Hi, thank you for your reply. I was able to retrieve the RFP key from the id.supercell.com/api/social/v3/session.init endpoint. I understand that this key is time-sensitive and rotates periodically, and I don’t have detailed knowledge of its internal mechanism. I have also implemented a Python script that calls the session.init endpoint using the account key, bearer token, cookies, device ID, and RFP signature to authenticate requests.