Enable Palworld’s REST API by editing the active PalWorldSettings.ini, not the shipped default file: set RESTAPIEnabled=True, choose a RESTAPIPort, restart the dedicated server, and test /v1/api/settings with HTTP Basic Authentication. Windows and Linux SteamCMD installations use different configuration directories.
Godlike.Host offers hosted Palworld servers with its own game panel, SFTP access and free DDoS protection, if you would rather not host it yourself.
Keep the listener on a trusted LAN or private network. Pocketpair warns that the API is not designed for direct Internet exposure because its administrative operations could allow unauthorized manipulation of the server.
As an Amazon Associate I earn from qualifying purchases.
What you need before changing the server
You need access to the machine running the Palworld dedicated server, permission to stop and start its service or launch command, and the administrative credentials used by the REST API. Plan the change during a maintenance window: editing while the process is running can be overwritten or ignored when the server writes its configuration.
- Windows: the active file is under
PalSavedConfigWindowsServerPalWorldSettings.ini. - Linux SteamCMD: the active file is under
Pal/Saved/Config/LinuxServer/PalWorldSettings.ini. - Configuration: the API must be enabled in the active file’s
OptionSettingsvalue. - Network: the selected API port must be reachable from the trusted client that will administer the server, while remaining blocked from untrusted networks.
If this is a new installation and the directory does not exist, launch the dedicated server once first. Pocketpair’s configuration guidance says the directories are created after the server has started. Stop it cleanly before making the edit.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
Find the active PalWorldSettings.ini
Windows dedicated server
- Stop the Palworld dedicated-server process or its Windows service.
- Open the server installation directory and navigate to
PalSavedConfigWindowsServer. - Open
PalWorldSettings.iniin a text editor with sufficient permissions. Make a backup copy before editing.
Do not edit DefaultPalWorldSettings.ini in the installation’s default configuration area. That file is shipped as a template; changing it does not apply the setting to the running server. The file that matters is the platform-specific PalWorldSettings.ini inside the saved configuration directory.
Linux SteamCMD server
- Stop the systemd unit, screen/tmux session, container, or launch script that runs the dedicated server.
- From the server’s installation directory, open
Pal/Saved/Config/LinuxServer/. - Back up and edit
PalWorldSettings.iniwith a text editor such asnanoorvim.
Linux paths are relative to the directory that contains the server’s Pal folder. If you installed through a wrapper, locate the wrapper’s actual working directory rather than editing a similarly named file elsewhere on the host.
Free tools Windows power users keep installed
One-click scans. No signup required.
If the file is missing
Start the dedicated server normally and allow it to finish initialization once. Then stop it and check the platform-specific path again. Creating a file in the wrong directory, or copying the default file to a different configuration folder, will not change the instance you launch.
Enable the API in OptionSettings
Open the active file and find its single, usually very long, OptionSettings=(...) value. Add or change these two fields inside that existing value:
RESTAPIEnabled=True,RESTAPIPort=82128212 is an example listener port, not a Palworld-wide requirement. Use a port that is free on your host and consistent with your firewall and private-network design. The official configuration table defines RESTAPIEnabled as the switch that enables the API and RESTAPIPort as the API listener port.
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
Preserve the complete configuration line
Do not replace the whole OptionSettings line with the shortened example. Keep every existing world, gameplay, password, and server option, inserting the two API fields with the same comma-separated syntax. A conceptual result looks like this:
OptionSettings=(...,RESTAPIEnabled=True,RESTAPIPort=8212,...)The ellipses above are explanatory only; they are not text to paste into your file. Keep the parentheses and all of your existing values intact. If the file already contains either API field, edit its value instead of adding a duplicate. Duplicate keys can make it unclear which value the server will use.
Set the administrative password deliberately
The same configuration table defines AdminPassword as the password used to obtain administrative privileges. Set a strong, unique value if one is not already configured, and protect the file because it contains that credential. The API uses HTTP Basic Authentication; your test client must supply credentials accepted by the server, including the configured administrative password.
Restart and confirm that the process loaded the change
- Save the edited
PalWorldSettings.ini. - Check that the file is in the WindowsServer or LinuxServer path for the instance you actually launch.
- Start the dedicated server using your normal service, script, or command.
