Build with Neuroscape.
Look up cards, search the rules, and browse printings. No API key required. The catalog API is separate from LootPanel accounts and matches.
Try a card search
Queries use AND between terms. Quoted phrases stay together. Prefix a term with - to exclude it.
Run a query to see the response.
Quick start
Base URL: https://api.lootpanel.com/v1/games/neuroscape
curl -H 'Accept: application/json' 'https://api.lootpanel.com/v1/games/neuroscape/cards/named?exact=PHISHING'
const url = new URL('https://api.lootpanel.com/v1/games/neuroscape/cards/search');
url.searchParams.set('q', 'faction:hacker cost<=3');
const response = await fetch(url, { credentials: 'omit' });
const result = await response.json();
if (!response.ok) throw new Error(result.message);
console.log(result.data);Use the returned next_page URL to paginate. Names and source IDs can change; save the permanent card or printing ID returned by the API.
Endpoint reference
The OpenAPI 3.2 contract includes response schemas and request parameters. Collection lookup uses POST with {"identifiers":[{"source_id":"GEN-KS-022"},{"exact":"Deep Diver"}]}. Each item returns a card or an error in the same order as the input.
Search syntax
| Example | Meaning |
|---|---|
phishing | Name, rules text, keyword, or source ID |
name:"deep diver" | Name or alternate name contains this phrase |
faction:hacker type:program | Both filters must match |
cost<=3 attack>=2 | Numeric comparisons; unknown values do not match |
-keyword:iconic | Exclude matching cards |
set:genesis rarity:common | A single printing must match both filters |
digital:available | Registered in LootPanel's current game engine |
Fields: name, text, faction, type, keyword, cost, attack, defense, set, rarity, id, digital. Search ignores case and accents. OR, parentheses, and regular expressions are not supported in this release. The same fields work as ordinary query parameters and narrow q with AND.
Sort with order=name|cost|attack|defense and direction=asc|desc. Exact lookup never guesses a fuzzy match.
Bulk downloads
For a complete local catalog, use the bulk manifest. It links to gzip-compressed JSON files for cards, printings, sets, rulings, migrations, and the complete snapshot. Verify each compressed file's SHA-256 before decompressing it.
Revision URLs are immutable. Check the manifest's catalog revision before downloading again. Do not crawl individual endpoints to recreate the catalog.
Data and attribution
Cards describe rules identities; printings describe releases and printed text. Alternate names remain linked to the same rules identity. Missing metadata is null. Set counts describe our source snapshot, not a guarantee of every physical release.
The initial source is the A-Z Universe catalog retrieved September 13, 2026, with LootPanel corrections attributed per field. Printed text is a source transcription. Rulings are third-party explanations, not publisher rulings. Formats cite the rules edition they transcribe.
images.normal contains a verified, hosted asset when available. Other printings may have only source_image_url; those external references have not been verified as hosted LootPanel images. Source-reported finishes are not guarantees of released stock. Language and release dates remain null where unverified.
Digital availability means engine registration. It does not certify every interaction, nor allow a catalog update to change an active match. Publisher gallery · A-Z Universe · NeuroDB
Neuroscape text and art remain the property of their owners. LootPanel grants no redistribution or commercial-use license for that content. Contact the relevant rights holder about your intended use. This API is independent and does not claim publisher endorsement.
Limits and errors
Pages default to 50 cards and allow at most 100. Collection requests allow 100 identifiers and 64 KB. Queries allow 512 characters and 20 terms. Autocomplete returns at most 20 names.
Anonymous requests are limited to 600 per minute per edge location and IP, with a lower origin-wide safety cap. Shared networks share limits. A 429 response includes Retry-After; wait before retrying. Bulk files are the preferred option for repeated large imports.
Errors use JSON with status, code, and message. Search with no matches returns an empty 200 list. Missing cards return 404, invalid input 400, expired revisions 410, oversized bodies 413, and unsupported content types 415. No private account information is returned.
Versions and status
This is v1 beta. The API version, catalog revision, rules revision, and game engine are separate. New fields may be added; clients should ignore fields and enum values they do not recognize. Breaking contract changes will use a new API major version.
Cursors retain their original query and catalog revision. Use the returned link unchanged. Published snapshots are retained for at least seven days for pagination; bulk files are retained indefinitely unless rights or operational requirements force removal. An unavailable revision returns 410.
Published revisions · ID corrections · Service health
Checking catalog status…