Words Guide

Words supports browser play and terminal play.

Browser Play

Use the main page to boost, attack, block, and claim words with your account or as a guest.

Terminal Play With API Key

Sign in on the website, open the API Keys popup in the top-right account menu, and rotate your key. The key is shown once, so copy it immediately and store it safely.

Send the key in the X-API-Key header over HTTPS.

Use /me with the same header to check your authenticated balance from the terminal.

The same header also works with /auth/me and /w/{word}.

Terminal Auth Matrix

/me: cookie session or X-API-Key; returns charge balance.
/auth/me: cookie session or X-API-Key; returns auth identity.
/play: cookie session or X-API-Key; uses charge balance.
/w/{word}: cookie session or X-API-Key; classic 1-point bump, no charge balance.
Plain curl without cookies or X-API-Key behaves as anonymous.

export WORDS_API_KEY="YOUR_API_KEY"

curl https://words.fncy.ca/me   -H "X-API-Key: $WORDS_API_KEY"

curl https://words.fncy.ca/auth/me   -H "X-API-Key: $WORDS_API_KEY"

curl https://words.fncy.ca/w/banana   -H "X-API-Key: $WORDS_API_KEY"

curl https://words.fncy.ca/play   -X POST   -H "Content-Type: application/json"   -H "X-API-Key: $WORDS_API_KEY"   -d '{"word":"banana","amount":1,"action":0}'

/w/{word} is the classic one-point bump endpoint. It still ignores balance, but it now accepts API keys for authenticated terminal use.

Read-Only Endpoints

curl https://words.fncy.ca/w/banana
curl https://words.fncy.ca/top/meta
curl https://words.fncy.ca/leaderboard

Interactive API Schema

The OpenAPI interface is available at /swagger.

Safety Notes

Do not paste your API key into public chats or screenshots.
Rotate your key if you think it was exposed.
The server stores only a keyed hash of the API key, not the plaintext value.