File entry
The title, visibility, access policy and current published-version pointer. A grant applies to this entry, never a loose software number.
Manage API keys · Use one key for Tuning and UDS. Read the shared API access guide.
HTTP API / v1
The tuning catalogue.
Exact files. Explicit access.
Find original BINs, tuning revisions, A2Ls and documentation by recorded software and vehicle context. Download complete, unchanged bytes when your tuning account has access.
RedlineAutohaus.com is the tuning branch of Redline Autohaus & Performance. This API is separate from UDS and shop accounts. Online purchasing is not available.
https://api.redlineautohaus.com/api/v1/tuning
Three distinct records
File version
An exact revision with provenance, software links and its original baseline. Publishing a replacement preserves historic bytes.
Content blob
Complete immutable bytes, size and SHA-256. Identical bytes may share storage while metadata and permissions remain independent.
Browser authentication
Call the API directly with credentials: "include". The
API sets a host-only Secure, HttpOnly cookie. Read the stable CSRF
token from login or GET /auth/session; send it in
X-CSRF-Token on authenticated changes. Approved Origin
checks also apply. Never keep session credentials in localStorage.
The explorer’s access decision is advisory. Every download checks account verification, publication, visibility, policy and grants again. Staff upload/review does not certify a file for an ECU.
Contributions and individual credit downloads
Read GET /contribution-config for enabled submission types, current limits, reward estimates and required rights terms. Stock can be submitted alone; A2L requires stock, and a tune requires both matching stock and A2L. Selecting a dependency grants no access to its bytes.
Upload each file through multipart, then submit the contribution. Verification, publication and rewards have separate states. Refresh the contribution or reconnect its credentialed event stream to recover progress. Unknown checks require review; every tune requires staff acceptance.
Quote one exact version before spending credits. Confirm its price and expiry, then acquire it with a stable idempotency key. An interrupted transfer can retry the same version without another debit. Manual grants keep their expiry and revocation rules. Credits cannot be bought or cashed out.
Workflow, retry and reason-code guide. The contract describes supported interfaces; production controls and qualified ECU profiles may remain disabled.
Endpoint reference
This reference permits anonymous catalogue GET requests only. Mutations, authenticated operations and binary downloads are documented for your own client. No credentials are entered or stored here.
Loading the versioned contract…
Compatibility and change policy
A verified association records staff evidence. Vehicle fitment and filenames never imply universal flash compatibility. Existing v1 clients may receive additional optional fields/endpoints. Removed or renamed fields, authorization changes or new required inputs need a new major contract and migration notice.
Default limits: BIN/A2L 64 MiB, documents 10 MiB, multipart 65 MiB,
metadata 64 KiB. Read GET /site for deployed limits. Byte
downloads are GET-only; HEAD returns 405. Range/resume is deferred.