v1.1 · updated Apr 1, 2026
KVS REST API plugin provides a complete JSON API for your site. Videos, albums, categories, models, channels, playlists, posts, tags, search, comments, ratings, favorites, watch later, subscriptions, friends, messages, user profiles and admin operations — all accessible through clean REST endpoints.
Two authentication modes: API key for server-to-server admin operations, and user tokens for mobile app / SPA frontend flows. Every endpoint respects KVS access control — private and premium content is protected the same way as on the website.
Video detail endpoints return available formats (preview, 720p, etc.) with signed URLs — the same hotlink-protected URLs that KVS player uses. Each format shows whether the current user can access it.
Access control follows KVS logic exactly: is_private + access_level_id + memberzone settings + premium status + token purchases. Public videos are accessible to guests. Premium content requires authentication.
Built for the use case that KVS community has been requesting for years — mobile applications. Login returns a Bearer token, all endpoints accept JSON, responses include pagination headers (Link, X-Total-Count).
CORS headers included for browser-based SPA frontends. Rate limiting per IP protects against abuse. Debug logging helps diagnose issues during development.
Added license key system with 7-day free trial. ECDSA-signed keys tied to domain. Native KVS admin UI for license management.
Initial release. 60 REST API endpoints, token-based auth, video formats with signed URLs, full KVS access control, billing, rate limiting, CORS, OpenAPI 3.0 spec.