Developer API

Installable OS templates for VPS orders and reinstalls. ?platform=linux (default) | windows | router — Cloud Router plans deploy MikroTik CHR only.

Atomic: debits your wallet at your effective price, issues a paid receipt, and provisions. Provisioning failure auto-refunds. Send an Idempotency-Key so a retried request can't order twice. Returns the server AND its initial root password (shown once).

{ "plan_slug": "vps-2", "label": "web-1", "hostname": "web-1", "os_family": "ubuntu", "os_template": "ubuntu-22.04" }

Same atomic debit/refund contract. Returns the account AND its SFTP/DB passwords (shown once). `php_version` defaults to 8.3.

{ "plan_slug": "hosting-starter", "domain": "example.com", "username": "examplecom" }

Server detail (no credentials, no internal provisioning data).

Live CPU / memory / network / disk usage.

Every IP on the server with its current PTR record. `zoneHosted: false` means the reverse zone is not on our DNS.

[
  {
    "ip": "46.31.78.56",
    "primary": true,
    "gateway": "46.31.78.1",
    "netmask": "255.255.255.0",
    "ptr": "mail.example.com",
    "zoneHosted": true
  }
]

Every IP across all your servers, grouped per server, with PTR records — the API form of the dashboard Reverse DNS page.

Plans this server can resize to — same family, same disk size (a plan change never alters disk). Returns the current plan and the switchable options, cheapest first.

{
  "current": { "id": "...", "name": "Cloud Router S", "vcpu": 1, "ramMb": 1024, "diskGb": 10, "monthlyPrice": 19.90 },
  "options": [ { "id": "...", "name": "Cloud Router M", "vcpu": 2, "ramMb": 2048, "diskGb": 10, "monthlyPrice": 29.90 } ]
}

Power the server start, stop, or reboot. `:action` ∈ {start,stop,reboot}.

Issue a short-lived URL to the browser VM console for this server.

Rotate the server root/admin password; the new password is returned once.

Add-ons available/attached for this server — SEO IP Pack, extra IPs, backups. Prices are in cents: `monthly_usd_cents` is the recurring charge, `prorated_usd_cents` what you pay today if you buy now.

Buy an add-on for the server. Debits your wallet **immediately**, prorated to the end of the server's current cycle; the add-on then renews with the server every month. Reseller tiers pay their discounted price. Auto-refunds if it cannot be attached.

{ "addonId": "seoip7pk" }

Switch to another plan in the same family with the same disk size — an in-place vCPU/RAM resize. The server reboots (~1 min) to apply; disk is never changed. Only the recurring price changes: no proration on an up-switch, no credit on a down-switch — the next renewal bills the new plan. Use GET /vps/:id/plan-options for valid targets.

{ "productId": "..." }

Change the display label.

{ "label": "web-prod-1" }

Point the IP's PTR record at a hostname (e.g. `mail.example.com`). Idempotent upsert.

{ "hostname": "mail.example.com" }

Remove the PTR record for the IP.

DESTRUCTIVE — wipe the disk and rebuild from an OS template. Honours an optional Idempotency-Key header.

{ "os": "ubuntu", "osTemplate": "ubuntu-22.04" }

DESTRUCTIVE — permanently terminate the server.

Hosting account detail.

Suspend the account (site + databases stop serving). Reversible with unsuspend.

Lift a suspension and restore service.

DESTRUCTIVE — permanently removes the site, databases, and mail; the username becomes reusable.

Switch the account's PHP-FPM version. `php_version` ∈ {7.4, 8.1, 8.3}.

{ "php_version": "8.3" }

Retry the Let's Encrypt certificate issue for the account's domain now.

Tail the access or error log. Query: `kind` ∈ {access,error}, `lines`.

Retry the Let's Encrypt certificate issue now.

Switch the account's PHP-FPM version.

{ "php_version": "8.3" }

Read the crontab.

Replace the crontab.

{ "jobs": [ { "schedule": "0 3 * * *", "command": "php cron.php" } ] }

Password-protected directories (htpasswd).

