Skip to main content

​
Blacklist Management

The blacklist allows you to permanently block specific IPs or HWIDs from executing any of your scripts. Blacklisted entries are checked during every authentication attempt.

​
Get blacklist

GET /api/vendor/blacklist Fetch all blacklisted IPs and HWIDs for your account.

​
Headers

NameTypeRequiredDescription
AuthorizationString✅Bearer YOUR_API_KEY
[
    {
        "id": 1,
        "ip": "192.168.1.100",
        "hwid": null,
        "reason": "Leaked script to V3rmillion",
        "attempts": 3,
        "timestamp": "2026-05-03T12:00:00"
    },
    {
        "id": 2,
        "ip": null,
        "hwid": "a8f3b2c1d0e9f7a6...",
        "reason": "Chargeback",
        "attempts": 1,
        "timestamp": "2026-05-02T08:30:00"
    }
]

​
Add to blacklist

POST /api/vendor/blacklist Block an IP address, HWID, or both. You must provide at least one of ip or hwid.

​
Request Body

NameTypeRequiredDescription
ipString❌IP address to block
hwidString❌Hardware ID to block
reasonString❌Reason for the ban (default: "Manual ban")
You must provide at least one of ip or hwid. Providing both will block by either match.
curl -X POST https://auth.leaf7.fun/api/vendor/blacklist \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "ip": "192.168.1.100",
    "reason": "Attempted script dump"
  }'

{
    "id": 3,
    "ip": "192.168.1.100",
    "hwid": null,
    "reason": "Attempted script dump",
    "attempts": 1,
    "timestamp": "2026-05-03T14:00:00"
}

​
Remove from blacklist

DELETE /api/vendor/blacklist/{entry_id} Unblock a previously blacklisted IP or HWID.

​
Path Parameters

NameTypeRequiredDescription
entry_idInteger✅ID of the blacklist entry to remove (from the GET response)
{ "status": "success" }