Panel HTTP API · dual auth

Build on the infrastructure you already run.

Automate hosting operations against CorePanel — services, DNS, domains, billing, tickets, and teams — with clean REST and predictable auth semantics.

Start deploying View API reference Authentication

BASH — 80×24

const res = await fetch(
  "https://panel.expanse.host/api/services",
  {
    headers: {
      Authorization: `Bearer $`,
    },
  },
);
// JSON list of services for your teams

Dashboard parity

REST

API surface

Core architecture

Documented dual-auth surface, explicit scopes, and the same routes you already trust in the panel UI.

Same API as CorePanel

List servers, DNS zones, domains, billing, tickets, and teams with the same authenticated routes the dashboard uses — ideal for internal tools and automation.

One base URL

All routes live on panel.expanse.host — no separate API subdomain to juggle.

Read the reference

Scopes & security

Optional read/write scopes per area, IP allowlists on keys, per-key rate limits, and hashed key storage in the panel.

Structured JSON

REST responses with consistent error semantics — 401 for auth, 403 for missing scopes, 429 when rate limited per key id.

GET/api/services

"Authorization": "Bearer sk_…"

200 · application/json

Ready to build on the panel?

Create an API key in CorePanel, pick the scopes you need, and start calling the same endpoints your team uses in the browser.

Create free account Contact sales

Getting startedKeys, Bearer auth, first curl in minutes.Continue API referenceScopes, errors, rate limits, public exceptions.Continue Auth deep diveClerk vs sk_, IP allowlists, expiry.Continue