AimJunkies | Premier Gaming Software & Digital Asset Marketplace

Language Example:

WSSwss://api.yourdomain.com/v1/aimjunkies-stream

Persistent Full-Duplex WebSocket Stream

Root Master Token (AUTH Frame)

Establishes a persistent bi-directional connection between AimJunkies and your proprietary keygen server. Enforces immediate handshake authentication, sub-15ms push delivery, and telemetry keepalive.

Parameters & Headers

Name	Location	Type	Description
action*	frame	string	Set to "AUTH" for connection authentication, or "PING" for round-trip latency keepalive.
token*	frame	string	Your Root Master Security Token (aj_master_sec_sample_99a8b7c6d5e4f3a2b1c0).
timestamp*	frame	integer	Epoch millisecond timestamp used for anti-replay verification.

Request (typescript)

import { WebSocketServer, WebSocket } from 'ws';

const wss = new WebSocketServer({ port: 8081 });
const MASTER_TOKEN = process.env.AIMJUNKIES_MASTER_TOKEN || 'aj_master_sec_sample_99a8b7c6d5e4f3a2b1c0';

wss.on('connection', (ws: WebSocket) => {
  let authenticated = false;

  ws.on('message', (raw: string) => {
    const packet = JSON.parse(raw.toString());

    // 1. Verify Mutual Handshake
    if (packet.action === 'AUTH') {
      if (packet.token === MASTER_TOKEN) {
        authenticated = true;
        return ws.send(JSON.stringify({ status: 'AUTHENTICATED', orgId: 'org_developer_hub' }));
      }
      return ws.close(4001, 'Unauthorized Master Token');
    }

    if (!authenticated) return ws.close(4002, 'Unauthenticated stream');

    // 2. Handle Push Events
    if (packet.event === 'ORDER_FULFILLMENT') {
      ws.send(JSON.stringify({
        status: 'SUCCESS',
        orderId: packet.orderId,
        licenseKey: 'SAMPLE-KEY-99A1-B882-C773',
        instructions: 'Run loader as Admin.'
      }));
    }
  });
});

Expected ResponseHTTP 101

{
  "status": "AUTHENTICATED",
  "orgId": "org_developer_hub",
  "operationalStatus": "OPERATIONAL",
  "latencyMs": 12
}

POSThttps://api.yourdomain.com/v1/aimjunkies-gateway

Cryptographic Signed HTTPS Handshake & Webhook

X-AimJunkies-Signature (HMAC-SHA256)

Alternative or fallback HTTP delivery transport authenticated with HMAC-SHA256 signatures and timestamp-bound anti-replay verification.

Parameters & Headers

Name	Location	Type	Description
X-AimJunkies-Signature*	header	string	HMAC-SHA256 hex digest of the raw request body computed with your Master Secret.
X-AimJunkies-Timestamp*	header	integer	Epoch millisecond timestamp. Requests older than 300 seconds are rejected.
event*	body	string	Event topic: "ORDER_FULFILLMENT", "GENERATE_KEY_STOCK", or "INTEGRATION_TEST".

Request (typescript)

import express, { Request, Response } from 'express';
import crypto from 'crypto';

const app = express();
app.use(express.json());
const MASTER_TOKEN = process.env.AIMJUNKIES_MASTER_TOKEN || 'aj_master_sec_sample_99a8b7c6d5e4f3a2b1c0';

function verifyHmac(req: Request, res: Response, next: Function) {
  const sig = req.headers['x-aimjunkies-signature'] as string;
  const ts = parseInt(req.headers['x-aimjunkies-timestamp'] as string, 10);
  if (!sig || !ts) return res.status(401).json({ status: 'FAILED', message: 'Missing auth headers' });

  // Anti-Replay: 5-minute maximum allowable clock skew
  if (Math.abs(Date.now() - ts) > 300000) {
    return res.status(403).json({ status: 'FAILED', message: 'Timestamp expired' });
  }

