BoltLoad REST API — Simple & Complete Guide
Add YouTube (4K–144p, Shorts, Multi-Audio, M4A, Search) and Instagram (1080p Reels, Posts, Carousels, Stories, Highlights) downloading to any website, Telegram/Discord bot, or mobile app in under 3 minutes.
Sign up free at /developers. You immediately get a bl_test_... key (and can create bl_live_... keys with Domain & IP locks).
/api/v1/extract
Pass any YouTube or Instagram link to POST /api/v1/extract. Our API automatically detects the platform and resolves all HD video & audio streams.
quickLinks
Every response gives you data.quickLinks (bestVideo, hd1080p, hd720p, audioM4a, thumbnail) — signed for 2 hours and safe to put directly in <a href>!
Try the 6-Platform API Live Right Here
Paste your API key from /developers and test YouTube, Instagram, TikTok, Facebook, X/Twitter, or Reddit live.
1. Base URL & Authentication
All API endpoints start with https://boltload.130.210.11.23.sslip.io/api/v1 and return standard JSON with { "ok": true, "data": { ... } }.
# Option A — Authorization Bearer Header (Recommended for Backends)
Authorization: Bearer bl_live_your_api_key_here
# Option B — X-API-Key Header
X-API-Key: bl_live_your_api_key_here
# Option C — URL Query Parameter (Easiest for Quick Browser / Bot Testing)
GET https://boltload.130.210.11.23.sslip.io/api/v1/extract?url=https://youtu.be/dQw4w9WgXcQ&api_key=bl_live_your_api_key_here
/extract, /search, or /quick-download counts as 1 request. Clicking/streaming the signed downloadUrl or thumbnailProxyUrl returned inside that JSON costs 0 extra quota and never exposes your secret API key to visitors!
2. Universal Extract (One Endpoint for Everything)
/api/v1/detect, /api/v1/all)
You don't even need separate code for YouTube vs. Instagram! Send any YouTube video, YouTube Short, Instagram Reel, Post, Carousel, Story, Highlight, or search keyword to /api/v1/extract.
data.quickLinks at the Top!
{
"ok": true,
"data": {
"platform": "youtube",
"videoId": "dQw4w9WgXcQ",
"title": "Rick Astley - Never Gonna Give You Up (Official Video) (4K Remaster)",
"durationFormatted": "3:33",
"quickLinks": {
"bestVideo": "https://boltload.130.210.11.23.sslip.io/api/v1/youtube/download?token=eyJ...",
"hd1080p": "https://boltload.130.210.11.23.sslip.io/api/v1/youtube/download?token=eyJ...",
"hd720p": "https://boltload.130.210.11.23.sslip.io/api/v1/youtube/download?token=eyJ...",
"sd360p": "https://boltload.130.210.11.23.sslip.io/api/v1/youtube/download?token=eyJ...",
"audioM4a": "https://boltload.130.210.11.23.sslip.io/api/v1/youtube/download?token=eyJ...",
"thumbnail": "https://boltload.130.210.11.23.sslip.io/api/thumb?id=dQw4w9WgXcQ"
},
"videoFormats": [
{
"formatId": "2160p",
"quality": "2160p60 4K",
"tier": 2160,
"ext": "mp4",
"hasAudio": true,
"sizeFormatted": "148.4 MB",
"downloadUrl": "https://boltload.130.210.11.23.sslip.io/api/v1/youtube/download?token=eyJ..."
}
],
"audioFormats": [ ... ],
"cached": false,
"tokenExpiresInSec": 7200
}
}
3. 1-Step Instant File Download (For Bots, Scripts & Shortcuts)
Building a Telegram bot, Discord bot, Siri Shortcut, or CLI tool and want the MP4/M4A file in one single HTTP call without parsing JSON? Call /api/v1/quick-download — it resolves the media and immediately 302 redirects to the live download stream!
| Parameter | Values | What It Downloads |
|---|---|---|
| url | Any YouTube or Instagram URL | Required. Video, Short, Reel, Post, Story, or Highlight link. |
| quality | best | 1080p | 720p | 480p | 360p | audio | Optional (default best). Pass audio for M4A original audio. |
curl -L -OJ "https://boltload.130.210.11.23.sslip.io/api/v1/quick-download?url=https://www.instagram.com/reel/DOvzTywjPGN/&quality=best&api_key=YOUR_API_KEY"
4. Dedicated YouTube Endpoints
| Method & Endpoint | Parameters | Description |
|---|---|---|
| POST | GET /api/v1/youtube/extract | url, audioTrackId? | Returns quickLinks, 4K–144p muxed MP4 streams, M4A/AAC/WAV audio, and dubbed multi-language audioTracks. |
| GET /api/v1/youtube/search | q, limit=9 | Fast keyword search returning video IDs, titles, durations, views, and thumbnails. |
| GET /api/v1/youtube/download | token | Streams the exact MP4/M4A file in real time with Content-Length & filename headers. |
5. Dedicated Social Platform Endpoints
Every social platform follows the exact same normalized response structure (quickLinks, thumbnailProxyUrl, items[].formats, items[].audioFormats) — or simply call universal POST /api/v1/extract for automatic detection across all 6 platforms!
