7/24 destek+44 20 3807 8084
444Host
APIv1.4 · 2026-06-11

Geliştirici API’si

Sunucularınızı, hostingi, alan adlarını, faturalandırmayı ve destek taleplerini programatik olarak okuyun. Tüm uç noktalar kapsam denetimli bir API anahtarıyla korunur.

Base URL
https://api.444host.com/v1
Kimlik doğrulama
Authorization: Bearer h444_…

AI bağlantısı (MCP)

Claude ve diğer MCP destekli araçları doğrudan hesabınıza bağlayın. API anahtarınızı taşıyıcı (Bearer) olarak kullanır; tüm araçlar anahtarın kapsamlarıyla sınırlıdır.

MCP uç noktası (Streamable HTTP)
https://api.444host.com/mcp
Claude Code ile ekleyin:
claude mcp add --transport http 444host https://api.444host.com/mcp \
  --header "Authorization: Bearer h444_…"

42 araç: sipariş (cüzdandan gerçek satın alma, çift onaylı), VPS (ters DNS dahil), hosting, alan adları, faturalandırma, destek ve webhook’lar. API anahtarı oluşturun →

OAuth destekleyen istemciler anahtar yapıştırmadan bağlanabilir — tarayıcıda onaylarsınız (RFC 8628 cihaz kodu akışı; AS metadata: api.444host.com/.well-known/oauth-authorization-server). Bağlı uygulamaları API Anahtarları sayfasından iptal edebilirsiniz.

Yerel/stdio çalıştırma: H444_API_KEY=h444_… npx -y @otwa/444host-mcp · GitHub · npm

Hızlı başlangıç

Panelden bir API anahtarı oluşturun (Hesap → API Anahtarları), sonra:

curl -H "Authorization: Bearer h444_…" https://api.444host.com/v1/account

Hız limiti: anahtar başına 120 istek/dakika. Yanıtlar X-RateLimit-* başlıkları taşır.

Uç noktalar

Account

GET/v1/accountaccount:read

Returns the authenticated account profile and wallet balance.

{
  "id": "9032ffac-…",
  "email": "you@example.com",
  "first_name": "Jane",
  "last_name": "Doe",
  "account_type": "individual",
  "language": "en",
  "email_verified": true,
  "balance_usd_cents": 1250,
  "created_at": "2026-01-01T00:00:00.000Z"
}

Catalogue & ordering

GET/v1/productsaccount:read

Orderable VPS and hosting plans with retail price and YOUR effective price (reseller discount applied when your account has one).

[
  {
    "slug": "vps-2",
    "category": "vps",
    "name_en": "VPS 2",
    "retail_monthly_usd_cents": 1200,
    "your_monthly_usd_cents": 960,
    "specs": { "vcpu": 2, "ram_mb": 4096, "disk_gb": 60 }
  }
]
GET/v1/os-templatesvps:read

Installable OS templates for VPS orders and reinstalls (Linux only).

POST/v1/vpsorders:write

Atomic: debits your wallet at your effective price, issues a paid receipt, and provisions. Provisioning failure auto-refunds. Send an Idempotency-Key so a retried request can't order twice. Returns the server AND its initial root password (shown once).

{ "plan_slug": "vps-2", "label": "web-1", "hostname": "web-1", "os_family": "ubuntu", "os_template": "ubuntu-22.04" }
POST/v1/hostingorders:write

Same atomic debit/refund contract. Returns the account AND its SFTP/DB passwords (shown once). `php_version` defaults to 8.3.

{ "plan_slug": "hosting-starter", "domain": "example.com", "username": "examplecom" }

VPS

GET/v1/vpsvps:read

Every VPS on the account, with live status and plan specs.

GET/v1/vps/:idvps:read

Server detail (no credentials, no internal provisioning data).

GET/v1/vps/:id/statsvps:read

Live CPU / memory / network / disk usage.

GET/v1/vps/:id/ipsvps:read

Every IP on the server with its current PTR record. `zoneHosted: false` means the reverse zone is not on our DNS.

[
  {
    "ip": "46.31.78.56",
    "primary": true,
    "gateway": "46.31.78.1",
    "netmask": "255.255.255.0",
    "ptr": "mail.example.com",
    "zoneHosted": true
  }
]
GET/v1/vps/all-ipsvps:read

Every IP across all your servers, grouped per server, with PTR records — the API form of the dashboard Reverse DNS page.

POST/v1/vps/:id/power/:actionvps:write

Power the server start, stop, or reboot. `:action` ∈ {start,stop,reboot}.

