1.11. Work with API

A token is required to work with the API. The token is associated with the account and allows you to manage all services available in it, including delegated.

1. Open the "API" section.
2. On the "Access data" tab, check "I agree with user agreement and terms of service" and click "Activate token":

Token is valid for 6 months:

• If used — since the last time it was used.
• If not used — since its creation.

Request limit — 60 per minute.

The limit is a counter that increments by 1 every second, with a maximum value of 60. For example, if you use up the entire limit in a single second, you’ll be able to make one request again after just one second. If you do not make any requests after the limit is exhausted, the limit will return to its standard value of 60 after one minute. Limits based on seconds, hours, days, etc., do not apply.

Each response contains HTTP headers:

• X-RateLimit-Limit: 60 — request limit.
• X-RateLimit-Remaining: XX — number of requests remaining before the limit is reached.

When the limit is reached:

• A 429 response code is returned.
• The response contains the following error message: "Too Many Requests per minute. Look on Retry-After and X-RateLimit-* headers".
• The Retry-After header is added to the response, specifying the number of seconds to wait before sending a new request.
• A notification is sent to your email and to your connected messengers (but no more than once a week).

Access restrictions are configured in the "API" section on the "Access restriction" tab:

The working logic is as follows:

• Address list is empty — access is open for everyone.
• There is one or more addresses in the list — access is open only for addresses from the list, for the rest access is closed.

Addresses and subnets in CIDR format are added to the list of allowed addresses using the "Add IP to allowed list" button. All added addresses are displayed in the list below. You can add a note to each of them or remove them from the list.

You can find the list of methods, their descriptions, test their work and get code samples in the "API" section on the "Documentation" tab. The tab consists of several blocks.

The "Methods" block displays a list of available methods:

Block with the name of the selected method contains its detailed description:

• Request sending method — GET or POST.
• URL — address to which the request should be sent.
• Parameters — list of available parameters, data types for each of them and variants of available values.
• Detailed description of the method and its return values (not for all methods).

The left part of the "Request execution" block contains a form for quick sending a request on behalf of the current account, the right part displays the response code and the result of the sent request:

When an action is performed in the control panel, the system automatically captures the data of the last request to the corresponding method and stores it for 10 minutes. During this time, the documentation on the method page will show the date and time of its last call, you can view the list of parameters passed to it and substitute these parameters into the request form. For each method, only the data of the last 1 request made in the current account is stored.

The "Code example" block outputs sample code for using the current method using cURL or the HostingAPI library:

• The current active token is automatically substituted into the string with the parameter $auth_token. If the token is not active, it will have to be activated and substituted into the code manually.
• Parameters from the form are automatically substituted into the string with the parameter $post after the request is executed. If the request was not executed, you will have to specify the parameters yourself.