How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Mux Playback Restrictions API

Playback Restrictions allows you to set additional rules for playing videos. You can set the domains/hostnames allowed to play your videos. For instance, viewers can play videos embedded on the `https://example.com` website when you set the Playback Restrictions with `example.com` as an allowed domain. Any Video requests from other websites are denied. Additionally, you can set rules for what user agents to allow. Please see [Using User-Agent HTTP header for validation](https://docs.mux.com/guides/secure-video-playback#using-user-agent-http-header-for-validation) for more details on this feature.

Mux Playback Restrictions API is one of 38 APIs that Mux publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Playback Restrictions. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and an API reference.

This API exposes 6 operations across 4 paths, and defines 10 schemas. It is described by OpenAPI 3.2.0, at version v1.

Requests are made against 4 base URLs: https://api.mux.com, https://image.mux.com, https://stream.mux.com, https://stats.mux.com.

6 operations 4 paths 10 schemas 1 DELETE2 GET1 POST2 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
v1
Base URL
https://api.mux.com
Authentication
HTTP Basic, HTTP Bearer
Contact
Resource Areas
1

Authentication & Security 2

Mux Playback Restrictions API declares 2 security schemes for authenticating requests. It accepts HTTP basic authentication (accessToken). It accepts HTTP bearer tokens (authorizationToken).

  • accessToken — The Mux Video API uses an Access Token and Secret Key for authentication. If you haven't already, [generate a new Access Token](https://dashboard.mux.com/setti…
  • authorizationToken — OAuth authorization token, used as a Bearer Auth header

Paths & Operations 6

Across 4 paths, the API surfaces 6 operations — 1 DELETE, 2 GET, 1 POST, 2 PUT. Each is listed below with its method, path, parameters, and response codes.

Playback Restrictions 6

Playback Restrictions allows you to set additional rules for playing videos. You can set the domains/hostnames allowed to play your videos. For instance, viewers can play videos e…

POST
/video/v1/playback-restrictions
Create a Playback Restriction
create-playback-restriction body → 201
GET
/video/v1/playback-restrictions
List Playback Restrictions
list-playback-restrictions 2 params → 200
DELETE
/video/v1/playback-restrictions/{PLAYBACK_RESTRICTION_ID}
Delete a Playback Restriction
delete-playback-restriction 1 param → 204
GET
/video/v1/playback-restrictions/{PLAYBACK_RESTRICTION_ID}
Retrieve a Playback Restriction
get-playback-restriction 1 param → 200
PUT
/video/v1/playback-restrictions/{PLAYBACK_RESTRICTION_ID}/referrer
Update the Referrer Playback Restriction
update-referrer-domain-restriction 1 param body → 200
PUT
/video/v1/playback-restrictions/{PLAYBACK_RESTRICTION_ID}/user_agent
Update the User Agent Restriction
update-user-agent-restriction 1 param body → 200

Schemas 10

The contract defines 10 schemas that model the data the API accepts and returns. The most detailed are PlaybackRestriction (5 properties), UserAgentRestrictionRequest (2 properties), UserAgentRestrictionSettings (2 properties), ReferrerDomainRestrictionRequest (2 properties). Each schema is shown below with its type and property counts.

CreatePlaybackRestrictionRequest
object
2 properties 2 required
UpdateReferrerDomainRestrictionRequest
object
A list of domains allowed to play your videos.
2 properties 1 required
PlaybackRestriction
object
5 properties 5 required
ReferrerDomainRestrictionSettings
object
A list of domains allowed to play your videos.
2 properties
ListPlaybackRestrictionsResponse
object
1 property 1 required
PlaybackRestrictionResponse
object
1 property 1 required
ReferrerDomainRestrictionRequest
object
A list of domains allowed to play your videos.
2 properties 1 required
UserAgentRestrictionSettings
object
Rules that control what user agents are allowed to play your videos. Please see [Using User-Agent HTTP header for validation](https://docs.mux.com/guides/secur…
2 properties
UserAgentRestrictionRequest
object
Rules that control what user agents are allowed to play your videos. Please see [Using User-Agent HTTP header for validation](https://docs.mux.com/guides/secur…
2 properties
UpdateUserAgentRestrictionRequest
object
2 properties 2 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

mux-com-playback-restrictions-api-openapi.yml Raw ↑

Other APIs Mux publishes across the network.

Mux Webhooks
Mux Animated Images API
Mux Annotations API
Mux Ask Questions API
Mux Assets API
Mux Captions and Transcripts API
Mux Delivery Usage API
Mux Dimensions API
Mux Direct Uploads API
Mux DRM Configurations API
Mux Edit Captions API
Mux Errors API
Where this information came from

This is an independent, third-party profile of Mux Playback Restrictions API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.