Spotify

Spotify Playlist API

Returns a public Spotify playlist from its link, share link, URI or ID, with its exact follower count, owner, item count and when it was last changed. It also has the title, description, cover, creation date, whether it is collaborative, and whether it is Spotify's own and made by its algorithm. The Spotify Playlist Tracks API returns its tracks.

GET /v1/spotify/playlist

Try it

Example

cURL
curl -G 'https://socialtap.dev/v1/spotify/playlist' \
  --data-urlencode 'url=https://open.spotify.com/playlist/37i9dQZF1DXcBWIGoYBM5M' \
  -H "x-api-key: $SOCIALTAP_API_KEY"
TypeScript SDK
import { SocialTap } from "socialtap";

const client = new SocialTap(); // apiKey defaults to process.env.SOCIALTAP_API_KEY

const res = await client.spotify.playlist.get({ url: "https://open.spotify.com/playlist/37i9dQZF1DXcBWIGoYBM5M" });
console.log(res.data);
console.log(res.credits.charged, res.meta.request_id);
Node.js (fetch)
const params = new URLSearchParams({
  url: "https://open.spotify.com/playlist/37i9dQZF1DXcBWIGoYBM5M",
});
const res = await fetch(`https://socialtap.dev/v1/spotify/playlist?${params}`, {
  headers: { "x-api-key": process.env.SOCIALTAP_API_KEY ?? "" },
});
const body = await res.json();
if (!res.ok) throw new Error(`${body.error.code}: ${body.error.message}`);
const { data, meta } = body;
console.log(data, meta.credits_charged);
Python (requests)
import os

import requests

res = requests.get(
    "https://socialtap.dev/v1/spotify/playlist",
    params={"url": "https://open.spotify.com/playlist/37i9dQZF1DXcBWIGoYBM5M"},
    headers={"x-api-key": os.environ["SOCIALTAP_API_KEY"]},
)
body = res.json()
if not res.ok:
    raise RuntimeError(f"{body['error']['code']}: {body['error']['message']}")
data, meta = body["data"], body["meta"]
print(data, meta["credits_charged"])
Go (net/http)
package main

import (
	"encoding/json"
	"fmt"
	"log"
	"net/http"
	"net/url"
	"os"
)

func main() {
	q := url.Values{}
	q.Set("url", "https://open.spotify.com/playlist/37i9dQZF1DXcBWIGoYBM5M")
	req, err := http.NewRequest("GET", "https://socialtap.dev/v1/spotify/playlist?"+q.Encode(), nil)
	if err != nil {
		log.Fatal(err)
	}
	req.Header.Set("x-api-key", os.Getenv("SOCIALTAP_API_KEY"))
	res, err := http.DefaultClient.Do(req)
	if err != nil {
		log.Fatal(err)
	}
	defer res.Body.Close()
	var body struct {
		Data  json.RawMessage `json:"data"`
		Meta  map[string]any  `json:"meta"`
		Error *struct {
			Code    string `json:"code"`
			Message string `json:"message"`
		} `json:"error"`
	}
	if err := json.NewDecoder(res.Body).Decode(&body); err != nil {
		log.Fatal(err)
	}
	if body.Error != nil {
		log.Fatalf("%s: %s", body.Error.Code, body.Error.Message)
	}
	fmt.Println(string(body.Data), body.Meta["credits_charged"])
}
PHP
<?php

$query = http_build_query([
    'url' => 'https://open.spotify.com/playlist/37i9dQZF1DXcBWIGoYBM5M',
]);
$ch = curl_init('https://socialtap.dev/v1/spotify/playlist?' . $query);
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => ['x-api-key: ' . getenv('SOCIALTAP_API_KEY')],
]);
$body = json_decode(curl_exec($ch), true);
if (curl_getinfo($ch, CURLINFO_RESPONSE_CODE) >= 400) {
    throw new RuntimeException($body['error']['code'] . ': ' . $body['error']['message']);
}
print_r($body['data']);
echo $body['meta']['credits_charged'], PHP_EOL;
Ruby
require "json"
require "net/http"

uri = URI("https://socialtap.dev/v1/spotify/playlist")
uri.query = URI.encode_www_form('url' => 'https://open.spotify.com/playlist/37i9dQZF1DXcBWIGoYBM5M')
req = Net::HTTP::Get.new(uri)
req["x-api-key"] = ENV.fetch("SOCIALTAP_API_KEY")
res = Net::HTTP.start(uri.host, uri.port, use_ssl: uri.scheme == "https") { |http| http.request(req) }
body = JSON.parse(res.body)
raise "#{body["error"]["code"]}: #{body["error"]["message"]}" unless res.is_a?(Net::HTTPSuccess)
pp body["data"]
puts body["meta"]["credits_charged"]
Java
import java.net.URI;
import java.net.URLEncoder;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.nio.charset.StandardCharsets;

