",
     "archive": false,
     "fileCount": 1
   }

2. Fetch the file with the ticket from step 1 within a minute. The ticket is the permission, so this request has no Authorization header, and it works once.

   HTTP curl

   GET /api/files/download?ticket=c1f0e6a4b8d2…

   curl -OJ "$RSM_URL/api/files/download?ticket=$TICKET"

   Response

   200 OK
   Content-Type: application/octet-stream
   Content-Disposition: attachment; filename="server.cfg"
   
   The file itself.

Follow a log as it grows

Needs files view. The reply is a stream that stays open, one JSON object per line: the end of the file first, then each new piece as it is written.

1. Open the stream and keep reading. append carries new text, reset means the file was emptied or replaced, ping only keeps the connection open, and error ends it.

   HTTP curl

   GET /api/files/tail?root=server&path=oxide/logs/oxide_2026-09-26.txt
   Authorization: Bearer rsm_your_key_here

   curl -N "$RSM_URL/api/files/tail?root=server&path=oxide/logs/oxide_2026-09-26.txt" \
     -H "Authorization: Bearer $RSM_KEY"

   Response

   200 OK
   Content-Type: application/x-ndjson; charset=utf-8
   
   { "type": "append", "text": "14:02:11 [Info] Rook has connected\n" }
   { "type": "ping" }
   { "type": "append", "text": "14:02:40 [Info] Mira has disconnected\n" }

Not available to keys

Some parts of the API only work for a person signed in to RSM Web:

• Signing in, passwords and sessions (/api/auth/…), and linking your RSM account (/api/rsm-account/…).
• Creating and managing API keys, and managing users and groups.
• The live streams behind the console, installer and automation progress. Poll the matching status endpoints instead.
• The live map image.

Endpoint reference

165 endpoints, grouped by what they work on. Open one to see its parameters, a request with its headers, and the reply. {steamId} and the like are placeholders for a value in the path; the values in the examples are made up.

GET /api/server/status
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/server/status" \
  -H "Authorization: Bearer $RSM_KEY"

{
  "running": true,
  "pid": 4812,
  "startedAt": "2026-09-26T08:14:03.512Z",
  "rconConnected": true
}

GET /api/server/history
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/server/history" \
  -H "Authorization: Bearer $RSM_KEY"

[
  { "t": 1790431320000, "players": 37, "fps": 61 },
  { "t": 1790431325000, "players": 38, "fps": 60 }
]

GET /api/server/metrics-history?range=6h
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/server/metrics-history?range=6h" \
  -H "Authorization: Bearer $RSM_KEY"

{
  "diskLabel": "/",
  "points": [
    {
      "t": 1790431260000,
      "cpuPct": 14,
      "usedMB": 9120,
      "totalMB": 32000,
      "diskPct": 61,
      "procCpuPct": 9.5,
      "procMemMB": 6840,
      "players": 37,
      "fps": 61,
      "entities": 184220,
      "netIn": 48211,
      "netOut": 391840,
      "queued": 0
    },
    {
      "t": 1790431320000,
      "cpuPct": 3,
      "usedMB": 2410,
      "totalMB": 32000,
      "diskPct": 61,
      "procCpuPct": null,
      "procMemMB": null,
      "players": null,
      "fps": null,
      "entities": null,
      "netIn": null,
      "netOut": null,
      "queued": null
    }
  ]
}

POST /api/server/start
Authorization: Bearer rsm_your_key_here

curl -X POST "$RSM_URL/api/server/start" \
  -H "Authorization: Bearer $RSM_KEY"

{ "started": true }

POST /api/server/stop
Authorization: Bearer rsm_your_key_here

curl -X POST "$RSM_URL/api/server/stop" \
  -H "Authorization: Bearer $RSM_KEY"

{ "stopping": true }

POST /api/server/restart
Authorization: Bearer rsm_your_key_here
Content-Type: application/json

{ "countdown": 300 }

curl -X POST "$RSM_URL/api/server/restart" \
  -H "Authorization: Bearer $RSM_KEY" \
  -H "Content-Type: application/json" \
  -d '{"countdown":300}'

{ "restarting": true, "countdown": 300 }

POST /api/server/save
Authorization: Bearer rsm_your_key_here

curl -X POST "$RSM_URL/api/server/save" \
  -H "Authorization: Bearer $RSM_KEY"

POST /api/server/kill
Authorization: Bearer rsm_your_key_here

curl -X POST "$RSM_URL/api/server/kill" \
  -H "Authorization: Bearer $RSM_KEY"

