It’s definitely possible. The assets library is accessible worldwide with all CORS settings allowing the requests to go through, regardless of the origin server (i.e: not restricted to the forge-vtt domain).
As for the API itself, same deal, as it is meant to not only be used internally by us, but also allowing access from the outside, like any other REST API.
Btw, here’s a 4.5 years old post of mine which goes into some details on how to use custom API for more esoteric purposes: How to control your games using custom API requests and reset your worlds periodically
1 Like