| Platform | Extract Endpoint | Supported Media Types |
|---|---|---|
| POST | GET /api/v1/instagram/extract | 1080p Reels (with sound), Posts, Multi-Slide Carousels, Stories, Story Highlights, and /share/ links. |
|
| TikTok | POST | GET /api/v1/tiktok/extract | No-Watermark 1080p/720p HD Videos, Multi-Slide Photo Carousels, Original MP3/M4A Sound, and vm/vt.tiktok.com links. |
| POST | GET /api/v1/facebook/extract | 1080p Full HD Reels & Watch Videos, SD Progressive MP4, Original M4A Audio, fb.watch, /share/ links, and Photos. |
|
| X (Twitter) | POST | GET /api/v1/twitter/extract | Multi-Bitrate MP4 Videos (1080p–360p), Animated GIFs, 1–4 Original 4K Photos, Mixed Carousels, and t.co links. |
| POST | GET /api/v1/reddit/extract | v.redd.it Videos merged with AAC Audio, Multi-Slide /gallery/ posts, GIFs, i.redd.it images, and /s/ share links. |
Each platform also provides signed zero-key /api/v1/{platform}/download?token=... and CORS-open /api/v1/{platform}/thumb?token=... URLs inside the extraction response.
6. Copy-Paste Integration Code
const res = await fetch('https://boltload.130.210.11.23.sslip.io/api/v1/extract', {
method: 'POST',
headers: {
'Authorization': 'Bearer bl_live_YOUR_API_KEY',
'Content-Type': 'application/json',
},
body: JSON.stringify({ url: userSubmittedLink }),
});
const { ok, data, error } = await res.json();
if (!ok) throw new Error(error.message);
// Super simple: ready-to-click signed download links!
console.log('Title:', data.title);
console.log('Best HD Download:', data.quickLinks.hd1080p || data.quickLinks.bestMedia);
console.log('Audio M4A:', data.quickLinks.audioM4a);
import requests
resp = requests.post(
"https://boltload.130.210.11.23.sslip.io/api/v1/extract",
headers={"Authorization": "Bearer bl_live_YOUR_API_KEY"},
json={"url": "https://www.instagram.com/reel/DOvzTywjPGN/"},
timeout=25,
).json()
if resp["ok"]:
links = resp["data"]["quickLinks"]
print("1080p Reel Download:", links["bestMedia"])
print("Thumbnail:", links["thumbnail"])
$ch = curl_init('https://boltload.130.210.11.23.sslip.io/api/v1/extract');
curl_setopt_array($ch, [
CURLOPT_POST => true,
CURLOPT_RETURNTRANSFER => true,
CURLOPT_HTTPHEADER => [
'Authorization: Bearer bl_live_YOUR_API_KEY',
'Content-Type: application/json'
],
CURLOPT_POSTFIELDS => json_encode(['url' => $_POST['url']])
]);
$json = json_decode(curl_exec($ch), true);
$downloadLink = $json['data']['quickLinks']['hd1080p'] ?? $json['data']['quickLinks']['bestMedia'];
7. Securing Your API Keys (Domain Lock & IP Allowlist)
Inside the Developer Portal, every API key supports two independent security locks so nobody can abuse your key even if leaked:
Set yourdomain.com, *.yourdomain.com to block requests coming from any other website's browser Origin/Referer. Set server to block all browser calls completely!
Lock a key to your VPS or backend IP (e.g. 203.0.113.10, 198.51.100.0/24). Calls from any other IP receive 403 IP_NOT_ALLOWED.
8. Rate-Limit Headers & Error Codes
Every response includes live quota headers (X-RateLimit-Remaining, X-Quota-Daily-Remaining, X-BoltLoad-Cache: HIT|MISS). You can also call GET /api/v1/me anytime for 0 quota to inspect your remaining daily/monthly balance.
| Status | Error Code | How to Fix |
|---|---|---|
| 401 | MISSING_API_KEY / INVALID_API_KEY | Include a valid bl_live_... or bl_test_... key from /developers. |
| 403 | ORIGIN_NOT_ALLOWED / IP_NOT_ALLOWED | Add your website domain or server IP to the key's allowlist in /developers. |
| 429 | RATE_LIMIT_EXCEEDED / DAILY_QUOTA_EXCEEDED | Wait for X-RateLimit-Reset seconds or upgrade your plan quota. |
| 422 | YOUTUBE_EXTRACT_FAILED / INSTAGRAM_EXTRACT_FAILED | Check that the video/post is public (private or deleted posts cannot be extracted). |