{ "killed": true }

POST /api/server/command
Authorization: Bearer rsm_your_key_here
Content-Type: application/json

{ "command": "server.hostname" }

curl -X POST "$RSM_URL/api/server/command" \
  -H "Authorization: Bearer $RSM_KEY" \
  -H "Content-Type: application/json" \
  -d '{"command":"server.hostname"}'

{ "response": "server.hostname: \"My Rust Server\"" }

POST /api/server/rendermap
Authorization: Bearer rsm_your_key_here

curl -X POST "$RSM_URL/api/server/rendermap" \
  -H "Authorization: Bearer $RSM_KEY"

{ "ok": true }

GET /api/installer/status
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/installer/status" \
  -H "Authorization: Bearer $RSM_KEY"

{
  "status": "running",
  "progress": 42,
  "phase": "installing",
  "logs": [
    "[RSM] Installing to: /srv/rust",
    "[RSM] Branch: main",
    " Update state (0x61) downloading, progress: 42.18 (1406263842 / 3333697811)"
  ]
}

GET /api/installer/version?branch=main
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/installer/version?branch=main" \
  -H "Authorization: Bearer $RSM_KEY"

{ "installed": "25454815", "latest": "25461207" }

POST /api/installer/start
Authorization: Bearer rsm_your_key_here
Content-Type: application/json

{ "branch": "main", "clean": false }

curl -X POST "$RSM_URL/api/installer/start" \
  -H "Authorization: Bearer $RSM_KEY" \
  -H "Content-Type: application/json" \
  -d '{"branch":"main","clean":false}'

{ "started": true }

POST /api/installer/stop
Authorization: Bearer rsm_your_key_here

curl -X POST "$RSM_URL/api/installer/stop" \
  -H "Authorization: Bearer $RSM_KEY"

{ "stopped": true }

POST /api/installer/reset
Authorization: Bearer rsm_your_key_here

curl -X POST "$RSM_URL/api/installer/reset" \
  -H "Authorization: Bearer $RSM_KEY"

{ "reset": true }

GET /api/installer/settings
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/installer/settings" \
  -H "Authorization: Bearer $RSM_KEY"

{
  "serverPath": "/srv/rust",
  "refreshInterval": 1,
  "steamApiKey": "",
  "rustMapsApiKey": "",
  "cpuAffinity": [],
  "cpuCount": 16,
  "startWithSystemSupported": true,
  "startWithSystem": true,
  "autoStartServer": true
}

PUT /api/installer/settings
Authorization: Bearer rsm_your_key_here
Content-Type: application/json

{
  "serverPath": "/srv/rust",
  "cpuAffinity": [2, 3, 4, 5],
  "autoStartServer": true
}

curl -X PUT "$RSM_URL/api/installer/settings" \
  -H "Authorization: Bearer $RSM_KEY" \
  -H "Content-Type: application/json" \
  -d '{"serverPath":"/srv/rust","cpuAffinity":[2,3,4,5],"autoStartServer":true}'

{ "ok": true, "affinityWarning": null, "startWithSystemWarning": null }

GET /api/config
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/config" \
  -H "Authorization: Bearer $RSM_KEY"

{
  "identity": "rsm",
  "hostname": "My Rust Server",
  "tags": "weekly,vanilla",
  "description": "Vanilla, weekly wipes.",
  "url": "https://example.com",
  "headerimage": "",
  "logoimage": "",
  "level": "Procedural Map",
  "customMapUrl": "",
  "worldsize": 4000,
  "seed": 1337,
  "maxplayers": 100,
  "gamemode": "vanilla",
  "censorplayerlist": false,
  "pve": false,
  "radiation": true,
  "idlekick": 30,
  "saveBackupCount": 2,
  "autoUploadMap": true,
  "autoUploadMapImages": true,
  "ip": "0.0.0.0",
  "port": 28015,
  "queryport": 28017,
  "rconip": "0.0.0.0",
  "rconport": 28016,
  "rconpassword": "",
  "appip": "",
  "appport": 28082,
  "apppublicip": "",
  "favoritesendpoint": "",
  "servercfg": ""
}

PUT /api/config
Authorization: Bearer rsm_your_key_here
Content-Type: application/json

{ "hostname": "My Rust Server | Weekly", "maxplayers": 150 }

curl -X PUT "$RSM_URL/api/config" \
  -H "Authorization: Bearer $RSM_KEY" \
  -H "Content-Type: application/json" \
  -d '{"hostname":"My Rust Server | Weekly","maxplayers":150}'

The whole configuration, as GET returns it.