  // Constant-time signature comparison to defeat timing attacks
  const expected = 'sha256=' + crypto.createHmac('sha256', MASTER_TOKEN).update(JSON.stringify(req.body)).digest('hex');
  const trusted = Buffer.from(expected, 'utf8');
  const untrusted = Buffer.from(sig, 'utf8');
  if (trusted.length !== untrusted.length || !crypto.timingSafeEqual(trusted, untrusted)) {
    return res.status(403).json({ status: 'FAILED', message: 'Invalid HMAC signature' });
  }
  next();
}

app.post('/v1/aimjunkies-gateway', verifyHmac, (req, res) => {
  res.json({ status: 'SUCCESS', operationalStatus: 'OPERATIONAL' });
});

Expected ResponseHTTP 200

{
  "status": "SUCCESS",
  "operationalStatus": "OPERATIONAL",
  "latencyMs": 14
}

POST/api/v1/releases/sync

Automated CI/CD Release Ingestion

Bearer aj_bld_sec_... (Scoped Build Key)

Ingests newly compiled game binaries, cryptographic SHA-256 checksums, and version bumps directly from automated CI/CD runners (GitHub Actions / GitLab CI) using isolated Scoped Build Keys.

Parameters & Headers

Name	Location	Type	Description
Authorization*	header	string	Bearer token containing your isolated Scoped Build Key (aj_bld_sec_sample_8a9b0c1d2e3f4a5b6c7d8e9f).
productId*	body	string	Target product identifier.
version*	body	string	SemVer release version (e.g. "v4.2.8").
downloadUrl*	body	string	Secure CDN or release binary download address.
sha256Checksum*	body	string	Cryptographic SHA-256 hash for binary integrity validation.

Request (typescript)

import axios from 'axios';

await axios.post('https://api.aimjunkies.com/api/v1/releases/sync', {
  productId: 'prod_apex_v2',
  version: 'v4.2.8',
  downloadUrl: 'https://cdn.developerdomain.com/binaries/loader-v4.2.8.exe',
  sha256Checksum: 'e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855',
  changelog: 'Updated kernel bypass offsets for latest game patch.'
}, {
  headers: { Authorization: 'Bearer aj_bld_sec_sample_8a9b0c1d2e3f4a5b6c7d8e9f' }
});

Expected ResponseHTTP 200

{
  "status": "INGESTED",
  "releaseId": "rel_c9d8e7f6a5b4",
  "deployedAt": "2026-09-08T20:15:30.000Z",
  "activeSubscribersNotified": 342
}

POST/api/v1/licenses/validate

Validate License & Client HWID

Public Endpoint

Heartbeat verification check for an issued license key and client machine hardware hash (HWID). Returns validation status, remaining duration, and active entitlement.

Parameters & Headers

Name	Location	Type	Description
key*	body	string	Customer product license key (e.g. "SAMPLE-981A-48B2-CC90").
hwid*	body	string	SHA-256 hardware hash generated by client machine SMBIOS and CPUID tables.

Request (typescript)

import axios from 'axios';

const res = await axios.post('https://api.aimjunkies.com/api/v1/licenses/validate', {
  key: 'SAMPLE-981A-48B2-CC90',
  hwid: 'c7a93b4e182f09d6e84a2c5b3d1f8e7a'
});
console.log('Valid:', res.data.valid);

Expected ResponseHTTP 200

{
  "valid": true,
  "status": "ACTIVE",
  "product": {
    "id": "prod_98a72b",
    "name": "Apex Vanguard Suite",
    "detectionStatus": "UNDETECTED"
  },
  "expiresAt": "2026-10-15T12:00:00.000Z",
  "hwidBound": true,
  "remainingSeconds": 2592000
}

POST/api/v1/licenses/activate

Activate License & Bind HWID

Public Endpoint

Binds an unactivated customer license key to the client machine hardware identifier. Initializes the duration term upon first execution.

Parameters & Headers

Name	Location	Type	Description
key*	body	string	Unactivated license key.
hwid*	body	string	Generated client hardware hash.