Add or update a password-protected directory.

{ "path": "/admin", "basic_user": "u", "password": "…" }

Remove protection. Query: `path`.

ModSecurity WAF status for the account.

Whether temporary WAF-log access is active.

Request temporary access to WAF logs.

Whether browser-SSH terminal access is enabled.

Enable browser-SSH terminal access.

Start a browser-SSH session; returns a session URL/token.

Stop the browser-SSH session.

Git-deploy status for the account.

The SSH deploy key to add to your repo.

The push-to-deploy webhook URL/secret.

Enable push-to-deploy.

Disable push-to-deploy.

Clone/deploy a repo into the site.

{ "repo_url": "git@…", "branch": "main", "subdir": "" }

Pull the latest commit for the deployed repo.

Disconnect git deploy from the site.

List a directory. Query: `path` (default /public_html).

Read a text file's contents. Query: `path`.

Create or overwrite a text file.

{ "path": "/public_html/x.txt", "content": "…" }

Delete a file or directory. Query: `path`, `recursive`.

Stream a file as an attachment. Query: `path`.

Upload a file (multipart form field `file`). Query: `path`.

Create a directory.

{ "path": "/public_html/new" }

Rename or move a file/directory.

{ "from": "/a", "to": "/b" }

Site backups (restore points).

Create a new site backup.

Delete a backup.

Restore the site from a backup.

Stream a backup archive (gzip).

Visitor statistics. Query: `period` ∈ {24h,7d,30d}.

Extra MySQL databases on the account.

Create an extra MySQL database.

{ "suffix": "wp2" }

Delete an extra MySQL database.

Mailboxes under one mail domain.

Forwarding aliases under one mail domain.

Every mailbox across all your mail domains.

Create a mailbox on a mail domain.

{ "domain_id": 12, "local_part": "info", "password": "…", "quota_mb": 2048 }

Set a new password for a mailbox.

{ "password": "…" }

Permanently delete a mailbox and its mail.

Create a forwarding alias (source → destination).

{ "domain_id": 12, "source_local": "sales", "destination": "info@example.com" }

Remove a forwarding alias.

The registrant/WHOIS contact used for new registrations (returns SA defaults if none saved yet).

Create or update the registrant (WHOIS) contact.

{ "first_name": "Jane", "last_name": "Doe", "email": "…", "phone": "+90…", "address1": "…", "city": "…", "postal_code": "…", "country": "TR" }

Email the EPP transfer (auth) code to the registrant. Domain must be active with the transfer lock off.

Domain detail.

Update auto-renew, transfer lock, WHOIS privacy, or nameservers. Changes are pushed to the registry and rolled back if the push fails.

{ "auto_renew": true, "nameservers": ["ns1.example.com","ns2.example.com"] }

Single invoice with line items and payment transactions.

Settle an unpaid invoice from your wallet balance. Fails if the balance is insufficient (top up in the dashboard first). Returns the paid invoice.

Prepaid wallet balance (USD cents).

Recent wallet activity. Query: limit (max 200).

Ticket detail with the message thread.

Open a support ticket. Honours an optional Idempotency-Key header so a retried request doesn't open a duplicate.

{ "subject": "Mail deliverability", "message": "Our PTR record is set but…", "priority": "medium", "department": "technical" }

Post a customer reply. Re-opens a resolved/closed ticket.

{ "body": "Thanks — that fixed it." }

Close the ticket. Idempotent.

Subscribe an HTTPS URL to events. The signing secret is returned ONCE in this response.

{ "url": "https://example.com/hooks/444host", "events": ["vps.power.changed", "ticket.replied"] }

Subscription detail (secret masked).

Change url, events, description, or pause/resume via `is_active`.

{ "is_active": false }

Remove the subscription and stop deliveries.

Issue a new signing secret (returned ONCE). The old secret stops signing immediately.

Recent delivery attempts with status, duration, and errors. Query: limit (max 200).

Clone a past delivery into a fresh attempt.