Aurral

Playback

Subsonic API: Connect Any Compatible Player to Aurral

Aurral implements the Subsonic API on /rest, which is the reason dozens of third-party players work against it without Aurral having to integrate with each one. Symfonium, DSub, Ultrasonic and others speak this protocol already.

Why Subsonic matters

The Subsonic API is a long-standing convention among self-hosted music servers. Rather than building a native app for every platform, Aurral implements the endpoint shape those apps already expect. That means your phone can browse recommendations, play a Flow, and star a track without you installing anything Aurral-specific.

It also means existing habits transfer. If you already use a Subsonic client against Navidrome, pointing it at Aurral is mostly a URL and credential change.

Connecting an app

Open the user menu, or More on a phone, and choose Connect an app. Enter a device name and check the server address. Aurral fills in its public URL if one is configured, otherwise the address from your browser. Change it if the app reaches Aurral at a different address, which is common behind a reverse proxy.

Create the app password, then scan the generated QR code or copy the password into your player. The password is shown exactly once, so copy it before navigating away.

How app passwords differ from your account

An app password is hashed and stored separately, and creating it never changes your account password. You can revoke an individual device at any time, which immediately kills the app password, any sessions exchanged from it, and any playback tokens issued to it. Other devices keep working.

Creating a new app password requires a recent web sign-in, and an app password itself cannot create more app passwords. That is a small rule that stops a leaked app password from escalating into full account access.

If you sign in from a session exchanged from an app password, sensitive account changes such as setting a new password require confirming the actual account password first.

  • Each device shows its creation date and last-used date.
  • Admins can show all users' devices and revoke another user's device.
  • Revocation is immediate and does not affect other devices.

Favourites from a client

Favourites set in a Subsonic client work in Aurral's own player and everywhere else, because they belong to the user rather than to the client.

One Flow-specific behaviour is worth knowing: when a client stars a Flow track, Aurral adds it to the library. That is deliberate, since starring something usually means you want to keep it, but it can be turned off in settings under System, Subsonic.

Frequently asked questions

Which apps work with the Subsonic endpoint?

Any Subsonic-compatible client, which covers the major Android and iOS players as well as desktop and web clients.

Can I revoke a lost phone without changing anything else?

Yes. Revoke that one device under Connect an app. Only its app password, exchanged sessions and playback tokens are killed.

Why does starring a Flow track add it to my library?

Because starring usually means keeping it. Turn it off under settings, System, Subsonic if you would rather it did not.

Everything else

All integrations

Library

The music manager decides what ends up on disk. Aurral never writes into someone else's library folder.

Downloads

Where the audio actually comes from. Source order decides which client gets asked first.

Playback

Playback stays where it is. Aurral publishes playlists into the server you already run.

Listening history

History is the strongest recommendation signal you already own. Wire it in and the picks improve.

Alerts and shows

Optional signals that turn a static library into something that keeps moving.

Connect Subsonic clients to the rest of your stack

Nothing here requires restarting anything else. Add it when it becomes the piece you were missing.