One upload.
One private key.

1. Get your Hypixel application key

1. Open the Hypixel Developer Dashboard and sign in to your Hypixel account.
2. Follow any Minecraft account linking or verification steps shown by the dashboard.
3. Go to Apps and register an application for this website. A Personal application supports a public, non-monetized project. Describe it as a SkyBlock profile viewer and progression adviser, and use your site URL when requested.
4. Complete the dashboard’s registration steps and copy the application API key privately. If application setup requires a deployed URL, upload the site in step 2 first, then return to finish registration.

An unexpired Development Key can be used for testing. When Hypixel expires it, generate a replacement, update HYPIXEL_API_KEY in Cloudflare, then redeploy. A rebuild is not required. Use an application key for an ongoing website. Monetization or team management requires a Production application; web Production applications require a custom domain. See Hypixel’s current API policy.

2. Upload the ZIP to Cloudflare

1. In Cloudflare, open Workers & Pages, choose to create a Pages project, and select Direct Upload / Upload assets. Dashboard wording may vary.
2. Name the project and drop skyward-cloudflare.zip into the upload area. The ZIP already has index.html and _worker.js at its root. No install, build command, or source-folder compilation is needed.
3. Deploy it. You can open the site and try its clearly labeled demo immediately.

Cloudflare’s Direct Upload documentation confirms dashboard ZIP uploads and support for a prebuilt _worker.js.

3. Connect live profiles

1. In the Pages project, open Settings → Variables and Secrets (sometimes labeled Environment Variables).
2. Add HYPIXEL_API_KEY with your application API key as its value. Choose Secret / Encrypt and the Production environment. Add it separately to Preview only if you use preview deployments.
3. Save, then redeploy the same ZIP so the new deployment receives the setting.
4. Open your site. Its footer should say Live lookup configured. Search for a player with an available SkyBlock profile, choose a fruit profile, and select a goal.

The key stays on the server. There is no key input in the visitor interface. Environment bindings are documented in Cloudflare Pages bindings.

Check the live connection

Test Minecraft username resolution and Hypixel key acceptance separately. This also confirms which app version is running. The API key is never returned or displayed.

Profile data & advice

• Username lookup first tries Minecraft Services and Mojang. If those services are blocked or unavailable, the app tries PlayerDB, then Crafthead. These are third-party cached services operated by Nodecraft; they receive the public username being looked up and an identifying app header with this site’s address. They never receive the Hypixel key. Returned UUIDs and usernames are checked before use. You can also paste a player’s Java UUID directly to skip username services; the profile will be labeled with its abbreviated UUID. Profile data comes from Hypixel’s authenticated /v2/skyblock/profiles endpoint.
• Successful profile snapshots are cached for up to five minutes; username resolution and skill resources for up to a day. Refresh respects this cache.
• Missing and hidden fields remain unknown. Gear comes from shared armor, inventory, Ender chest, wardrobe and equipment data. Backpacks and storage pages are excluded. Pet rarity and total XP are shown without estimated pet levels.
• Accessory Power is the API’s recorded peak. Skill levels are computed from XP and can exceed unlock-gated in-game caps. Co-op bank balances are not personal wallet totals.
• Advice uses a researched rules library. It is not an AI chat and does not perform live research or quote current item prices. Each recommendation gives the profile evidence and links to its sources. Video descriptions and chapters were reviewed, not entire transcripts.
• Ironman recommendations avoid ordinary player-market purchases. Stranded profiles receive island-only guidance.
• Checklist completion is stored only in the visitor’s browser and can be cleared by clearing this site’s local storage. No account system, analytics, or tracking scripts are included.

When something does not load

• “Live lookup is not connected”: check the secret’s name, environment, and redeploy after saving it.
• Key rejected or access denied: run the connection check above. Only an explicit Hypixel key rejection is labeled invalid. Minecraft failures and other access-denied responses are reported separately. Development keys can work while valid; check the dashboard’s expiration, replace the secret if needed, and redeploy. The footer only confirms a setting exists.
• Username lookup unavailable: version 1.2.0 includes public cached fallbacks. If every provider fails, paste the player’s Java UUID into the search field instead. Dashed and undashed UUIDs are accepted. You can obtain the UUID from a public player directory in your own browser, for example this PlayerDB example: replace Technoblade in the address with the username, then copy data.player.raw_id or data.player.id from the result. No API key is needed for this public identity lookup.
• “No profiles”: check the username and whether the player has an available SkyBlock profile.
• Unknown stats or no gear: the player may have relevant API sharing disabled. For your own profile, open the SkyBlock settings, enable the available sharing options, and wait before refreshing. You cannot bypass another player’s privacy.
• Rate limit: wait before trying again. All visitors share the site’s Hypixel application quota. The app caches requests and has a best-effort burst guard; Cloudflare WAF rules can provide stronger public-site limits.
• Cloudflare quota: API routes run as Pages Functions and consume the account’s function quota. Asset pages are served separately.

API behavior and errors: Hypixel API reference.