Reseller API

Keeping your key safe

Keep ZoltVPN Reseller API keys safe: a secret store, one key per system, allowed IPs and an expiry, the activity log, and revoking a leaked key at once.

  • Keep it in your server's secret store or environment, never in source control.
  • Use one key per system, so you can revoke one without stopping the others.
  • Set allowed IPs to your server's addresses where you can, and an expiry.
  • Every call is logged with its time, path, result and the calling IP. Check API → Activity in the portal.
  • If a key may have leaked, revoke it at once (API → Keys → Revoke). It stops working on the next call.