public class Main {
    public static void main(String[] args) throws Exception {
        String query = "url=" + encode("https://open.spotify.com/playlist/37i9dQZF1DXcBWIGoYBM5M");
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://socialtap.dev/v1/spotify/playlist?" + query))
            .header("x-api-key", System.getenv("SOCIALTAP_API_KEY"))
            .GET()
            .build();
        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());
        // An error is {"error": {"code", "message", ...}}; success is {data, meta}, meta.credits_charged its price.
        if (response.statusCode() >= 400) throw new RuntimeException(response.body());
        System.out.println(response.body());
    }

    static String encode(String value) {
        return URLEncoder.encode(value, StandardCharsets.UTF_8);
    }
}
.NET
using System.Text.Json;

using var http = new HttpClient();
http.DefaultRequestHeaders.Add("x-api-key", Environment.GetEnvironmentVariable("SOCIALTAP_API_KEY"));

var query = string.Join("&",
    "url=" + Uri.EscapeDataString("https://open.spotify.com/playlist/37i9dQZF1DXcBWIGoYBM5M"));
var res = await http.GetAsync("https://socialtap.dev/v1/spotify/playlist?" + query);
using var body = JsonDocument.Parse(await res.Content.ReadAsStringAsync());
if (!res.IsSuccessStatusCode)
{
    var error = body.RootElement.GetProperty("error");
    throw new Exception($"{error.GetProperty("code")}: {error.GetProperty("message")}");
}
Console.WriteLine(body.RootElement.GetProperty("data"));
Console.WriteLine(body.RootElement.GetProperty("meta").GetProperty("credits_charged"));
Rust
// Cargo.toml: reqwest = { version = "0.12", features = ["blocking", "json"] }, serde_json = "1"
use std::env;

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let res = reqwest::blocking::Client::new()
        .get("https://socialtap.dev/v1/spotify/playlist")
        .query(&[("url", "https://open.spotify.com/playlist/37i9dQZF1DXcBWIGoYBM5M")])
        .header("x-api-key", env::var("SOCIALTAP_API_KEY")?)
        .send()?;
    let ok = res.status().is_success();
    let body: serde_json::Value = res.json()?;
    if !ok {
        return Err(format!("{}: {}", body["error"]["code"], body["error"]["message"]).into());
    }
    println!("{} {}", body["data"], body["meta"]["credits_charged"]);
    Ok(())
}
200 OK
{
  "data": {
    "approximate_fields": [],
    "description": "The hottest 50. Cover: Tame Impala",
    "id": "37i9dQZF1DXcBWIGoYBM5M",
    "is_collaborative": false,
    "metrics": {
      "post_count": 50
    },
    "owner": {
      "avatar_url": "https://i.scdn.co/image/ab6775700000ee8555c25988a6ac314394d3fbf5",
      "display_name": "Spotify",
      "id": null,
      "is_verified": null,
      "url": "https://open.spotify.com/user/spotify",
      "username": "spotify"
    },
    "platform": "spotify",
    "platform_specific": {
      "spotify": {
        "created_at": null,
        "follower_count": 33626571,
        "is_algorithmic": false,
        "is_collaborative": false,
        "is_deleted_by_owner": false,
        "is_user_created": false,
        "updated_at": "2026-10-30T04:01:22Z"
      }
    },
    "platform_type": "playlist",
    "thumbnail_url": "https://i.scdn.co/image/ab67706f00000002960019ea66cba66a44fdd4c2",
    "title": "Today’s Top Hits",
    "type": "playlist",
    "unknown_fields": [],
    "url": "https://open.spotify.com/playlist/37i9dQZF1DXcBWIGoYBM5M"
  },
  "meta": {
    "request_id": "req_3f9c2a7d1e8b4c6a9f0e2d4b6a8c0e1f",
    "platform": "spotify",
    "source": "api",
    "is_cached": false,
    "credits_charged": 1,
    "latency_ms": 317,
    "fetched_at": "2026-10-25T12:00:00Z",
    "input": {
      "kind": "playlist",
      "id": "37i9dQZF1DXcBWIGoYBM5M",
      "url": "https://open.spotify.com/playlist/37i9dQZF1DXcBWIGoYBM5M"
    },
    "credits_remaining": 9999,
    "client_request_id": null,
    "warnings": []
  }
}
x-api-keystringheaderrequired

Your API key. Authentication

urlstringrequiredmax 2,048 chars

The playlist: its link (open.spotify.com/playlist/37i9dQZF1DXcBWIGoYBM5M, also under /intl-de/ and /embed/, the old /user/<name>/playlist/… form, with any share parameters), a share link (spotify.link/…), its URI (spotify:playlist:37i9dQZF1DXcBWIGoYBM5M, or the old spotify:user:<name>:playlist:…) or its 22-character ID.

