Player API endpoint
All three paths are equivalent:| Method | Path |
|---|---|
GET / POST | /player_api.php |
GET / POST | /panel_api.php |
GET / POST | /xtream |
Authentication parameters
Username from
api-proxy.yml. Required unless token is used.Password for the user. Required unless
token is used.Token credential. Accepted in place of
username + password.The API action to perform. Omit or leave empty to retrieve account info.
Actions
Account info
Omitaction or set action=get_account_info. Returns user credentials, server info, and active connection count.
Live categories
VOD categories
Series categories
Live streams
Optional. Filter streams to a specific category.
VOD streams
Optional. Filter by category.
Series
Optional. Filter by category.
VOD info
The virtual stream ID of the VOD item.
Series info
The virtual stream ID of the series.
Short EPG
The virtual stream ID of the live channel.
Maximum number of EPG entries to return. Defaults to
4.Catchup table
The virtual stream ID of the live channel.
Start time for the catchup window.
End time for the catchup window.
Stream URLs
Stream URLs are embedded in the playlist items returned by the player API. Media players follow them automatically.Live stream (alt path)
Live stream
Movie / VOD
Series episode
The virtual stream ID, optionally with a file extension (e.g.,
12345.ts, 12345.mkv).Catchup / timeshift stream
Path-based
Duration of the timeshift segment.
Start time of the timeshift segment (format used by the provider).
Query-based
The virtual stream ID of the live channel.
Duration of the timeshift window.
Start time of the timeshift window.
Resource endpoints
Serves associated resources (e.g., cover images, logos) for Xtream playlist items.Token stream (web UI)
The web UI uses a short-lived JWT access token to stream content without exposing user credentials in URLs.Short-lived JWT access token issued by the web UI.
Internal numeric target ID.
One of
live, movie, series, or timeshift.The virtual stream ID.
This endpoint is intended for the built-in web player. Do not use it in external automation as tokens expire quickly.