- Wait until startup completes, then inspect the server log or process status for a normal, listening server.
A restart is required because the dedicated server reads the settings during startup. Editing the file while the process is running does not reliably reload the API configuration. If you operate several worlds or instances, restart the one whose configuration file you edited and keep a note of its selected API port.
Keep the REST API private
Pocketpair’s API guidance states: “These APIs are not designed to be exposed directly to the Internet. Publishing directly to the Internet may result in unauthorized manipulation of the server, which may interfere with play.” The same guidance recommends LAN use and documents HTTP Basic Authentication.
Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
Treat the API as an administrative control plane, not as a public game-status endpoint. Bind or filter access so only a management workstation, trusted LAN, VPN, or other private network can reach RESTAPIPort. Configure the host firewall and any cloud or router firewall to allow the port only from that management network. Do not create a broad public port-forward simply because a remote client cannot connect.
- Allow the API port on the private interface or trusted subnet.
- Block unsolicited Internet traffic to that port.
- Use a VPN or another private access boundary when administrators are away from the LAN.
- Limit who receives the API credentials and avoid storing them in shared scripts or chat.
- Review which operators can issue mutating requests such as kick, ban, save, shutdown, or force stop.
Basic Authentication sends a username and password with each request. Restricting the network path is therefore essential; the documented setup is intended for a controlled LAN or private connection, not an openly published HTTP service.
Test the API with the settings endpoint
Use an allowed client after the restart. The official API examples use /v1/api as the base path and define the settings operation as GET /settings. A practical check is:
curl -u '<username>:<password>'
-H 'Accept: application/json'
'http://<server-host>:<RESTAPIPort>/v1/api/settings'Replace each placeholder with the hostname or private IP of the server, the credentials accepted by your API installation, and the value you placed in RESTAPIPort. For the conceptual example above, the URL would end in :8212/v1/api/settings.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteWhat a successful response tells you
A successful response should include the effective RESTAPIEnabled and RESTAPIPort values. Confirm that they match the file you edited and the port your firewall permits. This check verifies more than a reachable TCP socket: it confirms that the server loaded the API setting and that authentication succeeded.
Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
Interpret common HTTP results
- HTTP 200 with JSON: the endpoint answered and the supplied credentials were accepted.
- HTTP 401 Unauthorized: the server is reachable, but the Basic Authentication credentials are not accepted. Check the username format used by your API client and the configured
AdminPassword. - Connection refused: no process is listening at that address and port, the server has not restarted with the new setting, or a local firewall is rejecting the connection.
- Timeout: a firewall, routing rule, VPN policy, or incorrect private address is preventing the client from reaching the host.
- 404 or another API error: verify the exact
/v1/api/settingspath, the server version’s API availability, and that the request is being sent to the API port rather than the game port.
Understand the three different port settings
Port confusion is one of the most common causes of failed tests. Palworld deployments can involve separate values for the REST API, the game listener, and a community server’s advertised external port.
| Setting | What it controls | Where it is configured | Does it select the REST API listener? |
|---|---|---|---|
RESTAPIPort |
The HTTP listener used by the Palworld REST API. | OptionSettings in the active PalWorldSettings.ini. |
Yes. |
-port=8211 |
The dedicated game server’s listening port for player connections. | Startup command or service arguments. | No. |
-publicport |
A community-server external or advertised port setting. | Startup configuration where applicable. | No. |
The value 8211 in the startup example is commonly seen as a game-server argument, but it does not enable or relocate the REST API. Test the API against the configured RESTAPIPort, and create firewall rules for that port separately from the game port.
What you can do after verification
The documented API scope includes read-only information and administrative actions. The available categories include:
- Server information
- Player list
- Server settings
- Announcements
- Kick
- Ban
- Unban
- Save
- Shutdown
- Force stop
- World actor snapshot
- Metrics
Use the settings request as the first health check, then grant tools or scripts access only to the operations they need. Announcements, player-list queries, world snapshots, and metrics may support monitoring, while kick, ban, unban, save, shutdown, and force-stop operations can immediately affect players or server state. Keep credentials and network permissions aligned with that distinction.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.When to self-host the API and when to use managed infrastructure
The API setting itself is the same kind of configuration task on a self-managed machine or a managed game-server environment, but the responsibilities differ. Confirm that a managed host gives you access to the active platform-specific file or an equivalent control panel field before committing to it; some hosts abstract the filesystem.
