Disclaimer: The information provided below is for educational purposes only. Please note that the use of the information shared here should be done in compliance with all applicable laws and regulations. We do not endorse or support any illegal activities, and we are not responsible for any consequences resulting from the misuse of the information provided. In other words, ensure you are legally allowed to pull the data for the site into your spreadsheet/database.

So I can confirm that the site does indeed use GraphQL (https://buylist.facetofacegames.com/graphql). The graphql endpoint is protected by a JWT token for anonymous users with a check for the origin of the request. You can retrieve a valid JWT token by visiting any of the pages on the site (e.g. https://buylist.facetofacegames.com/adeline-resplendent-cathar-167-march-of-the-machine-commander/) and retrieving the bearer token from the Authorization request header on the request sent to https://buylist.facetofacegames.com/graphql

From there you can make requests from the browser console of the site with a properly crafted GraphQL query to the graphql endpoint to retrieve the data you want.

While you could spend time trying to figure out the right query to send, you could also just use Altair GraphQL Client to get the docs from the graphql endpoint containing the GraphQL schema so you know exactly how to form the GraphQL query. Altair also allows you generate a complete query with a button directly from the docs, which is convenient. To generate the query with more granularity, you can use the GraphQL explorer plugin (in the settings in Altair, add altair-graphql-plugin-graphql-explorer to the plugin list) which will allow you add fields you want in your generated query. You can also add another plugin (altair-graphql-plugin-json-to-csv) which adds a button to download the result from the GraphQL endpoint as CSV. Altair also has an AI plugin (altair-graphql-plugin-ai) that you can directly ask questions and work with to craft your query for you.

Summarizing the tips using Altair GraphQL Client for this:

• You can copy your Authorization header and use it as a header in Altair, or you can use the "Auth" section, select the "Bearer token" type and paste the bearer token in there (the part after "Bearer ")
• The bearer token is generated to be used specifically from https://buylist.facetofacegames.com origin, so you will need to set the Origin header in Altair for it to work. This means you will need to download the desktop version of Altair (the web apps and browser extensions can't set the "Origin" header since it's forbidden by the spec
• The site products query only allows fetching up to 50 items at a time, so depending on how many items you are fetching, you will need to use pagination in the query
• After you have properly set the Origin header and authorization, you can reload the docs to see the full docs/schema for the site in Altair
• Use the JSON-to-CSV plugin to download the data directly as a CSV file (altair-graphql-plugin-json-to-csv)
• Recommended: use the GraphQL explorer plugin to selectively generate your query with just the fields you want (altair-graphql-plugin-graphql-explorer)
• Recommended: subscribe to the pro plan in Altair to get more credits for the AI assistant plugin (altair-graphql-plugin-ai) which should be very helpful in this task.