App Store and Google Play reviews, as a REST API

Quickstart

First reviews in five minutes.

1. Get a key.
   Sign up, choose a plan, and create a key on the API keys tab of your workspace. It is shown once.
   TerminalshellCopy

   export KEY=rk_live_your_key_here

2. Find your app's id.
   Search is unmetered and never counts against your quota.
   RequestshellCopy

   curl "https://api.rivioo.app/v1/apps/search?q=spotify&store=android" \
     -H "Authorization: Bearer $KEY"

   Response 200jsonCopy

   {
     "data": [
       {
         "app_id": {
           "android": "com.spotify.music"
         }
       }
     ]
   }

   Use app_id in the next step.
3. Fetch reviews.
   Fresh data returns instantly as a 200 with your reviews. If we need to fetch live, you get a 202 instead. That is step 4.
   cURL Python Node

   request Copy

   curl -X POST https://api.rivioo.app/v1/reviews/fetch \
     -H "Authorization: Bearer $KEY" -H "Content-Type: application/json" \
     -d '{
       "store": "android",
       "app_id": "com.spotify.music",
       "limit": 500
     }'

4. Got a 202? (Got a 200? You already have reviews, skip to step 5.)
   A 202 means a live fetch is running. Poll the meta.poll URL until status is completed (usually under a minute), then GET its reviews_url.
   RequestshellCopy

   curl "https://api.rivioo.app/v1/jobs/3f6f…" -H "Authorization: Bearer $KEY"

   Response 200jsonCopy

   {
     "job": {
       "status": "completed",
       "reviews_url": "/v1/jobs/3f6f…/reviews"
     }
   }

5. Page through the rest.
   Follow meta.next_cursor from each page until it is null. That is the whole API.
   RequestshellCopy

   curl "https://api.rivioo.app/v1/reviews?cursor=eyJ2IjoxLC…" -H "Authorization: Bearer $KEY"

   A review counts toward your monthly allowance the first time we deliver it to your account. Fetching it again within 30 days is free.

Authentication

Pass your key as a bearer token on every request:

curl https://api.rivioo.app/v1/usage \
  -H "Authorization: Bearer rk_live_your_key_here"

import requests

r = requests.get("https://api.rivioo.app/v1/usage",
                 headers={"Authorization": "Bearer rk_live_your_key_here"})

const res = await fetch("https://api.rivioo.app/v1/usage", {
  headers: { Authorization: "Bearer rk_live_your_key_here" },
});

Keys are shown once when you create them. Only a hash is stored. If a key leaks, revoke it on the API keys tab of your workspace and create a new one.

Endpoints

https://api.rivioo.app/v1

curl "https://api.rivioo.app/v1/apps/search?q=spotify&store=android" \
  -H "Authorization: Bearer $KEY"

{
  "data": [
    {
      "name": "Spotify: Music and Podcasts",
      "app_id": {
        "android": "com.spotify.music"
      }
    }
  ]
}

curl -X POST https://api.rivioo.app/v1/reviews/fetch \
  -H "Authorization: Bearer $KEY" -H "Content-Type: application/json" \
  -d '{
    "store": "android",
    "app_id": "com.spotify.music",
    "country": "us",
    "limit": 500
  }'

import requests

r = requests.post(
    "https://api.rivioo.app/v1/reviews/fetch",
    headers={"Authorization": f"Bearer {KEY}"},
    json={
        "store": "android",
        "app_id": "com.spotify.music",
        "country": "us",
        "limit": 500,
    },
)
data = r.json()

const res = await fetch("https://api.rivioo.app/v1/reviews/fetch", {
  method: "POST",
  headers: { Authorization: `Bearer ${KEY}`, "Content-Type": "application/json" },
  body: JSON.stringify({
    store: "android",
    app_id: "com.spotify.music",
    country: "us",
    limit: 500,
  }),
});
const data = await res.json();

{
  "job": {
    "id": "3f6f…",
    "status": "queued"
  },
  "meta": {
    "source": "scrape",
    "poll": "/v1/jobs/3f6f…",
    "estimated_seconds": 45
  }
}

{
  "job": {
    "id": "3f6f…",
    "status": "completed",
    "reviews_url": "/v1/jobs/3f6f…/reviews"
  }
}

{
  "id": "gp:AOqpTOH…",
  "store": "android",
  "app_id": "com.spotify.music",
  "country": "us",
  "lang": "en",
  "rating": 4,
  "title": null,
  "body": "Offline playlists are great on the subway…",
  "reviewer": "Jordan M.",
  "app_version": "9.0.28.630",
  "developer_reply": null,
  "developer_reply_at": null,
  "url": "https://play.google.com/store/apps/details?id=…",
  "posted_at": "2026-07-21T09:14:00.000Z"
}

{
  "plan": "pro",
  "quota": {
    "monthly_reviews": 50000,
    "used": 12480,
    "remaining": 37520,
    "resets_at": "2026-10-01T00:00:00.000Z"
  },
  "scrape_jobs_today": 14,
  "scrape_jobs_daily_cap": 60
}

Errors

Every error uses one envelope:

{
  "error": {
    "code": "QUOTA_EXCEEDED",
    "message": "Monthly review quota (50,000) exhausted. Resets 2026-10-01T00:00:00Z.",
    "status": 429
  }
}

Rate limits and headers

Responses carry RateLimit-* headers (per minute) and X-Quota-Limit / X-Quota-Remaining (monthly reviews). Quota counts each review the first time we deliver it to your account, cached or fresh, per calendar month in UTC. Delivering the same review again within 30 days is free, whether through the REST API, MCP or a workspace export. It is a hard cap with no overage charges. Once it is used up, we still return reviews you received in the last 30 days and set meta.quota_limited to true; if none of the matching reviews qualify, the request fails with QUOTA_EXCEEDED. Unused quota does not roll over. Cached responses do not consume the daily refresh allowance.

Versioning and stability

v1 is stable. Breaking changes ship as a new version with 90 days notice and a migration guide. We may add new fields to responses at any time, so build your parser to ignore unknown keys.

Data coverage

Exactly what you get: