cURL

Use Bash and cURL for this example. Set STEAMCALL_API_KEY to your Credential secret in your environment, then reference it in the header. Replace the example Steam ID with the inventory you need.

Current reads a saved revision. If none exists, complete a Refresh first. A returned page costs one credit.

curl --fail-with-body --max-time 15 \
  'https://api.steamcall.com/v2/steam/users/76561198000000000/inventory/440/2/current?language=english' \
  --header "X-API-Key: $STEAMCALL_API_KEY"

Avoid typing a literal key into the command because shell history may retain it. Environment substitution keeps the literal out of this command's history entry, but the expanded header can still be visible to process inspection. Run it only in a trusted environment.

Inspect failures without leaking headers

Use --fail-with-body to return a failing exit status while retaining the documented error body for local inspection. Add --dump-header only to a protected temporary file if you need X-Request-ID, then remove it; never share a dump containing authentication headers.

Percent-encode user-supplied query values rather than assembling URLs with shell string concatenation. For repeated or automated requests, move the integration into a server-side client with structured input validation and logging.

To update the committed inventory, use the POST example in Refresh inventory. To call Steam inline for only one page, remove /current and follow Live inventory page.