ScriptZip API for developer tools

How to get started

1. Create a ScriptZip account.
2. Open the API Keys page in your dashboard.
3. Generate a key for your app, environment, or client integration.
4. Send POST requests to /api/v1/tool/run/ using your key in the Authorization header.

Authentication

API requests require a valid ScriptZip API key. Keys are created per user account and are shown only once when generated.

Authorization: Bearer YOUR_API_KEY
Content-Type: application/json
Accept: application/json

You can also send the key in the X-API-Key header if that is easier for your integration.

Request format

The authenticated API uses one clean endpoint. Pass the tool key, the input text, and an optional options object.

{
  "tool": "json_formatter",
  "input": "{\"name\":\"ScriptZip\"}",
  "options": {
    "indent": 2
  }
}

Example requests

curl -X POST https://www.scriptzip.io/api/v1/tool/run/ \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "tool": "json_formatter",
    "input": "{\"name\":\"ScriptZip\"}",
    "options": {"indent": 2}
  }'

const response = await fetch("https://www.scriptzip.io/api/v1/tool/run/", {
  method: "POST",
  headers: {
    "Authorization": "Bearer YOUR_API_KEY",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    tool: "css_minifier",
    input: ".card { padding: 16px; color: #ffffff; }"
  })
});

const result = await response.json();

import requests

response = requests.post(
    "https://www.scriptzip.io/api/v1/tool/run/",
    headers={
        "Authorization": "Bearer YOUR_API_KEY",
        "Content-Type": "application/json",
    },
    json={
        "tool": "html_minifier",
        "input": "<div> ScriptZip </div>",
    },
    timeout=20,
)
print(response.json())

Available tools

Use the same tool keys that power the public tool pages. Start with the most common formatter, validator, minifier, and converter workflows below.

Rate limits

ScriptZip applies per-account API usage limits. Free accounts currently support a limited number of requests per day and per month. If your request volume exceeds the current limit, the API returns 429 with a clear error message.

Privacy and processing

API request bodies are processed server-side to return the requested result. Request metadata and byte counts may be logged, but the processor does not create a reusable content record from the submitted source. Use HTTPS, rotate keys when needed, and never expose raw API keys in frontend code.