CPL3D API

Returns the current API version. No authentication required, and it does not count against any limit.

Example

curl "https://www.cpl3d.com/api/v1/version"

Response

{
  "version": "1.1.0",
  "released": "2026-10-10"
}

The categories present across the approved catalogue, each with a display label. No authentication required — this is catalogue vocabulary, not account data, so a client can build its filter row before anyone has pasted a key.

Response

{
  "categories": [
    { "id": "poke-ball", "label": "Pokéballs" }
  ]
}

Pass an id as category on /library, or as type on /models. The list is derived from the catalogue rather than hardcoded, so a new product line appears here on its own. An unknown category returns an empty page rather than an error.

Confirms the presented key works and reports who it belongs to, what it may do, and live usage against both limits. Requires only the models scope, so a metadata-only key can still verify itself — it reports downloads_enabled: false rather than refusing.

Built for connection screens: show connected as X, 87 downloads left today instead of letting a user find the limit by hitting it. Never cached.

Example

curl "https://www.cpl3d.com/api/v1/me" \
  -H "Authorization: Bearer pk_your_key_here"

Response

{
  "display_name": "Chris",
  "tier": "subscriber",
  "key": {
    "name": "LayerMate",
    "prefix": "pk_1a2b3c4...",
    "created_at": "2026-09-01T10:00:00.000Z",
    "last_used_at": "2026-09-04T17:58:11.000Z",
    "scopes": ["models", "downloads"],
    "downloads_enabled": true
  },
  "usage": {
    "requests_this_period": 342,
    "request_limit": null,
    "period_resets_at": "2026-10-01T10:00:00.000Z",
    "downloads_today": 13,
    "daily_download_limit": 100,
    "downloads_remaining_today": 87
  }
}

request_limit is null when the account has no request cap. The three download fields are null when the key lacks the downloads scope.

Everything your account can download — purchases, subscription grants, gifts and qualifying early access. Never the whole catalogue.

Query parameters

Example

curl "https://www.cpl3d.com/api/v1/library?limit=50" \
  -H "Authorization: Bearer pk_your_key_here"

Response

{
  "models": [
    {
      "id": 412,
      "name": "0143 Snorlax",
      "slug": "0143-snorlax",
      "thumbnail": "https://...supabase.co/.../0143-snorlax-thumbnail.webp",
      "files_updated_at": "2026-08-20T11:02:31.000Z",
      "owned": true,
      "downloadable": true,
      "estimated_print_time_seconds": 15200,
      "total_weight_grams": 53.5,
      "print_profiles": [
        {
          "id": 1841,
          "name": "0143 Snorlax AMS.3mf",
          "variant": "AMS",
          "isCommunity": false,
          "numberOfPlates": 2,
          "estimatedPrintTime": 13500,
          "totalWeightGrams": 53.5,
          "filamentColors": [
            { "hex": "#1F3A5F", "name": "Navy Blue", "weight": 42.5 },
            { "hex": "#F2F2F2", "name": "Jade White", "weight": 11 }
          ]
        }
      ]
    }
  ],
  "total": 145,
  "page": 1,
  "limit": 50,
  "total_pages": 3,
  "has_next": true
}

Ordered by files_updated_at descending, so the most recently changed models come first. Admins and mods get their own real grants here, not the full catalogue — their blanket access still applies to individual downloads.

A paginated list of approved models, each with its print profiles and an owned flag. Requires the models scope.

Query parameters

Example

curl "https://www.cpl3d.com/api/v1/models?limit=50&sort=created_at&sortDir=desc" \
  -H "Authorization: Bearer pk_your_key_here"