PATCH/v1/vps/:id/labelvps:write

Change the display label.

{ "label": "web-prod-1" }
PUT/v1/vps/:id/ips/:ip/ptrvps:write

Point the IP's PTR record at a hostname (e.g. `mail.example.com`). Idempotent upsert.

{ "hostname": "mail.example.com" }
DELETE/v1/vps/:id/ips/:ip/ptrvps:write

Remove the PTR record for the IP.

POST/v1/vps/:id/reinstallvps:destroy

DESTRUCTIVE — wipe the disk and rebuild from an OS template. Honours an optional Idempotency-Key header.

{ "os": "ubuntu", "osTemplate": "ubuntu-22.04" }
DELETE/v1/vps/:idvps:destroy

DESTRUCTIVE — permanently terminate the server.

Hosting

GET/v1/hostinghosting:read

Web-hosting accounts with status, quota, usage and connection hosts. Passwords are never returned on the API.

GET/v1/hosting/:idhosting:read

Hosting account detail.

POST/v1/hosting/:id/suspendhosting:write

Suspend the account (site + databases stop serving). Reversible with unsuspend.

POST/v1/hosting/:id/unsuspendhosting:write

Lift a suspension and restore service.

DELETE/v1/hosting/:idhosting:destroy

DESTRUCTIVE — permanently removes the site, databases, and mail; the username becomes reusable.

PUT/v1/hosting/:id/phphosting:write

Switch the account's PHP-FPM version. `php_version` ∈ {7.4, 8.1, 8.3}.

{ "php_version": "8.3" }
POST/v1/hosting/:id/ssl/retryhosting:write

Retry the Let's Encrypt certificate issue for the account's domain now.

Domains

GET/v1/domainsdomains:read

Registered domains with status, nameservers and expiry.

GET/v1/domains/:iddomains:read

Domain detail.

PATCH/v1/domains/:iddomains:write

Update auto-renew, transfer lock, WHOIS privacy, or nameservers. Changes are pushed to the registry and rolled back if the push fails.

{ "auto_renew": true, "nameservers": ["ns1.example.com","ns2.example.com"] }

Billing

GET/v1/billing/invoicesbilling:read

Your invoices, newest first.

GET/v1/billing/invoices/:idbilling:read

Single invoice with line items and payment transactions.

GET/v1/billing/walletbilling:read

Prepaid wallet balance (USD cents).

GET/v1/billing/wallet/transactionsbilling:read

Recent wallet activity. Query: limit (max 200).

Support tickets

GET/v1/ticketstickets:read

Your support tickets, newest first.

GET/v1/tickets/:idtickets:read

Ticket detail with the message thread.

POST/v1/ticketstickets:write

Open a support ticket. Honours an optional Idempotency-Key header so a retried request doesn't open a duplicate.

{ "subject": "Mail deliverability", "message": "Our PTR record is set but…", "priority": "medium", "department": "technical" }
POST/v1/tickets/:id/replytickets:write

Post a customer reply. Re-opens a resolved/closed ticket.

{ "body": "Thanks — that fixed it." }
POST/v1/tickets/:id/closetickets:write

Close the ticket. Idempotent.

Webhooks

GET/v1/webhookswebhooks:read

Your webhook subscriptions (secrets masked).

POST/v1/webhookswebhooks:write

Subscribe an HTTPS URL to events. The signing secret is returned ONCE in this response.

{ "url": "https://example.com/hooks/444host", "events": ["vps.power.changed", "ticket.replied"] }
GET/v1/webhooks/:idwebhooks:read

Subscription detail (secret masked).

PATCH/v1/webhooks/:idwebhooks:write

Change url, events, description, or pause/resume via `is_active`.

{ "is_active": false }
DELETE/v1/webhooks/:idwebhooks:write

Remove the subscription and stop deliveries.

POST/v1/webhooks/:id/rotate-secretwebhooks:write

Issue a new signing secret (returned ONCE). The old secret stops signing immediately.

GET/v1/webhooks/:id/deliverieswebhooks:read

Recent delivery attempts with status, duration, and errors. Query: limit (max 200).

POST/v1/webhooks/:id/deliveries/:deliveryId/redeliverwebhooks:write

Clone a past delivery into a fresh attempt.

