Buying accounts

Pick a product type and a quantity. The accounts come back in the same response, and your balance is charged only for what was delivered.

Find what to buy

/products lists every product with the price you pay. /stock shows how many are for sale right now, and needs no key.

The buy endpoints take a short type, not the product id. CS2 types go to /cs2, Rust types to /rust, and every other game to /extra.

The Rust premium- types come with a Rust skin inventory worth $15 or more.

Buy

curl -X POST "https://www.nfa.pub/api/v1/cs2?type=prime&quantity=1&result=json" \  -H "X-Api-Key: rsk_..." \  -H "Idempotency-Key: order-1001"

{  "ok": true,  "order_id": "4b53000e7b4677d2-c69a8e94132d75e8",  "accounts": ["76561198168801886----eyAid..."],  "count": 1,  "charged_eur": 0.3,  "cached": false}

• quantity is a whole number from 1 to 100.
• result=json gives the JSON above. Without it you get plain text, one account per line.
• An account line is the steam id, four dashes, then the login token.
• Keep order_id. Order lookups, replacements and webhooks all use it.

Never pay twice

Send an Idempotency-Key header with every buy, unique for each order you mean to place. If a call times out, send it again with the same key: you get the first result back with cached: true, and nothing is charged a second time.

• The same key with different parameters is refused with E1301.
• The same key while the first call is still running gets E1302. Retry shortly with the same key.
• Up to 200 characters. A longer key is ignored, and that call is not protected.

What you pay

• The priceCents from /products, for each account delivered. With a key that is your own price: an agreed price or your volume discount is already in it.
• Your balance is checked first. If it is short, the buy is refused with E1401 and nothing is charged.
• A short fill is refunded down to what shipped. If nothing can be delivered, the whole charge is reversed and you get an error.
• extended_warranty=1 adds €0.30 per account for 12 hours of cover instead of 6. See Replacements and warranty.

Sold out

Without a flag, a sold-out product is refused with E1501 and nothing is charged. Add preorder=1 to queue a paid pre-order instead.

Limits

30 buys a minute per account, shared by every key on it. Your own API protection rules apply on top: pause, spending limits, purchases per hour, max accounts per request and allowed products.

Common errors

Every other code is in Error codes.