MLBB API Web v4.0.10
MLBB Card Install OpenMLBB Tutorial GitHub Stars
Home User MLBB Academy Addon

Web Playground

User Endpoint

Interactive request form for this API endpoint.

Each card below maps directly to an API endpoint. Query, path, and request body fields are generated from OpenAPI.

Request Routing

The playground switches API hosts based on your daily request count.

Under 500 requests per day, the playground routes to https://mlbb.rone.dev. Above 500 requests per day, it switches to https://openmlbb.fastapicloud.dev (recommended).

Standard

https://mlbb.rone.dev

For 0 - 500 requests per day.

Recommended

https://openmlbb.fastapicloud.dev

Best for 500+ requests per day.

Active base: https://mlbb.rone.dev Standard volume Requests: 0

Jump to endpoint

POST /web/user/auth/send-vc POST /web/user/auth/login POST /web/user/auth/logout GET /web/user/info GET /web/user/stats GET /web/user/privacy/settings POST /web/user/privacy/settings GET /web/user/season GET /web/user/matches GET /web/user/matches/{match_id} GET /web/user/heroes/frequent GET /web/user/matches/hero/{hero_identifier} GET /web/user/friends

POST Login with Verification Code

/web/user/auth/login

Open Only This

Authenticate the player using a verification code to obtain a JWT and session token. This endpoint completes the account login flow, establishes a secure session, and enables authorized access to user-specific resources.

Request body:

  • role_id: Player role identifier.
  • zone_id: Server zone identifier.
  • vc: Verification code sent to the player via in-game mail, valid 5 mins.

The response includes authentication details:

  • code: Status code (0 indicates success).
  • data.jwt: JSON Web Token used for subsequent authenticated requests.
  • data.token: Session token string.
  • data.roleid: Player role ID.
  • data.zoneid: Player zone ID.
  • data.time: Timestamp of login.
  • data.module, name, email, mobile, open_id: Metadata fields (may be empty depending on account).

The response confirms successful login and provides the credentials required for accessing other user endpoints.

POST /api/user/auth/login