Response

{
  "models": [
    {
      "id": 412,
      "name": "0143 Snorlax",
      "slug": "0143-snorlax",
      "description": "Print-tested Snorlax ball. AMS and SPLIT profiles included.",
      "type": "poke-ball",
      "thumbnail": "https://...supabase.co/.../0143-snorlax-thumbnail.webp",
      "width_mm": 74.5,
      "depth_mm": 74.5,
      "height_mm": 78.2,
      "created_at": "2026-08-14T03:21:55.000Z",
      "files_updated_at": "2026-08-20T11:02:31.000Z",
      "owned": true,
      "print_profiles": [
        {
          "id": 1841,
          "name": "0143 Snorlax AMS.3mf",
          "variant": "AMS",
          "isCommunity": false,
          "fileSize": 18234491,
          "numberOfPlates": 2,
          "estimatedPrintTime": 13500,
          "filamentColors": [
            { "hex": "#1F3A5F", "name": "Navy Blue", "weight": 42.5 },
            { "hex": "#F2F2F2", "name": "Jade White", "weight": 11.0 }
          ]
        }
      ]
    }
  ],
  "total": 214,
  "page": 1,
  "limit": 50
}

Full detail for one model: every approved profile with its id, variant, plate count, print time and per-filament breakdown. Open to any member who owns at least one model — detail for a single model is not the bulk-catalogue feature that /models is.

Example

curl "https://www.cpl3d.com/api/v1/models/412" \
  -H "Authorization: Bearer pk_your_key_here"

Returns the same model object shape as /library, unwrapped. A model that does not exist and one that is not currently approved both return the same 404 body, so an id sweep cannot be used to discover models the listing endpoints hide.

The same catalogue with Pokemon attributes attached — Pokedex number, generation, region and tags — and filters for them. Requires the poke-balls scope.

Query parameters

Example

curl "https://www.cpl3d.com/api/v1/poke-balls?generation=1&sort=pokedex_num" \
  -H "Authorization: Bearer pk_your_key_here"

Requests a one-time download link for one print profile. Returns JSON, not bytes. Requires the downloads scope, at least one owned model on the account, and an approved app.

Approved apps

• LayerMate — add CPL3D as an Auto Download source in LayerMate and paste an API key with the downloads scope.
• EdgeSlicer — add CPL3D as a custom model source and paste an API key with the downloads scope. See Using CPL3D in EdgeSlicer.

Neither needs an app key: the member's API key is enough.

Building an app and want downloads approved? Contact us with what your app does. Approved apps receive an app key to send in an X-App-Key header next to the member's Authorization header. Keep it server-side or otherwise private: a leaked app key is revoked, and your users lose downloads until a new one is issued.

Query parameters

Response

{
  "download_url": "https://www.cpl3d.com/api/v1/download/8Kx2...e2",
  "expires_in": 300,
  "expires_at": "2026-09-04T18:05:00.000Z",
  "one_time_use": true,
  "profile": { "id": 1841, "name": "0143 Snorlax AMS.3mf" }
}

Example

# 1. Ask for a link (returns JSON, not bytes)
curl "https://www.cpl3d.com/api/v1/models/412/download?profile=AMS" \
  -H "Authorization: Bearer pk_your_key_here" \
  -H "X-App-Key: app_your_app_key_here"

# 2. Fetch it. No auth header. Works once, for 5 minutes.
curl -L -o snorlax-ams.3mf \
  "https://www.cpl3d.com/api/v1/download/8Kx2...e2"

Errors

• 403 — not entitled to this model, the key lacks the downloads scope, the account owns nothing, or the request is not from an approved app (code: "app_not_approved")
• 404 — model or profile not found, or the model has no approved profiles
• 429 — the 100-distinct-models-per-24h cap
• 503 — API downloads temporarily disabled

Serves the watermarked .3mf. You do not construct this URL — use the download_url from the endpoint above verbatim. No Authorization header; follow redirects and read the filename from Content-Disposition.

The token names exactly one file and is spent the moment it is used, before any bytes are sent. Entitlement is checked again here, not just when the link was minted, so a refund or a cancelled subscription in the intervening minutes still denies the download. Query parameters are ignored entirely: nothing you append can change which file comes back.

The link only works from the IP address that requested it (for IPv6, the same /64). Request and fetch it from the same machine. A link requested on a server and opened somewhere else is refused and spent.

Errors

• 410 — already used, expired, or never valid. Mint a new link; do not retry this one.
• 403 — entitlement changed since the link was created, or the link was fetched from a different IP than the one that requested it (code: "ip_mismatch"). Mint a new link from the machine that will download the file.