GET /api/players/online
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/players/online" \
  -H "Authorization: Bearer $RSM_KEY"

[
  {
    "steamId": "76561198000000001",
    "name": "Rook",
    "ip": "203.0.113.24:51820",
    "isAdmin": false,
    "joinedAt": "2026-09-26T12:20:05.9120000+00:00",
    "os": "windows",
    "countryCode": "DE",
    "countryName": "Germany",
    "isp": "Example Telecom",
    "isVpn": false,
    "steamAvatarUrl": "https://avatars.steamstatic.com/…_full.jpg",
    "vacBanned": false,
    "vacBanCount": 0,
    "gameBanCount": 0,
    "communityBanned": false,
    "daysSinceLastBan": null,
    "rustPlaytimeHours": 1412,
    "x": 1204.5,
    "z": -388.2,
    "ping": 38
  }
]

GET /api/players?search=rook&limit=2
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/players?search=rook&limit=2" \
  -H "Authorization: Bearer $RSM_KEY"

{
  "total": 1,
  "players": [
    {
      "steamId": "76561198000000001",
      "name": "Rook",
      "ip": "203.0.113.24:51820",
      "isAdmin": false,
      "firstSeen": "2026-08-02T19:40:11.2718830+00:00",
      "lastSeen": "2026-09-26T14:02:11.4830000+00:00",
      "totalPlaySeconds": 183420,
      "isOnline": true,
      "countryCode": "DE",
      "countryName": "Germany",
      "os": "windows",
      "isp": "Example Telecom",
      "isVpn": false,
      "steamAvatarUrl": "https://avatars.steamstatic.com/…_full.jpg",
      "vacBanned": false,
      "vacBanCount": 0,
      "gameBanCount": 0,
      "communityBanned": false,
      "daysSinceLastBan": null,
      "rustPlaytimeHours": 1412
    }
  ]
}

GET /api/players/events?steamId=76561198000000001&limit=3
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/players/events?steamId=76561198000000001&limit=3" \
  -H "Authorization: Bearer $RSM_KEY"

[
  {
    "id": 918,
    "steamId": "76561198000000001",
    "playerName": "Rook",
    "type": "player_death",
    "timestamp": "2026-09-26T13:12:40.1180000+00:00",
    "data": {
      "killedBy": "Hatch",
      "killedBySteamId": "76561198000000003",
      "killedByType": "player",
      "weapon": "rifle.ak",
      "distance": 84.2,
      "isHeadshot": true,
      "hitArea": "head",
      "x": 1180.2,
      "z": -402.7,
      "combatLog": []
    }
  },
  {
    "id": 4410,
    "steamId": "76561198000000001",
    "playerName": "Rook",
    "type": "player_chat",
    "timestamp": "2026-09-26T12:31:02.0040000+00:00",
    "data": { "message": "anyone selling sulfur?", "channel": "global" }
  },
  {
    "id": 1203,
    "steamId": "76561198000000001",
    "playerName": "Rook",
    "type": "player_join",
    "timestamp": "2026-09-26T12:20:05.9120000+00:00",
    "data": { "ip": "203.0.113.24:51820", "isAdmin": false, "os": "windows" }
  }
]

GET /api/players/states
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/players/states" \
  -H "Authorization: Bearer $RSM_KEY"

{
  "banned": ["76561198000000003"],
  "muted": { "76561198000000001": "2026-09-26T14:50:12.000Z" },
  "levels": { "76561198000000002": 1 }
}

GET /api/players/76561198000000001/profile
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/players/76561198000000001/profile" \
  -H "Authorization: Bearer $RSM_KEY"

{
  "player": {
    "steamId": "76561198000000001",
    "name": "Rook",
    "ip": "203.0.113.24:51820",
    "isAdmin": false,
    "firstSeen": "2026-08-02T19:40:11.2718830+00:00",
    "lastSeen": "2026-09-26T14:02:11.4830000+00:00",
    "totalPlaySeconds": 183420,
    "isOnline": true,
    "countryCode": "DE",
    "countryName": "Germany",
    "os": "windows",
    "isp": "Example Telecom",
    "isVpn": false,
    "steamAvatarUrl": "https://avatars.steamstatic.com/…_full.jpg",
    "vacBanned": false,
    "vacBanCount": 0,
    "gameBanCount": 0,
    "communityBanned": false,
    "daysSinceLastBan": null,
    "rustPlaytimeHours": 1412
  },
  "history": [
    {
      "type": "mute",
      "at": "2026-09-26T13:50:12.4410000+00:00",
      "by": "admin",
      "until": "2026-09-26T14:50:12.000Z"
    },
    {
      "type": "kick",
      "at": "2026-09-24T21:08:33.1090000+00:00",
      "by": "admin",
      "reason": "AFK"
    },
    {
      "type": "ban",
      "at": "2026-09-12T20:15:02.118Z",
      "by": "admin",
      "reason": "Toxic chat",
      "minutes": 1440,
      "until": "2026-09-13T20:15:02.118Z"
    }
  ]
}

