Stream an injectable

This endpoint streams all active injectables for a project using a License Key (not an API key). It is designed for SDKs and client runtimes that need to fetch injectables dynamically.

Injectables are returned as raw encrypted payloads (for sensitive fields), plus integrity fields you can use to verify payload authenticity before applying them.

Endpoint

GET /v1/injectable/stream

Authentication

This endpoint uses your License Key.

Required header

X-LICENSE-KEY: <your_license_key>

Query Parameters

Parameter	Type	Required	Description
per_page	integer	No	Number of injectables per page (default: 50, max: 50)
cursor	string	No	Cursor used for pagination

Headers

Header	Required	Description
X-LICENSE-KEY	Yes	Your license UUID (license key)
Accept	No	application/json

Request

curl -X GET "https://api.devpayr.com/v1/injectable/stream?per_page=15" \
  -H "X-LICENSE-KEY: YOUR_LICENSE_KEY" \
  -H "Accept: application/json"

Request with cursor

Response

Response Fields Explained

Top-level response keys

Key	Type	Description
status	string	success or error
message	string	Human-readable status message
data	object	Payload container
errors	object | null	Validation / error payload (if any)

data keys

Key	Type	Description
injectables	array	List of injectables returned for this license
next_cursor	string | null	Cursor for the next page
has_more	boolean	Whether more pages exist

Injectable object keys

Key	Type	Description
slug	string	Injectable unique slug under the project
type	string	Injectable type (file, snippet, etc.)
mode	string	How this injectable should be applied (inject, write, etc.)
encrypted_content	string	Encrypted injectable payload (base64 string)
file_path	string | null	Encrypted file location (only when type = "file")
target_path	string	Where the injectable should be written/injected
signature	string	Integrity signature for verification
meta	object	Extra metadata for SDK/runtime usage

---

Important Notes

Payment-gated injectables

Some injectables may be created with only_if_paid = true. If the project linked to your license is not marked paid, those injectables will not be included in the stream.

Closing Note

This endpoint is intentionally SDK-agnostic. You can consume it from any language or runtime (raw HTTP, CLI, server-side, mobile, desktop). As long as you can handle the encrypted payload format and verify integrity in your environment, you can safely build your own client implementation.