Authentication

Authenticate with a bearer API key. The key also decides whether you reach the sandbox or the live side.

Send your API key as a bearer token on every request:

curl https://resellerhq.com/api/v1/account \
  -H "Authorization: Bearer $RHQ_API_KEY"

Keys

  • Create and revoke keys on the Developers page of the dashboard. An account can hold up to 20 active keys.
  • A key is shown once, when it is created. Only a hash is stored, so a lost key cannot be recovered; revoke it and make a new one.
  • A key has full access to its side of the account. Keep it on your server, never in a browser or an app.
  • rhq_test_ keys reach the sandbox. rhq_live_ keys reach the live side.

A missing, malformed or revoked key answers 401 unauthorized.

Base URL

https://resellerhq.com/api/v1

Rate limits

300 requests a minute per key. Over that, requests answer 429 rate_limited.

Pagination

List routes take limit (1 to 100, default 25) and cursor. Each page returns nextCursor; pass it back as cursor for the next page. It is null on the last page.