Request (typescript)

import axios from 'axios';
await axios.post('https://api.aimjunkies.com/api/v1/licenses/activate', {
  key: 'SAMPLE-981A-48B2-CC90',
  hwid: 'c7a93b4e182f09d6e84a2c5b3d1f8e7a'
});

Expected ResponseHTTP 200

{
  "activated": true,
  "termDays": 30,
  "expiresAt": "2026-10-15T12:00:00.000Z",
  "hwid": "c7a93b4e182f09d6e84a2c5b3d1f8e7a"
}

POST/api/v1/licenses/reset-hwid

Request HWID Hardware Reset

Session / Customer JWT

Clears hardware ID binding following a hardware upgrade. Governed by merchant cooldown policies and admin validation.

Parameters & Headers

Name	Location	Type	Description
key*	body	string	Bound license key to reset.
reason	body	string	Customer explanation (e.g. "Replaced motherboard").

Request (typescript)

import axios from 'axios';
await axios.post('https://api.aimjunkies.com/api/v1/licenses/reset-hwid', {
  key: 'SAMPLE-981A-48B2-CC90',
  reason: 'Upgraded CPU'
}, { headers: { Authorization: 'Bearer usr_jwt_sample_token' } });

Expected ResponseHTTP 200

{
  "success": true,
  "hwidReset": true,
  "nextAllowedReset": "2026-09-22T00:00:00.000Z"
}

GET/api/v1/products

List Marketplace Products

Public Endpoint

Retrieves public listings, real-time cheat detection statuses, and duration tier prices.

Parameters & Headers

Name	Location	Type	Description
game	query	string	Filter listings by game slug (e.g. "apex-legends").
limit	query	integer	Pagination limit (default 20, max 100).

Request (typescript)

import axios from 'axios';
const res = await axios.get('https://api.aimjunkies.com/api/v1/products?game=apex-legends');

Expected ResponseHTTP 200

{
  "data": [
    {
      "id": "prod_98a72b",
      "name": "Apex Vanguard Suite",
      "game": "Apex Legends",
      "detectionStatus": "UNDETECTED",
      "tiers": [
        {
          "id": "tier_1d",
          "durationDays": 1,
          "price": 4.99
        },
        {
          "id": "tier_30d",
          "durationDays": 30,
          "price": 24.99
        }
      ]
    }
  ],
  "total": 1
}

POST/api/v1/orders/checkout

Initiate 1-Click Escrow Checkout

Session / Customer JWT

Creates a purchase order using Customer Wallet balance or external gateway with automated platform escrow holding.

Parameters & Headers

Name	Location	Type	Description
tierId*	body	string	Selected product duration tier ID.
paymentMethod*	body	string	Payment source: "WALLET", "CARD", or "CRYPTO".

Request (typescript)

import axios from 'axios';
const res = await axios.post('https://api.aimjunkies.com/api/v1/orders/checkout', {
  tierId: 'tier_30d',
  paymentMethod: 'WALLET'
}, { headers: { Authorization: 'Bearer usr_jwt_sample_token' } });

Expected ResponseHTTP 201

{
  "orderId": "ord_9a8b7c6d5e4f3a2b",
  "status": "PAID",
  "licenseKey": "SAMPLE-KEY-99A1-B882-C773",
  "escrowStatus": "HELD_IN_ESCROW"
}

Ready to connect your game server or launcher?

Deploy Master Gateway connections, generate scoped child build keys, and inspect real-time handshake latencies in the Developer Console.

Launch Developer Console

AimJunkies Platform API & Master Gateway Spec

Persistent Full-Duplex WebSocket Stream

Cryptographic Signed HTTPS Handshake & Webhook

Automated CI/CD Release Ingestion

Validate License & Client HWID

Activate License & Bind HWID

Request HWID Hardware Reset

List Marketplace Products

Initiate 1-Click Escrow Checkout

Ready to connect your game server or launcher?