CM + OrangePlay downloads

MovieMini API.
Every quality.

Turn an authenticated MovieMini session into an exact-quality, resumable download—without exposing provider links or credentials to the client.

Start integrating →View OpenAPI

Existing accountsExact qualityHTTP Range ready

moviemini — API

$ POST /v1/media/movie/12345/download-ticket Authorization: Bearer <session> Content-Type: application/json {"provider":"cm","quality":"1080p"} HTTP 201 CREATED { "download_url": "https://api.moviemini.cc/v1/downloads/dl_…", "expires_in": 60 } # Resume with one standard byte range $ curl -H "Range: bytes=52428800-" "$URL" HTTP 206 PARTIAL CONTENT

60sDefault ticket window

4Exact quality tiers

206Range response ready

0Provider links exposed

Live availability

See what is ready before you sign in.

Browse the MovieMini movie and series library with exact available qualities. Login turns those quality labels into secure download actions.

Loading available titles…

Built for delivery

A small API with a serious streaming core.

MovieMini API adds a secure download layer to the catalog you already use. It validates identity, quality, quota, destination and every byte range before media reaches the client.

Exact-quality selection

Request 480p, 720p, 1080p or 4K. The catalog must contain that exact variant—MovieMini API never silently substitutes another file.

↻

Resumable by default

HEAD metadata, full GET, open-ended ranges and suffix ranges support players and interrupted-download recovery.

◇

Movie and TV aware

Movie tickets bind a title and quality. TV tickets additionally bind season and episode, keeping every URL purpose-specific.

Provider details stay private

CM and OrangePlay authorization happens just in time on the server. Signed destinations and credentials never appear in the API response.

Three deliberate steps

From account to bytes.

The browser interacts only with MovieMini URLs. Provider authorization and validation remain behind the gateway boundary.

01 / AUTH

Use your session

POST /api/auth/login

02 / TICKET

Choose exact media

Submit the title, quality, and—when needed—the season and episode. Receive a short-lived URL.

POST /v1/media/…/download-ticket

03 / STREAM

Download or resume

Read metadata with HEAD, then stream the file in full or continue from a byte offset.

GET /v1/downloads/{ticket}

Developer first

Readable from the first request.

Plain HTTP, structured JSON errors, request IDs and standard Range semantics. No provider-specific knowledge is required in your integration.

Issue a movie ticket

The ticket response contains only a MovieMini download URL and its remaining issue window.

Bearer session authenticationExact media scopeOpaque 256-bit ticket

curl -X POST \
  https://api.moviemini.cc/v1/media/movie/12345/download-ticket \
  -H "Authorization: Bearer <session-jwt>" \
  -H "Content-Type: application/json" \
  -d '{"provider":"cm","quality":"1080p"}'

const response = await fetch(
  '/v1/media/movie/12345/download-ticket', {
    method: 'POST',
    headers: {
      Authorization: 'Bearer <session-jwt>',
      'Content-Type': 'application/json'
    },
    body: JSON.stringify({ provider: 'cm', quality: '1080p' })
  }
);
const ticket = await response.json();

import requests

response = requests.post(
    'https://api.moviemini.cc/v1/media/movie/12345/download-ticket',
    headers={'Authorization': 'Bearer <session-jwt>'},
    json={'provider': 'cm', 'quality': '1080p'},
)
ticket = response.json()

Secure by construction

The source stays behind the source.

A download gateway is only useful when every trust boundary remains explicit. MovieMini API validates the user-facing ticket and the provider-facing destination independently.

256

Bits of ticket entropy.

Raw tickets are never stored. PostgreSQL keeps only a keyed HMAC digest, while the short-lived bearer value exists in the client URL.

Exact destination allowlists

Only configured HTTPS provider hosts and standard TLS ports are accepted.

DNS pinned against SSRF

Private and reserved addresses are rejected before connecting.

Atomic quota and leases

PostgreSQL serializes ticket claims, byte reservations and concurrency decisions.

Controlled response surface

Upstream errors, URLs and credentials are never passed through to callers.

Pricing comes after the API.

MovieMini API is currently focused on documentation, integration and the existing account experience. Public plans will be announced later—without changing the core API contract.

Coming later

Start with the contract

Integrate the download path you already understand.

Read the complete request flow, error model, range behavior and security guidance.

Read the documentation →

MovieMini API.Every quality.