API Documentation

Overview

Bavinhost exposes programmatic access so you can manage services outside the control panel.

Account API

Customer-facing REST API for domains, hosting, orders, account profile, support tickets, and billing.

Authentication

Send your API key on every request using either:

• Header: X-API-Key: YOUR_API_KEY
• Query: ?api_key=YOUR_API_KEY

Create and revoke keys in the API Keys page after logging in.

curl -H "X-API-Key: YOUR_API_KEY" \
  "https://www.bavinhost.com/account/api/v1/domains"

Endpoints

Domains

Register body example:

{
  "domain": "example.com",
  "years": 1,
  "contacts": { }
}

Renew body example:

{
  "years": 1
}

Auto-renew body example:

{
  "enabled": true
}

Hosting

Orders

Account

Support

Create ticket body example:

{
  "title": "Issue title",
  "description": "Help needed",
  "department": "IT"
}

Billing

Partner Gateway API

Reseller / agency API for site provisioning, domains, wallet billing, team, API keys, and webhooks.

Authentication

Partner requests require these headers:

X-Api-Key: your_api_key
X-Timestamp: unix_timestamp
X-Nonce: unique_nonce

Keys and webhook settings live in the partner dashboard. Logged-in dashboard sessions can also call the API without a key for interactive use.

Endpoints

Sites

Provision body example:

{
  "domain": "client-example.com",
  "subdomain": "",
  "plan_id": "starter",
  "partner_customer_id": "cust_12345",
  "partner_customer_email": "owner@client-example.com",
  "partner_customer_name": "Client Owner"
}

Jobs

Domains

Wallet & invoices

Team, keys & webhooks

Code examples

Account API — list domains (cURL)

curl -H "X-API-Key: YOUR_API_KEY" \
  "https://www.bavinhost.com/account/api/v1/domains"

Account API — open support ticket

curl -X POST \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"title":"Issue","description":"Help needed","department":"IT"}' \
  "https://www.bavinhost.com/account/api/v1/support"

Account API — renew domain

curl -X POST \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"years":1}' \
  "https://www.bavinhost.com/account/api/v1/domains/DOM_SECRET_ID/renew"

Partner Gateway — renew site

curl -X POST "https://www.bavinhost.com/partner-gateway/api/v1/sites/SITE_ID/renew" \
  -H "Content-Type: application/json" \
  -H "X-Api-Key: YOUR_API_KEY" \
  -H "X-Timestamp: $(date +%s)" \
  -H "X-Nonce: $(openssl rand -hex 16)" \
  -d '{"years":1}'

Partner Gateway — list sites

curl -X GET "https://www.bavinhost.com/partner-gateway/api/v1/sites?page=1&limit=20" \
  -H "Content-Type: application/json" \
  -H "X-Api-Key: YOUR_API_KEY" \
  -H "X-Timestamp: $(date +%s)" \
  -H "X-Nonce: $(openssl rand -hex 16)"

Partner Gateway — Node.js provision

const baseUrl = "https://www.bavinhost.com/partner-gateway/api/v1";
const apiKey = "YOUR_API_KEY";

const res = await fetch(`${baseUrl}/sites`, {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "X-Api-Key": apiKey,
    "X-Timestamp": Math.floor(Date.now() / 1000).toString(),
    "X-Nonce": crypto.randomUUID().replace(/-/g, "")
  },
  body: JSON.stringify({
    domain: "client-example.com",
    plan_id: "starter",
    partner_customer_id: "cust_12345",
    partner_customer_email: "owner@client-example.com",
    partner_customer_name: "Client Owner"
  })
});
console.log(await res.json());

Errors & rate limits

Account API responses use a standard envelope:

{
  "success": false,
  "data": null,
  "message": "Unauthorized",
  "code": 401
}

Partner Gateway error shape:

{
  "success": false,
  "error": {
    "code": "AUTH_FAILED",
    "message": "Missing API key or session"
  }
}

Common partner codes: AUTH_FAILED, FORBIDDEN, NOT_FOUND, METHOD_NOT_ALLOWED, VALIDATION_ERROR, INTERNAL_ERROR. Account API defaults to about 100 requests per hour per key. Partner Gateway returns X-RateLimit-* headers.