Authentication

Learn how to authenticate with the Stake.com API using access tokens and session cookies.

Overview

StakeAPI uses the same authentication mechanism as the Stake.com website. You need an access token (and optionally a session cookie) to make authenticated requests.

You must have a Stake.com account to use StakeAPI. If you don’t have one yet, sign up here — it takes less than a minute.

Getting Your Access Token

  1. Log in to Stake.com in your browser
  2. Open Developer Tools — Press F12 or Ctrl+Shift+I (Windows) / Cmd+Option+I (Mac)
  3. Go to the Network tab
  4. Perform any action on the site (check balance, browse games, etc.)
  5. Find a GraphQL request — Look for requests to /_api/graphql
  6. Click on the request and go to the Headers tab
  7. Find the x-access-token header — This is your access token

Your access token will look something like:

2775b505cccaee723e5c705ba552fea7c272f6d20f68d7224eb3ba23446ca295...

Method 2: Copy as cURL

  1. Follow steps 1-5 above
  2. Right-click the GraphQL request
  3. Select Copy → Copy as cURL
  4. Use the built-in extractor:
from stakeapi.auth import AuthManager

curl_command = """
curl "https://stake.com/_api/graphql" \
  -H "x-access-token: your_token_here" \
  -H "content-type: application/json" \
  ...
"""

# Extract access token
token = AuthManager.extract_access_token_from_curl(curl_command)
print(f"Access Token: {token}")

# Extract session cookie
session = AuthManager.extract_session_from_curl(curl_command)
print(f"Session Cookie: {session}")

Method 3: Environment Variables

Store your token securely in an environment variable:

# Windows (PowerShell)
$env:STAKE_ACCESS_TOKEN = "your_access_token_here"

# macOS/Linux
export STAKE_ACCESS_TOKEN="your_access_token_here"

Then use it in your code:

import os
from stakeapi import StakeAPI

token = os.getenv("STAKE_ACCESS_TOKEN")
async with StakeAPI(access_token=token) as client:
    balance = await client.get_user_balance()

Method 4: .env File

Create a .env file in your project root:

STAKE_ACCESS_TOKEN=your_access_token_here
STAKE_SESSION_COOKIE=your_session_cookie_here

Then load it with python-dotenv:

import os
from dotenv import load_dotenv
from stakeapi import StakeAPI

load_dotenv()

token = os.getenv("STAKE_ACCESS_TOKEN")
session = os.getenv("STAKE_SESSION_COOKIE")

async with StakeAPI(access_token=token, session_cookie=session) as client:
    balance = await client.get_user_balance()

Never commit your .env file to version control. Add it to your .gitignore file.

💡 Don't have a Stake.com account yet? Sign up here to get started and unlock all API features.

Authentication Options

StakeAPI supports multiple authentication methods:

Access Token Only

The simplest approach — sufficient for most use cases:

async with StakeAPI(access_token="your_token") as client:
    # Make API calls
    pass

Access Token + Session Cookie

For maximum compatibility, use both:

async with StakeAPI(
    access_token="your_token",
    session_cookie="your_session_cookie"
) as client:
    # Make API calls
    pass

Using AuthManager

For advanced token management:

from stakeapi.auth import AuthManager

auth = AuthManager(access_token="your_token")

# Check if token is expired
if auth.is_token_expired():
    print("Token has expired, get a new one!")

# Update token
auth.set_access_token("new_token", expires_in=3600)

# Get auth headers for custom requests
headers = await auth.get_auth_headers()

Token Lifecycle

Aspect Detail
Format 96-character hex string
Lifetime Session-based (varies)
Scope Full account access
Rotation New token per login session
Invalidation Logging out invalidates the token

Security Best Practices

  1. Never hardcode tokens — Use environment variables or .env files
  2. Rotate regularly — Get a fresh token periodically
  3. Limit scope — Don’t share your token with others
  4. Use .gitignore — Exclude .env and any files containing tokens
  5. Monitor usage — Watch for unexpected API activity
# .gitignore
.env
*.env
config.py
secrets.py

Handling Token Expiration

Tokens can expire or be invalidated. Handle this gracefully:

from stakeapi import StakeAPI
from stakeapi.exceptions import AuthenticationError

async with StakeAPI(access_token="your_token") as client:
    try:
        balance = await client.get_user_balance()
    except AuthenticationError:
        print("Token expired! Please get a new token from stake.com")
        # Optionally: re-authenticate or notify user

Checking Token Validity 

from stakeapi.auth import AuthManager

auth = AuthManager(access_token="your_token")

# Set expiration tracking
auth.set_access_token("your_token", expires_in=7200)  # 2 hours

# Check later
if auth.is_token_expired():
    print("Time to refresh your token!")
    auth.clear_tokens()

🎰 Ready to experience Stake.com?

Create your account and start using StakeAPI with real data today.

Sign Up on Stake.com →

💬 Join the StakeAPI Community on Discord

Get help, share your projects, discuss strategies, and stay up to date with the latest StakeAPI news.

Join Our Discord Server →

Next Steps

Now that you’re authenticated, make your first API call:

Need a Stake.com account to get started? Sign up here — it’s free and takes less than a minute.