VRChat API (api.vrchat.cloud) not on any URL Allowlists
srckat
I have no idea why "api.vrchat.cloud" is not on the URL allowlists, and I see no reason why it shouldn't be. It could be used for loading images, and also strings from world JSON for example.
Log In
Aries'
Most endpoints require authentication, which VRChat most definitely doesn't (& won't) send along with the request. As a workaround, I built a little Udon-compatible wrapper for this a couple months ago.
... ect.
It's unfortunately not on the Trusted URLs list, so similar issues.
srckat
Aries' Yeah the entire idea for it was to have a way to not require untrusted URLs. This doesn't require auth by the way, and the world creator can post any value to it: https://api.vrchat.cloud/api/1/worlds/wrld_99e206c0-9c2a-4953-a243-b1b048b0f99e/metadata
Aries'
srckat Yeah, but many do, or exclude/obfuscate properties without, ie: World "occupants" are always 0 when unauthenticated. Interesting endpoint though, you should definitely add it to the API documentation! https://vrchat.community/contributing
srckat
Aries' It's already in the documentation.
Aries'
srckat The property is missing in "updateWorld", which the documentation suggests is how you'd set them :)