Examplehttps://open.spotify.com/playlist/37i9dQZF1DXcBWIGoYBM5M

url takes Spotify playlist links; another kind of link, or another platform's, fails free with invalid_input. Unknown parameters are rejected with a suggestion, never ignored (Requests).

Parameters every endpoint accepts
max_ageintegermin 0

Accept a cached response up to this many seconds old. Cache hits cost 0 credits. Omit to always fetch fresh. The Cache-Control: max-age=N request header is equivalent; max_age wins when both are sent.

fieldsstring

Return only these fields of each item: comma-separated paths in the schema's notation (id,text,metrics.view_count,segments[].text; a parent path keeps the whole object). Unknown paths are rejected. Applied after the cache, so it changes neither the price nor cache hits; page and meta are always returned whole.

Response

application/json

200

{data, meta}. data is a playlist object; meta describes the request (meta). Fields only Spotify has are under platform_specific.spotify.

platformstring

Platform ID (tiktok, youtube, facebook, …).

idstring

Platform-native playlist ID (string): TikTok's playlist (mix) or collection ID, YouTube's list ID (PL…), Facebook's video list ID.

urlstring uri

Canonical playlist URL.

typestring

playlist: a list its owner curates and orders (TikTok playlists, YouTube playlists, Facebook playlists and series); collection: posts an account saved from any creator into a named public folder (TikTok collections). New values may be added; treat unknown values as playlist.

One ofplaylistcollection

platform_typestringnullable

The platform's own label, lowercase (mix, collection, playlist, series, podcast, …).

titlestringnullable

Name its owner gave it.

descriptionstringnullable

Description as plain text; null when it has none or the platform shows none (TikTok).

ownerobject

The account that curates it (for a collection, the account that saved the posts, not their authors). Where a platform's curators are not accounts (Apple Music), what it states of them: a name, perhaps a page and a picture, with id and username null, and every field null when it names no one.

ShowHide 6 child fields
idstringnullable

Platform-native account ID; null when only the handle is known.

usernamestringnullable

Handle without the @; null when the account has none.

display_namestringnullable

Display name shown on the profile.

urlstring urinullable

Canonical profile URL.

avatar_urlstring urinullable

Profile picture URL. Platform CDN URLs can expire within hours.

is_verifiedbooleannullable

Platform verification badge; null where the platform has no badge.

thumbnail_urlstring urinullable

Cover image URL (the owner's chosen cover, else the platform's pick, often the first post's). Platform CDN URLs can expire within hours.

is_collaborativebooleannullable

Whether people its owner invites can add to it as well (a collaborative playlist, a group board); null where the platform doesn't say.

metricsobject

Counts at fetch time; null = hidden or not exposed, 0 = zero.

ShowHide 1 child field
post_countintegernullable

Posts in it as the platform counts them (it may count posts that are no longer public, so a walk of its posts can return fewer).

platform_specificobject

Fields only this platform has, under its ID (platform_specific.<platform>); each null when unknown.

ShowHide 1 child field
spotifyobjectnullable

A Spotify playlist's own fields.

ShowHide 7 child fields
follower_countintegernullable

Listeners who follow the playlist, exact.

is_collaborativebooleannullable

Whether people its owner invites can add to it.

is_algorithmicbooleannullable

Whether Spotify marks it as assembled by its algorithm rather than by its editors; null where Spotify says neither, as on a listener's playlist or a chart.

is_user_createdbooleannullable

True for a listener's playlist, false for one of Spotify's own.

is_deleted_by_ownerbooleannullable

Whether its owner deleted it: Spotify goes on serving such a playlist to anyone with its link.

created_atstring date-timenullable

When it was created, RFC 3339 UTC; null on Spotify's own playlists, which don't state it.

updated_atstring date-timenullable

When it last changed, RFC 3339 UTC.

approximate_fieldsstring[]

JSON paths of values rounded by the platform, date-only or parsed from display text. [] when all exact.

unknown_fieldsstring[]

JSON paths of lists whose [] means unknown rather than none (a source that cannot see them); null already means unknown for every other field. [] when every list is known.

not_found and private_or_unavailable are item-level: the request was fine, the item can't be returned.