GET /api/players/76561198000000001/combat-stats
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/players/76561198000000001/combat-stats" \
  -H "Authorization: Bearer $RSM_KEY"

{ "pvpKills": 212, "pvpDeaths": 180, "pveKills": 1044, "headshotRate": 0.31 }

POST /api/players/76561198000000001/refresh-steam
Authorization: Bearer rsm_your_key_here

curl -X POST "$RSM_URL/api/players/76561198000000001/refresh-steam" \
  -H "Authorization: Bearer $RSM_KEY"

The player, as in GET /api/players, with fresh Steam fields.

POST /api/players/76561198000000001/kick
Authorization: Bearer rsm_your_key_here
Content-Type: application/json

{ "reason": "AFK" }

curl -X POST "$RSM_URL/api/players/76561198000000001/kick" \
  -H "Authorization: Bearer $RSM_KEY" \
  -H "Content-Type: application/json" \
  -d '{"reason":"AFK"}'

{ "ok": true, "response": "" }

POST /api/players/76561198000000001/ban
Authorization: Bearer rsm_your_key_here
Content-Type: application/json

{ "reason": "Cheating", "duration": 1440 }

curl -X POST "$RSM_URL/api/players/76561198000000001/ban" \
  -H "Authorization: Bearer $RSM_KEY" \
  -H "Content-Type: application/json" \
  -d '{"reason":"Cheating","duration":1440}'

{ "ok": true, "response": "" }

POST /api/players/76561198000000001/unban
Authorization: Bearer rsm_your_key_here

curl -X POST "$RSM_URL/api/players/76561198000000001/unban" \
  -H "Authorization: Bearer $RSM_KEY"

{ "ok": true, "response": "" }

POST /api/players/76561198000000001/mute
Authorization: Bearer rsm_your_key_here
Content-Type: application/json

{ "duration": 60 }

curl -X POST "$RSM_URL/api/players/76561198000000001/mute" \
  -H "Authorization: Bearer $RSM_KEY" \
  -H "Content-Type: application/json" \
  -d '{"duration":60}'

{ "ok": true, "response": "" }

POST /api/players/76561198000000001/unmute
Authorization: Bearer rsm_your_key_here

curl -X POST "$RSM_URL/api/players/76561198000000001/unmute" \
  -H "Authorization: Bearer $RSM_KEY"

POST /api/players/76561198000000001/skipqueue
Authorization: Bearer rsm_your_key_here

curl -X POST "$RSM_URL/api/players/76561198000000001/skipqueue" \
  -H "Authorization: Bearer $RSM_KEY"

POST /api/players/76561198000000001/teleport
Authorization: Bearer rsm_your_key_here
Content-Type: application/json

{ "toSteamId": "76561198000000002" }

curl -X POST "$RSM_URL/api/players/76561198000000001/teleport" \
  -H "Authorization: Bearer $RSM_KEY" \
  -H "Content-Type: application/json" \
  -d '{"toSteamId":"76561198000000002"}'

{ "ok": true, "response": "" }

POST /api/players/76561198000000001/authlevel
Authorization: Bearer rsm_your_key_here
Content-Type: application/json

{ "level": 1 }

curl -X POST "$RSM_URL/api/players/76561198000000001/authlevel" \
  -H "Authorization: Bearer $RSM_KEY" \
  -H "Content-Type: application/json" \
  -d '{"level":1}'

{ "ok": true, "response": "" }

GET /api/players/bans?active=true
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/players/bans?active=true" \
  -H "Authorization: Bearer $RSM_KEY"

[
  {
    "id": 31,
    "steamId": "76561198000000003",
    "playerName": "Hatch",
    "reason": "Cheating",
    "durationMinutes": 0,
    "bannedAt": "2026-09-26T13:44:51.207Z",
    "expiresAt": null,
    "bannedBy": "admin",
    "unbannedAt": null,
    "unbannedBy": null
  }
]

