Blacklist Management

The blacklist allows you to permanently block specific IPs or HWIDs from executing any of your scripts. Blacklisted entries are checked during every authentication attempt.

Get blacklist

GET /api/vendor/blacklist Fetch all blacklisted IPs and HWIDs for your account.

Headers

Name	Type	Required	Description
`Authorization`	String	✅	`Bearer YOUR_API_KEY`

200 OK

[
    {
        "id": 1,
        "ip": "192.168.1.100",
        "hwid": null,
        "reason": "Leaked script to V3rmillion",
        "attempts": 3,
        "timestamp": "2026-05-03T12:00:00"
    },
    {
        "id": 2,
        "ip": null,
        "hwid": "a8f3b2c1d0e9f7a6...",
        "reason": "Chargeback",
        "attempts": 1,
        "timestamp": "2026-05-02T08:30:00"
    }
]

Add to blacklist

POST /api/vendor/blacklist Block an IP address, HWID, or both. You must provide at least one of ip or hwid.

Request Body

Name	Type	Required	Description
`ip`	String	❌	IP address to block
`hwid`	String	❌	Hardware ID to block
`reason`	String	❌	Reason for the ban (default: `"Manual ban"`)

You must provide at least one of ip or hwid. Providing both will block by either match.

curl -X POST https://auth.leaf7.fun/api/vendor/blacklist \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "ip": "192.168.1.100",
    "reason": "Attempted script dump"
  }'

curl -X POST https://auth.leaf7.fun/api/vendor/blacklist \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "hwid": "a8f3b2c1d0e9f7a6...",
    "reason": "Chargeback"
  }'

200 OK
400 Bad Request

{
    "id": 3,
    "ip": "192.168.1.100",
    "hwid": null,
    "reason": "Attempted script dump",
    "attempts": 1,
    "timestamp": "2026-05-03T14:00:00"
}

{ "detail": "Must provide either IP or HWID" }

Remove from blacklist

DELETE /api/vendor/blacklist/{entry_id} Unblock a previously blacklisted IP or HWID.

Path Parameters

Name	Type	Required	Description
`entry_id`	Integer	✅	ID of the blacklist entry to remove (from the GET response)

200 OK
404 Not Found

{ "status": "success" }

{ "detail": "Entry not found" }

Getting Started

API Reference

Script Integration

Blacklist

Blacklist Management

Get blacklist

Headers

Add to blacklist

Request Body

Remove from blacklist

Path Parameters

​Blacklist Management

​Get blacklist

​Headers

​Add to blacklist

​Request Body

​Remove from blacklist

​Path Parameters

Blacklist Management

Get blacklist

Headers

Add to blacklist

Request Body

Remove from blacklist

Path Parameters