Control Panel API Keys

Open the Control Panel through Management → Subscriptions → Open control panel for the intended Active service. See Using the Control Panel if you need help finding the account or domain.

These keys grant programmatic hosting-management access. The SMTP API uses mailbox credentials to send mail and is a separate service. For WHMCS, use the dedicated reseller integration guide.

Create a key for automation

1. Open the intended service from Management. API-key management is blocked while a reseller is viewing another user's account.
2. Open Advanced → API Keys.
3. Note Server (X-Server) and Username (X-Username) under Your API Credentials.
4. Under Create New API Key, optionally enter a Key Name using letters and numbers, up to 30 characters. Leave it blank for an automatic name.
5. Click Create API Key.
6. Copy the new API Key immediately and store it securely; it will not be displayed again.
7. Configure your integration with the displayed server and username, and the copied secret as X-API-Key.
8. Follow View API Documentation for request formats and supported operations.

The Key ID is a management label, not the secret. Send the copied key unchanged; do not prepend keyid: or remove colons from a credential. The panel provides no per-key permission editor, expiry selector, or IP-restriction form. Treat the generated key as a sensitive account credential.

Revoke or replace an API key

1. Open Advanced → API Keys.
2. Find the intended entry in Your API Keys, checking its ID and usage information.
3. For a planned replacement, create and securely install a new key in the integration first, then verify that integration.
4. Click Delete beside the old key and confirm the deletion prompt.
5. Confirm the key is removed. Clients still using it must be updated.

For WHMCS-specific keys, use Reseller → WHMCS Integration.