400

400 Bad Request: 1 error code. Free: errors cost nothing.

A parameter is missing or malformed, or the link is not one this endpoint takes.

Fix the parameter named in param as the message says. For a link of the wrong kind, call an endpoint listed in details.endpoints, when there is one.

401

401 Unauthorized: 1 error code. Free: errors cost nothing.

unauthorizedNo retry

The x-api-key header is missing, or its key is unknown or revoked. On the dashboard's routes: the session cookie is missing or expired.

Send a valid API key in the x-api-key header. No key yet? A person gets one at details.signup_url; an AI agent follows details.agent_auth_url.

402

402 Payment Required: 2 error codes. Free: errors cost nothing.

The account does not have enough credits for this request.

Have a person buy credits at details.purchase_url (or make them a checkout link with details.checkout), then repeat the request. Do not retry automatically.

The API key reached its spend limit for this period. The account may still have credits.

Wait until details.resets_at, or raise the key's spend limit (PATCH /v1/api_keys/{id}). Do not retry automatically.

403

403 Forbidden: 2 error codes. Free: errors cost nothing.

forbiddenNo retry

The API key is valid but may not make this request, and details.reason says why: the account is suspended, the key lacks the route's scope, waits for its owner to confirm it by email, has expired, or was used from an IP outside its allowlist, or a rotated key's previous secret was used for a call that needs the admin scope. A running job stops with it too when its account is suspended or the key that created it is revoked or expires. It is about the key, never the item: a private item is private_or_unavailable, also 403, so branch on the code.

Act on details.reason. suspended: contact support. scope: use a key with details.required_scope. previous_secret: use the new secret. key_pending: have the owner open the emailed link. key_expired or key_revoked: create a new key. ip_not_allowed: call from an allowed IP.

The item exists but is not public: it is private, age- or region-restricted, or needs a login to view. It shares 403 with forbidden (which is about the key), so branch on the code.

Only public items can be fetched. Do not retry.

404

404 Not Found: 1 error code. Free: errors cost nothing.

not_foundNo retry

The item does not exist or was deleted. On GET /v1/requests/{id}/response: the response was not kept (details.reason says why).

Check the link or ID. Do not retry.

429

429 Too Many Requests: 1 error code. Free: errors cost nothing.

rate_limitedYes, later

The account passed its runaway-protection ceiling: a high per-account limit that stops a broken client loop (plans have no rate limit). Requests without an API key (signup, the MCP server's tool listing and find_endpoint) are limited per IP address instead. It also stops an account whose failed requests in the last hour cost far more than its successful ones paid for: failures are free within a limit (the message says so), and successes raise it.

Wait the seconds in the retry-after header, then retry. If your steady traffic needs more, ask support to raise the ceiling; without an API key, send one.

500

500 Internal Error: 1 error code. Free: errors cost nothing.

internalYes, later

An unexpected error on SocialTap's side.

Retry with backoff. If it keeps happening, contact support with the request_id.

502

502 Bad Gateway: 1 error code. Free: errors cost nothing.

upstream_errorYes, later

The platform failed, or answered with something we could not read.

Retry with backoff. Failed requests are free.

503

503 Unavailable: 2 error codes. Free: errors cost nothing.

The platform refused every attempt, our own retries included.

Retry later with backoff. Failed requests are free.

overloadedYes, later

SocialTap was at capacity, or paused by its operators, and did not start the request. Nothing was fetched or charged.

Retry after the seconds in the retry-after header. Failed requests are free.

From 1 credit per request. Charged only for successful requests. Errors are free. The price depends on the source that produced the result, reported as meta.source.

SourcePrice per successful requestPer 1,000 requests
Platform API api1 credit$0.75–$1.97
Balance, sources and what you were charged

Your balance must be at least 1 credit to start a request; with less, it is refused with insufficient_credits (HTTP 402) and costs nothing. Only that minimum is set aside when the request starts.

meta.sourceSourceWhat it means
apiPlatform APIThe platform's public, logged-out API.

meta.credits_charged and the x-credits-charged header show what you paid. How credits work · Packs

Endpoint ID spotify.playlist · operationId spotify.playlist.get · Product overview

Last updated