Requests go to https://durovloh.net/api.php (or https://m.durovloh.net/api.php). Pass method, access_token and parameters. A successful reply is JSON {"response": ...}. An error is {"error": {"error_code": N, "error_msg": "...", "request_params": [...]}}.
Get a token with POST /oauth/token (grant_type=password, username, password) or method=users.login. Send access_token with every request. Never publish tokens or passwords. Community URLs use /public
curl -s -X POST 'https://durovloh.net/oauth/token' \ -d 'grant_type=password' \ -d 'username=USER_EMAIL' \ -d 'password=USER_PASSWORD' curl -s -X POST 'https://durovloh.net/api.php' \ -d 'method=users.get' \ -d 'access_token=USER_TOKEN'
5 | Invalid or expired access_token. |
6 | Too many requests per second. |
7 | Permission denied. |
10 | Internal server error. |
14 | Captcha needed. |
15 | Access denied (a closed object, someone else’s document without access_key, etc.). |
100 | A required parameter is missing or invalid. |
113 | Invalid user id. |
200 | Access denied to the album, wall or community. |
900 | Cannot send the message (privacy or blacklist). |
Behavior of wall.post, wall.search, newsfeed.search and the related language filter / related-video methods is documented as on current production. These methods may still be refined.
accountaudioauthboarddatabasedocsexecutefavefriendsgiftsgroupslikesmessagesnewsfeednotificationspagesphotospollsstatsstatusstorestoriesusersutilsvideowall