MusixMatch changed their signature generation

[Lioncat6]

Not sure how yet, but the current method is broken.

[Strvm]

I think they've put their platform behind an auth login now

It asks me to log in when I try to search now on: https://www.musixmatch.com/search

[Lioncat6]

This can easily be circumvented using a session cookie with the requests... they last about a couple weeks from my experience.

[Lioncat6]

But they did change their signature generation logic as both your implementation and mine in js now returns the invalid signature error

[Strvm]

With this auth barrier you no longer require a signature, since the user token is the signature now.

Was able to get it working with something like this (redacted my auth token)

import requests

url = "https://apic-appmobile.musixmatch.com/ws/1.1/community/opensearch/tracks?app_id=mac-ios-v2.0&usertoken=REDACTED&query=Daft"

payload = {}
headers = {
  'Host': 'apic-appmobile.musixmatch.com',
  'Accept': 'application/json',
  'x-mxm-app-version': '1.37.2',
  'User-Agent': 'Musixmatch/2025120901 CFNetwork/3860.300.31 Darwin/25.2.0',
  'Accept-Language': 'en-US,en;q=0.9',
  'Connection': 'keep-alive',
}

response = requests.request("GET", url, headers=headers, data=payload)

print(response.text)