9000INC developer platform

Analytics API V1

Read privacy-safe aggregate analytics from 9000INC products without exposing private account, payroll, invoice, support-content, raw Discord identity, or server-statistics data.

🔑 Manage API keys Analytics overview

Authentication

Send the key as an HTTP Bearer token. Full secrets are displayed only when created or rotated.

Authorization: Bearer 9k_live_...

Versioning

The public API is versioned in the URL. Public endpoints use /api/v1/analytics/.... Existing internal/admin analytics routes remain separate.

Datasets

Privacy-safe endpoints

Dataset	Endpoint	Required scope
Platform overview	`/api/v1/analytics/platform`	`analytics:platform`
Game downloads	`/api/v1/analytics/game-downloads`	`analytics:downloads`
Advertising	`/api/v1/analytics/ads`	`analytics:ads`
Giveaways	`/api/v1/analytics/giveaways`	`analytics:giveaways`
Games	`/api/v1/analytics/games`	`analytics:games`
Login geography	`/api/v1/analytics/login-geography`	`analytics:geography`

Date filters: ?unit=days&amount=30. Public v1 accepts days (max 365), weeks (max 52), or months (max 24). Login geography instead uses ?month=YYYY-MM&granularity=city|region|country and retains the existing privacy threshold.

cURL example

curl -H "Authorization: Bearer $NINEK_API_KEY" \
  "https://9000inc.com/api/v1/analytics/platform?unit=days&amount=30"

Node example

import { NineKAnalytics } from '@9000inc/analytics';

const api = new NineKAnalytics({ apiKey: process.env.NINEK_API_KEY });
const data = await api.platform({ unit: 'days', amount: 30 });

Scopes

Least-privilege keys

Platform overview
analytics:platform

Game downloads
analytics:downloads

Advertising performance
analytics:ads

Giveaway activity
analytics:giveaways

Game activity
analytics:games

Privacy-safe login geography
analytics:geography

Quotas

Membership-based limits

Membership	Per minute	Per day
Free	30	500
Basic	90	5,000
Premium	180	25,000
Pro	360	100,000

Rate-limit information is returned in response headers and the JSON envelope. Quotas are account-wide across all keys, enforced with an atomic account reservation before dataset generation, and membership changes automatically change the active quota without regenerating a key. Rate-limited requests do not extend the lockout window.

Key lifecycle

Keys can be limited to specific datasets, edited later, rotated without changing their scopes, or revoked immediately. Rotation invalidates the previous secret as soon as the new one is issued.

Rate-limit headers

X-RateLimit-Plan, minute/day limit and remaining values, minute/day reset Unix timestamps, and Retry-After on throttled responses are available for client backoff.

Error envelope

Rejected requests return a stable error_code such as missing_api_key, invalid_or_revoked_api_key, scope_denied, rate_limit_exceeded, or quota_accounting_busy, alongside a human-readable message.

Privacy boundary

The public API intentionally excludes raw account IDs, emails, support message content, wallet transactions, invoices, Teams payroll, private room/player identifiers, raw Discord user/server/channel identifiers, and internal server statistics. Login geography keeps the existing distinct-user suppression threshold. Advertising exposes only the verified event ledger created in Patch 674.