Webhook olayları

Bir olay gerçekleştiğinde URL’nize imzalı bir POST gönderilir. İmza HMAC-SHA256’dır: X-444host-Signature: t=<ts>,v1=HMAC(secret, "<ts>." + body). Başarısız teslimler üstel geri çekilmeyle yeniden denenir (1dk → 6sa).

vps.created

A server finished ordering/provisioning. Payload: vpsId, label, hostname, planSlug, status, ipv4.

hosting.created

A hosting account was provisioned. Payload: hostingId, username, domain, status.

invoice.paid

An invoice transitioned to paid (any gateway, incl. API orders and renewals). Payload: invoiceId, invoiceNumber, totalUsdCents, currency.

vps.power.changed

A power action ran. Payload: vpsId, action (start/stop/reboot).

vps.reinstalled

A reinstall ran. Payload: vpsId, os, osTemplate.

vps.ptr.changed

A reverse-DNS (PTR) record was set or cleared. Payload: vpsId, ip, ptr (null when cleared).

vps.terminated

A server was terminated. Payload: vpsId.

ticket.created

A support ticket was opened. Payload: ticketId, ticketNumber, subject, status, priority.

ticket.replied

Support staff replied to your ticket. Payload: ticketId, ticketNumber, subject, status.

Hata kodları

400
Bad RequestMissing or invalid request parameters.
401
UnauthorizedMissing, invalid, or expired API key.
403
ForbiddenAPI key lacks the required scope.
404
Not FoundResource does not exist or is not yours.
429
Too Many RequestsRate limit exceeded (120/min per key). Respect Retry-After.
500
Server ErrorSomething failed on our side — retry, then open a ticket.

Değişiklik günlüğü

v1.42026-06-11latest
  • newModel Context Protocol (MCP) server — connect Claude and other AI tools directly to your account at https://api.444host.com/mcp (Streamable HTTP) using your h444_ API key as a Bearer token. 42 tools across ordering (real wallet-debited orders with double-confirm), VPS, hosting, domains, billing, tickets and webhooks, scope-gated by the key.
  • newOAuth 2.0 device-code flow (RFC 8628). Connect AI tools by browser approval instead of pasting a key: the client opens 444host.com/oauth/device, you approve the requested scopes, and it receives a scoped h444_at_ access token (+ single-use h444_rt_ refresh, 90-day). Endpoints under /oauth/* with AS metadata at /.well-known/oauth-authorization-server. Revoke connected apps anytime from the API Keys page.
v1.32026-06-11
  • newHosting lifecycle — POST /v1/hosting/:id/suspend, POST /v1/hosting/:id/unsuspend (hosting:write) and DELETE /v1/hosting/:id (new opt-in hosting:destroy scope). Together with ordering, the full WHMCS reseller-module verb set: Create / Suspend / Unsuspend / Terminate.
v1.22026-06-11
  • newAPI ordering — POST /v1/vps and POST /v1/hosting place real orders: atomic wallet debit, paid receipt, synchronous provisioning, and automatic refund if provisioning fails. Behind the new opt-in orders:write scope (not in default keys — it spends money). Honour Idempotency-Key.
  • newReseller tier — accounts with a reseller discount see and pay discounted prices on GET /v1/products and API orders; renewals inherit the discounted price. GET /v1/account now reports reseller.enabled + discount_pct. Contact support to apply for reseller terms.
  • newThree more webhook events: vps.created, hosting.created, and invoice.paid — everything a billing/provisioning integration needs to sync state. The catalogue is now 9 events.
v1.12026-06-11
  • newWrite endpoints. vps:write — power start/stop/reboot, rename, set/clear reverse DNS (PTR). vps:destroy (opt-in, not in defaults) — reinstall, terminate. hosting:write — PHP version, SSL re-issue. domains:write — auto-renew / lock / WHOIS / nameservers. tickets:write — open, reply, close.
  • newWebhooks — subscribe a URL to account events and receive signed (HMAC-SHA256, X-444host-Signature) POSTs. Eight endpoints under /v1/webhooks behind webhooks:read / webhooks:write. Failed deliveries retry with exponential backoff (1m→6h). Events: vps.power.changed, vps.reinstalled, vps.ptr.changed, vps.terminated, ticket.created, ticket.replied. Manage them in the dashboard too (Account → Webhooks).
  • improvedIdempotency-Key header on reinstall and ticket-create dedups retried requests for 24h.
v1.02026-06-11
  • newPublic API launch — read-only endpoints for account, VPS (incl. live stats and reverse-DNS/PTR listings), hosting, domains, billing (invoices & wallet) and support tickets. Authenticate with an h444_… API key minted from the dashboard (Account → API Keys). 120 req/min per key.