Torn Intel API

Authentication

The public endpoints on this page take no credentials. Every other endpoint authenticates with the torn-intel-session cookie, a JWT issued by POST /api/auth/loginin exchange for a Torn API key, and returns the signed-in player's own faction data only. There is no public endpoint that reads an arbitrary faction and no parameter that makes one.

How Torn API keys are encrypted at rest, and which Torn permission level unlocks what, is documented on the Security page.

Torn Intel MCP server

A remote Model Context Protocol server runs at /api/mcp over the Streamable HTTP transport (spec revision 2025-06-18). It is read-only, needs no credentials, and exposes exactly the public surface below — an MCP server that could reach further than the public API would be a way around the session boundary, not a convenience.

claude mcp add --transport http torn-intel https://torn-intel.com/api/mcp

Tools:

• get_abroad_stock — Get live abroad stock
• get_abroad_stock_history — Get observed stock history for one item
• get_platform_stats — Get Torn Intel coverage counters
• list_guides — List Torn game-mechanic guides
• get_guide — Get the full text of one guide
• search_guides — Search guides by keyword

Torn Intel CLI

An official command-line tool, zero dependencies, no API key. Output is JSON on stdout so it composes with jq.

npx torn-intel-cli stock --country mex
npx torn-intel-cli history --country mex --item 206 --hours 48
npx torn-intel-cli guide --slug cracking-guide
npx torn-intel-cli stats

Versioning & deprecation

• The canonical form of every public endpoint is versioned: `https://torn-intel.com/api/v1/public/stats`. Integrate against that.
• The unversioned path is a permanent alias of the same handler, kept working indefinitely.
• Every API response carries `X-API-Version: 1`.
• A breaking change ships as a new version prefix (`/api/v2/...`). A v1 response shape is never mutated in place; adding a field is not breaking, removing or retyping one is.
• A version scheduled for removal answers with `Deprecation` (RFC 9745) and `Sunset` (RFC 8594) headers plus a `Link rel="deprecation"`, for at least 180 days before it stops.
• Nothing is currently deprecated.

Rate limits

120 requests per 60 seconds per client, across all public endpoints combined. The session-scoped API is not metered by this policy.

• Every response carries RateLimit-Policy and RateLimit (the structured fields from draft-ietf-httpapi-ratelimit-headers-09), plus the older RateLimit-Limit / -Remaining / -Reset triplet that deployed clients read.
• Exceeding it returns 429 as application/problem+json with the RFC 9457 quota-exceeded problem type and a Retry-After header. Wait that long — do not retry immediately.

Errors

Every error under /api is JSON, never an HTML page, and carries a stable machine-readable code plus a resolution saying what to do about it. Branch on code, not on the prose fields.

{
  "error": "Not Found",
  "code": "not_found",
  "message": "No API endpoint exists at /api/nope.",
  "resolution": "Check the endpoint list at https://torn-intel.com/developers ...",
  "status": 404,
  "documentation_url": "https://torn-intel.com/developers"
}

Rules of use

• Respect the cache window listed on each endpoint. The data behind them refreshes on a schedule, so polling faster returns identical bytes.
• Send a User-Agent that identifies your tool, so a misbehaving client can be contacted rather than blocked.
• Restock predictions — estimated time to restock, restock windows, model confidence — are never public. They stay behind login under TornTools' terms, and no parameter unlocks them.
• Torn Intel is a player-made tool and is not affiliated with Torn.com.

Public endpoints

{
  "generatedAt": "2026-08-25T09:41:02.113Z",
  "source": "torntools",
  "countries": [
    {
      "country": "mex",
      "updatedAt": "2026-08-25T09:40:47.000Z",
      "items": [
        {
          "itemId": 206,
          "itemName": "Xanax",
          "category": "Drug",
          "quantity": 45,
          "cost": 250000,
          "marketValue": 820000,
          "profitPerItem": 570000
        }
      ]
    }
  ]
}

{
  "country": "mex",
  "itemId": 206,
  "hours": 24,
  "points": [
    { "t": "2026-08-24T10:00:11.000Z", "quantity": 120, "cost": 250000, "marketValue": 818000 }
  ]
}

{ "playersIndexed": 3184220, "watchedFactions": 1462, "factionsRegistered": 318 }

{ "factions": 318, "proFactions": 74, "watchedFactions": 1462, "spiedPlayers": 88140 }

{ "registered": true }

{
  "articles": [
    {
      "id": 12,
      "title": "Departure planner rewrite",
      "content": "…",
      "tag": "feature",
      "image_url": null,
      "published_at": "2026-08-24T18:02:00.000Z"
    }
  ]
}

Reading pages as Markdown

Every public page on Torn Intel serves a Markdown representation from its own URL, so an agent can skip the layout markup. Ask for it with an Accept header, or append .md to the path:

curl -H "Accept: text/markdown" https://torn-intel.com/abroad-stock
curl https://torn-intel.com/abroad-stock.md

Responses carry Vary: Accept, so a cache in between will not hand you the wrong variant. A request whose Accept rules out both text/html and text/markdown gets a 406 listing the available types rather than a silent fallback.

• /llms.txt — This index, in the llmstxt.org format.
• /agents.md — When to use Torn Intel, when not to, and how an agent should call it.
• /sitemap.xml — Every indexable URL with its last-modified date.