CORS, Rate Limits & Images

CORS

The Riftseer API is public. CORS headers are set for any request that includes an Origin header, so client-side JavaScript on any domain can call the API directly without a proxy.

Allowed methods: GET, HEAD, POST, PUT, PATCH, DELETE, OPTIONS.

Using the API from client-side JavaScript

No special setup is required. Standard fetch calls work from any origin:

const res = await fetch("https://api.riftseer.com/api/v1/cards?name=bard");
const { cards } = await res.json();

Content Security Policy (CSP)

If your site uses a CSP, add the following directives:

connect-src https://api.riftseer.com;
img-src https://img.riftseer.com https://*.riftcodex.com https://tcgplayer-cdn.tcgplayer.com;

---

Rate limits

There are currently no enforced rate limits on the API. Requests are not throttled or queued.

Please be a good citizen: avoid hammering the endpoint in tight loops and cache responses where possible. The card index changes infrequently — results from /api/v1/cards and /api/v1/sets are safe to cache for the duration of a user session or longer.

---

Images

Card images are re-hosted in the riftseer-cards Cloudflare R2 bucket and served through https://img.riftseer.com. RiftCodex and TCGPlayer remain image sources, but stable completed media URLs point at the Riftseer domain.

Available sizes

The media.media_urls object on a card may contain the following keys:

Key	Notes
small	WebP, approximately 200 px wide
normal	WebP, approximately 400 px wide
large	WebP, up to approximately 1000 px wide
original	Original source bytes
png	Legacy upstream fallback when hosted media is unavailable

Check for null / undefined before using any image URL because a card may have no source or may still be waiting for asynchronous variant generation.

const imageUrl = card.media?.media_urls?.normal ?? null;

Orientation

media.orientation is either "portrait" (vertical, the common case) or "landscape" (horizontal). Use this to size your image container correctly rather than assuming aspect ratio.

Accessibility

media.accessibility_text contains a plain-text description of the card art where available. Use it as the alt attribute on image elements:

<img src={card.media.media_urls.normal} alt={card.media.accessibility_text ?? card.name} />

Attribution

Card images and data originate from Riot Games / Riftbound. When displaying card images, do not crop, distort, or overlay the card art in ways that obscure the artist credit.