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
| Operational concern | Self-hosted server | Managed environment |
|---|---|---|
| Ini-file control | Direct control over PalWorldSettings.ini, startup arguments, and backups. |
Depends on whether the host exposes the file or API settings in its panel. |
| Private access | You design firewall rules, VPN access, and interface restrictions. | The host may provide a private network or firewall, but you must verify its exact controls. |
| Restart responsibility | You schedule and perform restarts and confirm the correct instance was restarted. | The provider may offer restart controls; confirm how configuration changes are persisted. |
| Backups | You choose the backup location and retention for settings and world data. | Backup scope and restore timing depend on the host’s service terms and tools. |
| Observability | You inspect logs, listening sockets, firewall logs, and metrics yourself. | Panel logs and monitoring may simplify checks, but API-level verification is still useful. |
| Cost | Hardware, bandwidth, storage, and administration are your responsibility. | Charges and included features vary by provider; no universal price or feature set applies. |
Regardless of the operating model, retain the same security boundary: do not publish the administrative API directly to the Internet merely because a managed panel or remote client makes access convenient.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Troubleshoot a missing or ignored configuration
The configuration file does not exist
Launch the server once, allow initialization to complete, stop it, and inspect the platform-specific saved path. On Windows, check WindowsServer; on Linux SteamCMD, check LinuxServer. If several copies exist, compare the path with the working directory and launch command of the process you actually run.
The server starts but the API is unreachable
- Confirm the process was stopped and restarted after the edit.
- Read the active file and verify that
RESTAPIEnabled=Trueappears insideOptionSettings. - Confirm that the client is using the exact
RESTAPIPortvalue, not the game port from-port=8211and not a-publicportvalue. - Check that the host firewall allows the API port on the intended private interface.
- Test from a client that is actually on the permitted LAN or VPN.
The request returns 401
HTTP 401 means the request reached an HTTP service but authentication failed. Recheck the Basic Authentication credentials, including the administrative password configured through AdminPassword. Avoid accidentally passing shell characters unquoted; the quoted curl -u example prevents many parsing errors. If the password was changed, restart the server and retry with the current value.
The request times out from another network
A timeout does not justify opening the port publicly. Check private routing, VPN membership, host and perimeter firewall rules, and the server’s private address. The API’s documented deployment guidance is LAN-oriented; use a private access boundary for remote administration.
Changes revert after an update or restart
Verify that you edited the active PalWorldSettings.ini and not DefaultPalWorldSettings.ini. Keep a dated backup of the active file and record the API port alongside the service definition. When an update or deployment process replaces configuration, restore the intended values in the active file, restart, and run the authenticated settings check again.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →A repeatable deployment checklist
- Identify the exact dedicated-server instance and its working directory.
- Stop that instance cleanly.
- If necessary, start it once to create the saved configuration directories, then stop it again.
- Back up the platform-specific
PalWorldSettings.ini. - Edit
OptionSettingsand setRESTAPIEnabled=True. - Choose a free private listener and set
RESTAPIPortto that value. - Preserve every other option and avoid duplicate API keys.
- Confirm
AdminPasswordand protect the credentials. - Configure host and network firewalls for trusted clients only.
- Restart the dedicated server.
- Run the authenticated
GET /v1/api/settingsrequest. - Check that the JSON reports the expected enabled state and port before deploying scripts that can alter or stop the world.
Operational habits that prevent avoidable outages
- Keep the API port documented with the corresponding instance name; separate worlds may use separate configuration files.
- Make one configuration change at a time, restart, and verify before changing firewall rules or automation.
- Use a read-only settings check as your post-restart health test.
- Restrict automation credentials to the machines and operators that require them.
- Test kick, ban, save, shutdown, and force-stop automation only during an agreed maintenance window.
- Recheck the active file after server updates, migrations, or changes to startup scripts.
The Bottom Line
Use the active platform-specific PalWorldSettings.ini, set RESTAPIEnabled=True and a private RESTAPIPort, restart the server, then verify GET /v1/api/settings with Basic Authentication. Keep that port behind a LAN, VPN, or equivalent private boundary; it is separate from the game and community public ports.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