GET /api/players/bans/live
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/players/bans/live" \
  -H "Authorization: Bearer $RSM_KEY"

{
  "source": "rcon",
  "bans": [
    {
      "steamId": "76561198000000003",
      "playerName": "Hatch",
      "reason": "Cheating",
      "expiresAt": null,
      "bannedAt": "2026-09-26T13:44:51.207Z",
      "bannedBy": "admin",
      "durationMinutes": 0
    }
  ]
}

GET /api/players/kicks
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/players/kicks" \
  -H "Authorization: Bearer $RSM_KEY"

[
  {
    "id": 88,
    "steamId": "76561198000000001",
    "playerName": "Rook",
    "reason": "AFK",
    "kickedBy": "admin",
    "kickedAt": "2026-09-24T21:08:33.1090000+00:00"
  }
]

GET /api/players/mutes
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/players/mutes" \
  -H "Authorization: Bearer $RSM_KEY"

[
  {
    "id": 12,
    "steamId": "76561198000000001",
    "playerName": "Rook",
    "mutedAt": "2026-09-26T13:50:12.4410000+00:00",
    "expiresAt": "2026-09-26T14:50:12.000Z",
    "mutedBy": "admin",
    "unmutedAt": null,
    "unmutedBy": "",
    "unmuteReason": ""
  }
]

GET /api/players/auth-changes
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/players/auth-changes" \
  -H "Authorization: Bearer $RSM_KEY"

[
  {
    "id": 4,
    "steamId": "76561198000000002",
    "playerName": "Mira",
    "level": 1,
    "previousLevel": 0,
    "changedBy": "admin",
    "changedAt": "2026-09-21T17:30:44.9020000+00:00"
  }
]

GET /api/players/admin-commands
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/players/admin-commands" \
  -H "Authorization: Bearer $RSM_KEY"

[
  {
    "id": 310,
    "steamId": "76561198000000002",
    "playerName": "Mira",
    "command": "teleport2me Hatch",
    "ranAt": "2026-09-26T13:47:02.3350000+00:00"
  }
]

GET /api/inventory/items?search=rifle.ak&limit=1
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/inventory/items?search=rifle.ak&limit=1" \
  -H "Authorization: Bearer $RSM_KEY"

[
  {
    "itemid": 1545779598,
    "shortname": "rifle.ak",
    "name": "Assault Rifle",
    "description": "A high damage, high recoil rifle.",
    "category": "Weapon",
    "stackable": 1,
    "hasSkins": true
  }
]

POST /api/inventory/give/76561198000000001
Authorization: Bearer rsm_your_key_here
Content-Type: application/json

{ "item": "rifle.ak", "amount": 1, "skinId": 0 }

curl -X POST "$RSM_URL/api/inventory/give/76561198000000001" \
  -H "Authorization: Bearer $RSM_KEY" \
  -H "Content-Type: application/json" \
  -d '{"item":"rifle.ak","amount":1,"skinId":0}'

{ "ok": true, "response": "" }

GET /api/inventory/loadouts
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/inventory/loadouts" \
  -H "Authorization: Bearer $RSM_KEY"

[
  {
    "id": 7,
    "name": "Starter kit",
    "items": [
      { "shortname": "pickaxe", "name": "Pickaxe", "amount": 1, "skinId": 0 },
      { "shortname": "wood", "name": "Wood", "amount": 1000, "skinId": 0 }
    ],
    "createdAt": "2026-09-10 12:00:00",
    "updatedAt": "2026-09-10 12:00:00"
  }
]

POST /api/inventory/loadouts
Authorization: Bearer rsm_your_key_here
Content-Type: application/json

{
  "name": "Starter kit",
  "items": [
    { "shortname": "pickaxe", "name": "Pickaxe", "amount": 1, "skinId": 0 },
    { "shortname": "wood", "name": "Wood", "amount": 1000, "skinId": 0 }
  ]
}

curl -X POST "$RSM_URL/api/inventory/loadouts" \
  -H "Authorization: Bearer $RSM_KEY" \
  -H "Content-Type: application/json" \
  -d '{"name":"Starter kit","items":[{"shortname":"pickaxe","name":"Pickaxe","amount":1,"skinId":0},{"shortname":"wood","name":"Wood","amount":1000,"skinId":0}]}'

