<!-- Generated from /docs/inventory-api. Do not edit by hand. -->
> Source: https://inspekt.gg/docs/inventory-api · GET /api/inventory-lookup returns the CS2 items in a public Steam inventory, with its caching, per-IP rate limits and every error case.

# Inventory API

GET `/api/inventory-lookup` returns the CS2 items in a public Steam inventory. Results are cached for 5 minutes and then discarded.

## Request

```http
GET /api/inventory-lookup?steamid=76561197960287930&key=cs2pk_your_key_here
```

| Param | Type / bounds | Notes |
| --- | --- | --- |
| steamid | ≤200 characters, no whitespace or quote characters | A SteamID64, a vanity profile name or a full profile URL. |
| key | `/^[a-z0-9_-]{4,64}$/i` | Your publishable key. A request without one is refused; see [Error codes](https://inspekt.gg/docs/errors). |

## Response

200 OK:

```json
{
  "steamid": "76561197960287930",
  "count": 214,
  "items": [ /* … */ ],
  "cached": true,
  "ageMs": 42130
}
```

`cached` says whether the answer came from the 5-minute per-account cache, and `ageMs` says how old it is.

## Caching and rate limits

A lookup of the same `steamid` within 5 minutes is served from our cache. Each IP may make 5 lookups a minute that miss the cache, so reloading a cached inventory stays under the limit. When we are busy a lookup gets a `429`, and when Steam rate-limits us it gets a `503`. Try again after a minute.

## Errors

| Status | Body | Cause |
| --- | --- | --- |
| 400 | `{ error: "Enter a SteamID, a profile name, or a link to your profile." }` | Missing, empty, too long, or contains whitespace or quote characters. |
| 403 | `{ error: "That inventory is private. …" }` | The account's inventory is private, or Steam does not make it available. |
| 404 | `{ error: "Couldn't find a Steam profile for \"…\"." }` | The SteamID, vanity name or URL did not resolve to an account. |
| 429 | `{ error: "Busy right now …" }`, `Retry-After: 15` | We are busy with other lookups. Try again after the `Retry-After`. |
| 429 | `{ error: "That is a lot of lookups …" }`, `Retry-After: 60` | Your IP exceeded 5 cache misses in the last 60 seconds. |
| 503 | `{ error: "Steam is rate-limiting us right now. …" }` | Steam refused this lookup with a 429. |
| 502 | `{ error: "The lookup did not finish. Try again in a minute." }` | Any other failure fetching from Steam, including a fetch that took longer than 60 seconds. |

Access refusals (bad key, wrong origin, no plan, over quota) use the same JSON error shape at `401`, `402`, `403` or `429`, and are checked before any of the above. See [Error codes](https://inspekt.gg/docs/errors).

Every error body carries a `requestId`, repeated in the `x-request-id` response header. Quote it when you contact us about a failure. See [Request IDs](https://inspekt.gg/docs/errors#request-ids).