AR Digital ClientAPI Integration Guide
Detailed client guides on signing production requests, authentication headers, response shapes, and direct-download usage.
https://api.teraboxdl.site
All production extractions require an API signature computed using your secret key.
Retrieve real-time metrics, logs, and billing metadata directly via our developer API.
Developer Security Advisory
POST /v1/api, you must provide the following HTTP headers:Content-Type: application/json
X-API-Key: your_api_key
X-Timestamp: unix_timestamp_in_seconds
X-Signature: hmac_sha256_signature
Signature Formula
Construct a message by concatenating the HTTP method, request path, Unix timestamp (in seconds), and the exact request body JSON string.
message = "POST" + "/v1/api" + timestamp + body
Then, generate an HMAC-SHA256 hash of that message using your API Secret as the key. Format the result as a hexadecimal string.
import crypto from "node:crypto";
const baseUrl = "https://api.teraboxdl.site";
const apiKey = "your_api_key";
const apiSecret = "your_api_secret";
const body = JSON.stringify({
url: "https://terabox.com/s/your-link",
dir_path: "", // Optional: specific folder path to fetch
page: 1, // Optional: page number for folder contents
});
const timestamp = Math.floor(Date.now() / 1000).toString();
const signature = crypto
.createHmac("sha256", apiSecret)
.update(`POST/v1/api${timestamp}${body}`)
.digest("hex");
const response = await fetch(`${baseUrl}/v1/api`, {
method: "POST",
headers: {
"Content-Type": "application/json",
"X-API-Key": apiKey,
"X-Timestamp": timestamp,
"X-Signature": signature,
},
body,
});
const data = await response.json();
console.log(data);import json
import time
import hmac
import hashlib
import requests
BASE_URL = "https://api.teraboxdl.site"
API_KEY = "your_api_key"
API_SECRET = "your_api_secret"
payload = {
"url": "https://terabox.com/s/your-link",
"dir_path": "", # Optional: specific folder path to fetch
"page": 1 # Optional: page number for folder contents
}
body = json.dumps(payload, separators=(",", ":"))
timestamp = str(int(time.time()))
message = f"POST/v1/api{timestamp}{body}"
signature = hmac.new(
API_SECRET.encode("utf-8"),
message.encode("utf-8"),
hashlib.sha256,
).hexdigest()
response = requests.post(
f"{BASE_URL}/v1/api",
headers={
"Content-Type": "application/json",
"X-API-Key": API_KEY,
"X-Timestamp": timestamp,
"X-Signature": signature,
},
data=body,
timeout=40,
)
print(response.json())A successful request returns errno: 0. Folders are processed lazily: pass the path in dir_path and request a page in page parameters to fetch subdirectory contents.
{
"errno": 0,
"request_id": 1744212345678900,
"server_time": 1744212345,
"list": [
{
"fs_id": 123456789,
"server_filename": "sample-video.mp4",
"size": 104857600,
"formatted_size": "100.00 MB",
"direct_link": "https://...",
"stream_url": "https://...",
"stream_download_url": "https://...",
"thumbs": {
"url1": "https://...",
"url2": "https://...",
"url3": "https://...",
"icon": "https://..."
}
}
],
"share_id": 123456,
"uk": 987654,
"title": "Terabox Download",
"total_size_bytes": 104857600,
"total_size": "100.00 MB"
}X-API-Key header.Returns account profile data, plan limits, and usage totals for the current API key.
Returns dashboard data such as usage, performance, and endpoint breakdown for the current account.
Returns daily usage analytics. Supports `days`, `start_date`, and `end_date` query params.
Returns paginated request history. Supports filters such as `page`, `per_page`, `status`, `search`, and date range.
Returns recent live activity for the current account. Supports a `limit` query param.
Exports request history as CSV using the current API key.
Regenerates credentials for the current account. The old API key is invalidated after regeneration.