---
title: "Quickstart — JustTCG API Documentation"
description: "Make your first JustTCG API call in minutes: get an API key, authenticate with the x-api-key header, and list supported games with cURL or the SDK."
url: https://justtcg.com/docs/quickstart
markdown_url: https://justtcg.com/docs/quickstart.md
---

# Quickstart

Make your first JustTCG API call in under two minutes — get an API key, hit the base URL, and read live pricing data.

## Overview

The JustTCG API provides real-time pricing data for trading card games including Magic: The Gathering, Pokémon, Yu-Gi-Oh!, Disney Lorcana, One Piece TCG, Digimon, and Union Arena. Our API is designed to be simple, fast, and reliable.

**Using Node.js or TypeScript?** We strongly recommend the official `justtcg-js` SDK. It provides type safety, automatic authentication, and cleaner data models. [View SDK install →](https://justtcg.com/docs/sdk)

### Base URL

`GET https://api.justtcg.com/v1`

Prefer to start from a machine-readable definition? The [OpenAPI (Swagger) spec](https://justtcg.com/docs/openapi) imports straight into Swagger UI, Postman, or a client generator.

### MCP endpoint (BETA)

The MCP endpoint provides comprehensive pricing data to your agentic workflows.

`GET https://mcp.justtcg.com`

## Authentication

All API requests require authentication using an API key. Obtain a key by signing up for an account and subscribing to a plan, then include it in the `x-api-key` request header.

**SDK users:** The SDK automatically handles authentication using the `JUSTTCG_API_KEY` environment variable.

### Auth header

```bash
x-api-key: tcg_your_api_key_here
```

### Your first request

List all supported games:

```bash
curl https://api.justtcg.com/v1/games \
  -H "x-api-key: tcg_your_api_key_here"
```

### Same call with the SDK

```typescript
import { JustTCG } from 'justtcg-js';

// Reads JUSTTCG_API_KEY from env, or pass { apiKey } directly
const client = new JustTCG();

const { data } = await client.v1.games.list();
console.log(data);
```

**Keep your API key secure.** Never expose it in client-side code. If you suspect your key has been compromised, regenerate it immediately from the dashboard.