# Wolvy Developer Docs

> Wolvy is a video hosting platform that encrypts every video with Multi-DRM or ClearKey and streams it only to the people you allow. This site documents the Wolvy Developer API v1 and the three pieces a customer builds themselves: calling the API from their own server, signing each viewer, and verifying webhooks.

Key facts (all of them are documented on the pages below):

- Base URL `https://api.wolvy.net`, JSON over HTTPS, versioned as `/v1`. Auth is `Authorization: Bearer wv_live_…`.
- Server-side only: the API sends no CORS headers, so an API key never belongs in a browser or a mobile app.
- 44 endpoints across 13 resources, 9 scopes, 40 error codes. Cursor pagination, `Idempotency-Key` on POST, 120 requests/minute and 10,000/day.
- Scopes: account:read, videos:read, videos:write, playback:sign, analytics:read, usage:read, sessions:read, security:read, webhooks:manage.
- Viewer token: `vt = base64url({"vid": "<viewer_id>", "exp": <unix>}) + "." + base64url(HMAC-SHA256(signing_secret, payload))` — the HMAC covers the base64url payload string, not the JSON.
- Webhook signature: `Wolvy-Signature: t=<unix>,v1=<hex HMAC-SHA256(secret, t + "." + raw_body)>`, five-minute replay window, five delivery attempts.
- Webhook events: video.created, video.ready, video.failed, video.deleted, caption.ready, security.event, payment.paid, webhook.test (plus usage.threshold_reached, reserved and not sent yet).
- Embed URL: `https://embed.wolvy.stream/{video_id}/{base64(account_id)}?vt={viewer_token}`, allowed by a Referer-based domain list.
- Dashboard https://dash.wolvy.net · product site https://wolvy.net · support contact@wolvy.net.
- Documentation last updated 2026-11-12.

Each link below is the Markdown twin of a page; drop `index.md` for the HTML version (for example https://docs.wolvy.net/viewer-tokens/index.md → https://docs.wolvy.net/viewer-tokens/).

## Get started
- [Overview](https://docs.wolvy.net/index.md): Build DRM-protected video into your product: upload by URL, sign every viewer, embed the player and verify webhooks — or install the WordPress plugin.
- [Quickstart](https://docs.wolvy.net/quickstart/index.md): Create an API key, make your first call to the Wolvy API, upload a video by URL, wait for it to encode and put it on a page with a signed viewer token.

## Guides
- [Upload by URL](https://docs.wolvy.net/uploads/index.md): How Wolvy fetches a video from a public https URL, the rules that URL must pass, the queued → processing → playable → ready lifecycle, and adding captions.
- [Sign your viewers](https://docs.wolvy.net/viewer-tokens/index.md): Mint a signed viewer token (vt) so Wolvy can watermark and trace every playback: the wire format, code in six languages, test vectors and a token lab.
- [Embed the player](https://docs.wolvy.net/embedding/index.md): Build a Wolvy embed URL, the iframe attributes DRM needs, responsive sizing, how the domain allowlist reads the Referer, and App-Only playback on mobile.
- [Control the player](https://docs.wolvy.net/player-api/index.md): Play, pause, seek and track progress from the page that embeds a Wolvy video: the wolvy-player.js script, every method and event, and course completion.
- [Webhooks](https://docs.wolvy.net/webhooks/index.md): Receive video.ready and other events from Wolvy. Verify the Wolvy-Signature HMAC over the raw body, handle duplicates, and understand retries and auto-disable.

## Reference
- [API reference](https://docs.wolvy.net/api/index.md): Every Wolvy Developer API v1 endpoint: videos, folders, captions, chapters, moments, playback tokens, analytics, usage, sessions, security events, webhooks.

## Plugins
- [WordPress plugin](https://docs.wolvy.net/wordpress/index.md): Install the Wolvy Video WordPress plugin: connect your API key and signing secret, embed with the block, shortcode or Elementor, and extend it with filters.

## Optional

- [Everything in one file](https://docs.wolvy.net/llms-full.txt): every page above, concatenated.
- [Postman collection](https://docs.wolvy.net/downloads/wolvy-developer-api.postman_collection.json): all 44 endpoints, importable, with an environment file beside it.
- [Wolvy Video for WordPress](https://wordpress.org/plugins/wolvy-video/): the plugin's listing on WordPress.org.
- [wolvy.net](https://wolvy.net/): what Wolvy is, plans and pricing.