Skip to main content
Support Online
MirrorLooking Glass
RabisuRabisu
Client Panel
TutorialsKnowledgebaseReseller APIReseller Module
Version: 1.0.0

Rabisu Reseller API

Rabisu Virtual Server Reseller API — a REST interface that lets resellers programmatically order virtual servers, manage existing services and query their account balance.

Authentication: HTTP Basic Auth (RFC 7617). Username = API Key (rsk_live_*), Password = API Secret (rsks_live_*).

Rate Limit: Every API key has its OWN limit (there is no shared/global limit). Limits are per minute, by endpoint group (bucket): default 60 (orders, products, balance, webhooks, vnc, credentials, lifecycle), services_read 150 (GET /services, GET /services/{id}), services_status 300 (GET /services/{id}/status), services_changes 120 (power, rebuild, password, upgrade). Per-bucket increases for large resellers are configured by Rabisu; effective values are in GET /auth/me → rate_limits. All responses include X-RateLimit-* headers; when exceeded, 429 + Retry-After (seconds) is returned — the client should wait that long and retry.

Idempotency: POST/PUT/PATCH endpoints support the Idempotency-Key header (RFC draft-irsdl-httpbis-idempotency-header). If the same key + same body is sent again within 24 hours, the cached response is returned. Same key + different body → 422 idempotency_key_reuse.

Authentication​

HTTP Basic Authentication (RFC 7617).

  • Username: API Key (rsk_live_* or rsk_test_* in the test environment)
  • Password: API Secret (rsks_live_* / rsks_test_*)
  • A bcrypt hash is kept in the DB, the plaintext secret is shown only AT creation time
  • Wrong credentials return 401 + WWW-Authenticate: Basic realm="Rabisu Reseller API"

Security Scheme Type:

http

HTTP Authorization Scheme:

basic

Contact

Rabisu API Support: api@rabisu.com