API access for resellers
If you resell our capacity, you should not have to click through a panel for every customer action. Resellers get programmatic access to the same operations.
What it covers
The operations a reseller actually needs to automate, rather than a token read-only endpoint:
- List your servers with their specification, port speed, addresses and state
- Power on, power off and reset a machine
- Trigger a reinstall with a chosen operating system
- Open and read a console session
- Set and read reverse DNS on your addresses
- Read traffic figures per machine
- Read invoices and account credit
- Open and follow up support tickets
In other words, the same set of actions available in the portal — so you can put your own panel, your own billing system or your own provisioning scripts in front of it and never touch ours.
Getting a key
Ask support for API access on your account. We issue a key scoped to your account only; it can never see or touch another customer's machines. If a key leaks, tell us and we will revoke it immediately — there is no waiting period and no charge for a new one.
Treat the key as a credential with the same weight as a root password. Keep it out of your git repository, out of your customers' reach, and in an environment variable or a secrets store rather than a configuration file that gets copied around.
Sensible habits
- Restrict by address where you can. If your automation runs from two hosts, tell us and we will tie the key to them.
- Back off on errors. Retry with increasing delays rather than in a tight loop; a loop that hammers a failing endpoint will get rate limited, which helps nobody.
- Do not poll aggressively. A reinstall takes minutes, not milliseconds. Check every thirty seconds, not every second.
- Log what you send. When something provisions incorrectly, the first question is always what was actually requested.
What is not exposed
Anything that would let one account affect another, anything that changes your contract, and anything irreversible without a human — cancelling a service, for instance, still goes through a ticket. That is deliberate. An automation bug should cost you a reboot, not a rack.
If you need something that is missing
Tell us what you are trying to automate. The API exists because resellers asked for it, and it grows the same way. We would rather add an endpoint than have you build a screen-scraper around our portal.
Still stuck? Mail support@novogara.com — an engineer answers, at any hour. Back to the knowledge base