{
  "id": 7,
  "name": "Starter kit",
  "items": [
    { "shortname": "pickaxe", "name": "Pickaxe", "amount": 1, "skinId": 0 },
    { "shortname": "wood", "name": "Wood", "amount": 1000, "skinId": 0 }
  ],
  "createdAt": "2026-09-10 12:00:00",
  "updatedAt": "2026-09-10 12:00:00"
}

DELETE /api/inventory/loadouts/7
Authorization: Bearer rsm_your_key_here

curl -X DELETE "$RSM_URL/api/inventory/loadouts/7" \
  -H "Authorization: Bearer $RSM_KEY"

{ "ok": true }

POST /api/inventory/loadouts/7/give/76561198000000001
Authorization: Bearer rsm_your_key_here

curl -X POST "$RSM_URL/api/inventory/loadouts/7/give/76561198000000001" \
  -H "Authorization: Bearer $RSM_KEY"

{ "ok": true, "given": 2 }

GET /api/demos?steamId=76561198000000003&limit=1
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/demos?steamId=76561198000000003&limit=1" \
  -H "Authorization: Bearer $RSM_KEY"

{
  "demos": [
    {
      "id": 7,
      "steamId": "76561198000000003",
      "name": "Hatch",
      "file": "demos/rsm/76561198000000003/2026-09-26_13-52-07Z.dem",
      "fileName": "2026-09-26_13-52-07Z.dem",
      "startedAt": "2026-09-26T13:52:07.000Z",
      "endedAt": "2026-09-26T14:22:07.000Z",
      "durationMs": 1800000,
      "sizeBytes": 148934656,
      "reason": "timed",
      "startedBy": "admin",
      "endReason": "expired",
      "stoppedBy": "",
      "parentId": null,
      "status": "saved",
      "error": "",
      "recovered": false,
      "pinned": false,
      "note": ""
    }
  ],
  "total": 3,
  "totalBytes": 402653184
}

GET /api/demos/status
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/demos/status" \
  -H "Authorization: Bearer $RSM_KEY"

{
  "state": "ok",
  "available": true,
  "error": "",
  "sessions": [
    {
      "steamId": "76561198000000003",
      "name": "Hatch",
      "file": "demos/rsm/76561198000000003/2026-09-26_14-31-40Z.dem",
      "startedAt": "2026-09-26T14:31:40.000Z",
      "elapsedMs": 412000,
      "bytes": 31457280,
      "reason": "auto",
      "by": "admin",
      "parentFile": ""
    }
  ],
  "rules": [
    {
      "steamId": "76561198000000003",
      "mode": "always",
      "until": "",
      "reason": "auto",
      "by": "admin"
    }
  ],
  "splitMinutes": 60,
  "splitMegabytes": 512,
  "freeBytes": 182536110080,
  "serverTime": "2026-09-26T14:38:32.000Z"
}

POST /api/demos/start
Authorization: Bearer rsm_your_key_here
Content-Type: application/json

{ "steamId": "76561198000000003", "minutes": 30 }

curl -X POST "$RSM_URL/api/demos/start" \
  -H "Authorization: Bearer $RSM_KEY" \
  -H "Content-Type: application/json" \
  -d '{"steamId":"76561198000000003","minutes":30}'

{ "ok": true }

POST /api/demos/stop
Authorization: Bearer rsm_your_key_here
Content-Type: application/json

{ "steamId": "76561198000000003" }

curl -X POST "$RSM_URL/api/demos/stop" \
  -H "Authorization: Bearer $RSM_KEY" \
  -H "Content-Type: application/json" \
  -d '{"steamId":"76561198000000003"}'

{ "ok": true }

PUT /api/demos/auto/76561198000000001
Authorization: Bearer rsm_your_key_here
Content-Type: application/json

{ "enabled": true }

curl -X PUT "$RSM_URL/api/demos/auto/76561198000000001" \
  -H "Authorization: Bearer $RSM_KEY" \
  -H "Content-Type: application/json" \
  -d '{"enabled":true}'

{ "ok": true }

POST /api/demos/download-ticket
Authorization: Bearer rsm_your_key_here
Content-Type: application/json

{ "ids": [7] }

curl -X POST "$RSM_URL/api/demos/download-ticket" \
  -H "Authorization: Bearer $RSM_KEY" \
  -H "Content-Type: application/json" \
  -d '{"ids":[7]}'

{
  "ticket": "e4a17c90d3b6…",
  "filename": "76561198000000003_2026-09-26_13-52-07Z.dem",
  "archive": false,
  "fileCount": 1
}

