REST API & Webhooks
Integrate ISPBox with your own tools: scoped machine API keys against your tenant URL, a full endpoint reference, and HMAC-signed webhooks for real-time events.
The REST API lets you integrate ISPBox with your own tools and automations - pull client and billing data, push updates, or drive a custom portal. You authenticate with machine API keys, restrict each key to just the scopes it needs, and can receive webhooks when things happen. Manage it under Settings > API (part of the API feature; needs settings manage).
1. Your API base URL
Requests are made against your own tenant URL - https://yourcompany.ispbox.net/api/v1/... - so every key is scoped to your data. The API docs button opens the full reference for the available endpoints.
2. Creating a key
Click Create key, give it a name (e.g. "Billing Sync Integration") and pick its scopes - fine-grained permissions like clients.read, billing.write or webhooks.manage. ISPBox shows the secret once; copy it into your integration then - it is stored only as a hash and can never be shown again. Each key lists its scopes, last-used time and status, and can be revoked instantly if it leaks.
Give every integration its own key with the narrowest scopes it needs - a read-only dashboard should not hold write keys.
3. Webhooks
Instead of polling, register a webhook endpoint and ISPBox will POST to your URL when events happen - a new client, a paid invoice, an opened incident and more. Deliveries are signed with HMAC-SHA256 so you can verify they really came from ISPBox. Add an endpoint, choose the events you care about, and you have a real-time feed of what is happening in your ISP.