PATCH /api/demos/7
Authorization: Bearer rsm_your_key_here
Content-Type: application/json

{ "pinned": true, "note": "Tracks Rook through the wall at 12:40." }

curl -X PATCH "$RSM_URL/api/demos/7" \
  -H "Authorization: Bearer $RSM_KEY" \
  -H "Content-Type: application/json" \
  -d '{"pinned":true,"note":"Tracks Rook through the wall at 12:40."}'

{
  "id": 7,
  "steamId": "76561198000000003",
  "name": "Hatch",
  "file": "demos/rsm/76561198000000003/2026-09-26_13-52-07Z.dem",
  "fileName": "2026-09-26_13-52-07Z.dem",
  "startedAt": "2026-09-26T13:52:07.000Z",
  "endedAt": "2026-09-26T14:22:07.000Z",
  "durationMs": 1800000,
  "sizeBytes": 148934656,
  "reason": "timed",
  "startedBy": "admin",
  "endReason": "expired",
  "stoppedBy": "",
  "parentId": null,
  "status": "saved",
  "error": "",
  "recovered": false,
  "pinned": true,
  "note": "Tracks Rook through the wall at 12:40."
}

DELETE /api/demos/7
Authorization: Bearer rsm_your_key_here

curl -X DELETE "$RSM_URL/api/demos/7" \
  -H "Authorization: Bearer $RSM_KEY"

{ "ok": true }

GET /api/teams
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/teams" \
  -H "Authorization: Bearer $RSM_KEY"

[
  {
    "teamId": "4211",
    "teamName": null,
    "leaderId": "76561198000000001",
    "members": [
      { "steamId": "76561198000000001", "name": "Rook", "online": true },
      { "steamId": "76561198000000002", "name": "Mira", "online": false }
    ]
  }
]

POST /api/teams/4211/kick
Authorization: Bearer rsm_your_key_here
Content-Type: application/json

{ "steamId": "76561198000000002" }

curl -X POST "$RSM_URL/api/teams/4211/kick" \
  -H "Authorization: Bearer $RSM_KEY" \
  -H "Content-Type: application/json" \
  -d '{"steamId":"76561198000000002"}'

{ "ok": true }

POST /api/teams/4211/disband
Authorization: Bearer rsm_your_key_here

curl -X POST "$RSM_URL/api/teams/4211/disband" \
  -H "Authorization: Bearer $RSM_KEY"

GET /api/clans
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/clans" \
  -H "Authorization: Bearer $RSM_KEY"

[
  {
    "clanId": "1024",
    "name": "Night Owls",
    "color": "#3c7bd6",
    "score": 1830,
    "motd": "Raid at 8",
    "maxMemberCount": 8,
    "ownerId": "76561198000000001",
    "roles": [
      { "roleId": 1, "rank": 0, "name": "Leader" },
      { "roleId": 2, "rank": 1, "name": "Member" }
    ],
    "members": [
      {
        "steamId": "76561198000000001",
        "name": "Rook",
        "roleId": 1,
        "online": true
      }
    ],
    "invites": [
      { "steamId": "76561198000000002", "name": "Mira", "recruiter": "Rook" }
    ]
  }
]

POST /api/clans/1024/role
Authorization: Bearer rsm_your_key_here
Content-Type: application/json

{ "steamId": "76561198000000001", "roleId": 2 }

curl -X POST "$RSM_URL/api/clans/1024/role" \
  -H "Authorization: Bearer $RSM_KEY" \
  -H "Content-Type: application/json" \
  -d '{"steamId":"76561198000000001","roleId":2}'

{ "ok": true }

POST /api/clans/1024/disband
Authorization: Bearer rsm_your_key_here

curl -X POST "$RSM_URL/api/clans/1024/disband" \
  -H "Authorization: Bearer $RSM_KEY"

GET /api/chat-logs?channel=global&limit=1
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/chat-logs?channel=global&limit=1" \
  -H "Authorization: Bearer $RSM_KEY"

{
  "total": 5210,
  "messages": [
    {
      "id": 4410,
      "steamId": "76561198000000001",
      "playerName": "Rook",
      "message": "anyone selling sulfur?",
      "channel": "global",
      "createdAt": "2026-09-26T12:31:02.0040000+00:00"
    }
  ]
}

GET /api/chat-logs/players
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/chat-logs/players" \
  -H "Authorization: Bearer $RSM_KEY"

[
  { "steamId": "76561198000000001", "playerName": "Rook", "messageCount": 412 },
  { "steamId": "76561198000000002", "playerName": "Mira", "messageCount": 128 }
]

GET /api/leaderboard?sort=kills&limit=1
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/leaderboard?sort=kills&limit=1" \
  -H "Authorization: Bearer $RSM_KEY"

{
  "entries": [
    {
      "steamId": "76561198000000001",
      "name": "Rook",
      "kills": 212,
      "deaths": 180,
      "headshots": 66,
      "avatarUrl": "https://avatars.steamstatic.com/…_full.jpg",
      "kd": 1.18,
      "headshotPct": 31.1
    }
  ],
  "total": 94
}

GET /api/reports?status=open&limit=1
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/reports?status=open&limit=1" \
  -H "Authorization: Bearer $RSM_KEY"

{
  "reports": [
    {
      "id": 7,
      "receivedAt": "2026-09-26 13:41:09",
      "source": "mod",
      "kind": "player",
      "type": "cheat",
      "reporterId": "76561198000000002",
      "reporterName": "Mira",
      "targetId": "76561198000000003",
      "targetName": "Hatch",
      "subject": "Aimbot at outpost",
      "message": "Two headshots through a wall from 200 m.",
      "hasImage": true,
      "context": { "grid": "K14" },
      "status": "open",
      "note": ""
    }
  ],
  "total": 12,
  "open": 3
}

GET /api/reports/7
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/reports/7" \
  -H "Authorization: Bearer $RSM_KEY"

{
  "id": 7,
  "receivedAt": "2026-09-26 13:41:09",
  "source": "mod",
  "kind": "player",
  "type": "cheat",
  "reporterId": "76561198000000002",
  "reporterName": "Mira",
  "targetId": "76561198000000003",
  "targetName": "Hatch",
  "subject": "Aimbot at outpost",
  "message": "Two headshots through a wall from 200 m.",
  "hasImage": true,
  "context": { "grid": "K14" },
  "status": "open",
  "note": ""
}

GET /api/reports/7/image
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/reports/7/image" \
  -H "Authorization: Bearer $RSM_KEY"

PATCH /api/reports/7
Authorization: Bearer rsm_your_key_here
Content-Type: application/json

{ "status": "resolved", "note": "Banned Hatch." }

curl -X PATCH "$RSM_URL/api/reports/7" \
  -H "Authorization: Bearer $RSM_KEY" \
  -H "Content-Type: application/json" \
  -d '{"status":"resolved","note":"Banned Hatch."}'

{
  "id": 7,
  "receivedAt": "2026-09-26 13:41:09",
  "source": "mod",
  "kind": "player",
  "type": "cheat",
  "reporterId": "76561198000000002",
  "reporterName": "Mira",
  "targetId": "76561198000000003",
  "targetName": "Hatch",
  "subject": "Aimbot at outpost",
  "message": "Two headshots through a wall from 200 m.",
  "hasImage": true,
  "context": { "grid": "K14" },
  "status": "resolved",
  "note": "Banned Hatch."
}

DELETE /api/reports/7
Authorization: Bearer rsm_your_key_here

curl -X DELETE "$RSM_URL/api/reports/7" \
  -H "Authorization: Bearer $RSM_KEY"

{ "deleted": true }

GET /api/mods/status
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/mods/status" \
  -H "Authorization: Bearer $RSM_KEY"

{
  "status": "idle",
  "phase": "idle",
  "logs": [],
  "detected": "oxide",
  "serverPath": "/srv/rust"
}

POST /api/mods/switch
Authorization: Bearer rsm_your_key_here
Content-Type: application/json

{ "framework": "carbon", "branch": "main" }

curl -X POST "$RSM_URL/api/mods/switch" \
  -H "Authorization: Bearer $RSM_KEY" \
  -H "Content-Type: application/json" \
  -d '{"framework":"carbon","branch":"main"}'

{ "started": true }

POST /api/mods/stop
Authorization: Bearer rsm_your_key_here

curl -X POST "$RSM_URL/api/mods/stop" \
  -H "Authorization: Bearer $RSM_KEY"

POST /api/mods/reset
Authorization: Bearer rsm_your_key_here

curl -X POST "$RSM_URL/api/mods/reset" \
  -H "Authorization: Bearer $RSM_KEY"

GET /api/mods/oxide/version
Authorization: Bearer rsm_your_key_here

curl "$RSM_URL/api/mods/oxide/version" \
  -H "Authorization: Bearer $RSM_KEY"