# 444host.com

> Hosting provider — VPS, native web hosting, domains and mail. Read your fleet, hosting accounts, domains, billing and support tickets programmatically via a scope-gated REST API.

444host.com customers run VPS servers (live stats, reverse DNS), native web hosting (no cPanel/Plesk — our own control panel), registered domains and mailboxes, pay from a prepaid wallet, and open support tickets — readable over a REST API authenticated with an API key.

## API

- Base URL: https://api.444host.com/v1
- Authentication: Bearer token — `Authorization: Bearer h444_…` (or the `X-API-Key` header). Mint keys in the dashboard under Account → API Keys.
- Format: JSON
- Current version: v1.4 (2026-06-11)

## Machine-Readable Resources

- OpenAPI 3.0.3 spec:       https://444host.com/openapi.json
- Plain-text Markdown docs: https://444host.com/docs.md
- Human docs page:          https://444host.com/developers

## Scopes

- account:read   — Read your account profile and wallet balance.
- vps:read       — List servers and read details, live stats, and IPs (reverse DNS).
- vps:write      — Power actions, rename, set/clear reverse DNS (PTR).
- vps:destroy    — Reinstall the OS or terminate (destructive; not in defaults).
- hosting:read   — List hosting accounts and read details and usage.
- hosting:write  — Change the PHP version, re-issue SSL, and suspend/unsuspend.
- hosting:destroy — Terminate a hosting account (destructive; not in defaults).
- domains:read   — List domains and read details.
- domains:write  — Update auto-renew, transfer lock, WHOIS privacy, nameservers.
- billing:read   — Read invoices and wallet transactions.
- tickets:read   — List tickets and read messages.
- tickets:write  — Open tickets, post replies, and close them.
- webhooks:read  — List webhook subscriptions and delivery history.
- webhooks:write — Create, edit, delete webhooks; rotate secrets; redeliver.
- orders:write   — Order new VPS and hosting — debits the wallet (opt-in; not in defaults).

## Endpoints

Account
- GET    /v1/account                              — Returns the authenticated account profile and wallet balance. (account:read)

Catalogue & ordering
- GET    /v1/products                             — Orderable VPS and hosting plans with retail price and YOUR effective price (reseller discount applied when your account has one). (account:read)
- GET    /v1/os-templates                         — Installable OS templates for VPS orders and reinstalls (Linux only). (vps:read)
- POST   /v1/vps                                  — Atomic: debits your wallet at your effective price, issues a paid receipt, and provisions. (orders:write)
- POST   /v1/hosting                              — Same atomic debit/refund contract. (orders:write)

VPS
- GET    /v1/vps                                  — Every VPS on the account, with live status and plan specs. (vps:read)
- GET    /v1/vps/:id                              — Server detail (no credentials, no internal provisioning data). (vps:read)
- GET    /v1/vps/:id/stats                        — Live CPU / memory / network / disk usage. (vps:read)
- GET    /v1/vps/:id/ips                          — Every IP on the server with its current PTR record. (vps:read)
- GET    /v1/vps/all-ips                          — Every IP across all your servers, grouped per server, with PTR records — the API form of the dashboard Reverse DNS page. (vps:read)
- POST   /v1/vps/:id/power/:action                — Power the server start, stop, or reboot. (vps:write)
- PATCH  /v1/vps/:id/label                        — Change the display label. (vps:write)
- PUT    /v1/vps/:id/ips/:ip/ptr                  — Point the IP's PTR record at a hostname (e.g. (vps:write)
- DELETE /v1/vps/:id/ips/:ip/ptr                  — Remove the PTR record for the IP. (vps:write)
- POST   /v1/vps/:id/reinstall                    — DESTRUCTIVE — wipe the disk and rebuild from an OS template. (vps:destroy)
- DELETE /v1/vps/:id                              — DESTRUCTIVE — permanently terminate the server. (vps:destroy)

Hosting
- GET    /v1/hosting                              — Web-hosting accounts with status, quota, usage and connection hosts. (hosting:read)
- GET    /v1/hosting/:id                          — Hosting account detail. (hosting:read)
- POST   /v1/hosting/:id/suspend                  — Suspend the account (site + databases stop serving). (hosting:write)
- POST   /v1/hosting/:id/unsuspend                — Lift a suspension and restore service. (hosting:write)
- DELETE /v1/hosting/:id                          — DESTRUCTIVE — permanently removes the site, databases, and mail; the username becomes reusable. (hosting:destroy)
- PUT    /v1/hosting/:id/php                      — Switch the account's PHP-FPM version. (hosting:write)
- POST   /v1/hosting/:id/ssl/retry                — Retry the Let's Encrypt certificate issue for the account's domain now. (hosting:write)

Domains
- GET    /v1/domains                              — Registered domains with status, nameservers and expiry. (domains:read)
- GET    /v1/domains/:id                          — Domain detail. (domains:read)
- PATCH  /v1/domains/:id                          — Update auto-renew, transfer lock, WHOIS privacy, or nameservers. (domains:write)

Billing
- GET    /v1/billing/invoices                     — Your invoices, newest first. (billing:read)
- GET    /v1/billing/invoices/:id                 — Single invoice with line items and payment transactions. (billing:read)
- GET    /v1/billing/wallet                       — Prepaid wallet balance (USD cents). (billing:read)
- GET    /v1/billing/wallet/transactions          — Recent wallet activity. (billing:read)

Support tickets
- GET    /v1/tickets                              — Your support tickets, newest first. (tickets:read)
- GET    /v1/tickets/:id                          — Ticket detail with the message thread. (tickets:read)
- POST   /v1/tickets                              — Open a support ticket. (tickets:write)
- POST   /v1/tickets/:id/reply                    — Post a customer reply. (tickets:write)
- POST   /v1/tickets/:id/close                    — Close the ticket. (tickets:write)

Webhooks
- GET    /v1/webhooks                             — Your webhook subscriptions (secrets masked). (webhooks:read)
- POST   /v1/webhooks                             — Subscribe an HTTPS URL to events. (webhooks:write)
- GET    /v1/webhooks/:id                         — Subscription detail (secret masked). (webhooks:read)
- PATCH  /v1/webhooks/:id                         — Change url, events, description, or pause/resume via `is_active`. (webhooks:write)
- DELETE /v1/webhooks/:id                         — Remove the subscription and stop deliveries. (webhooks:write)
- POST   /v1/webhooks/:id/rotate-secret           — Issue a new signing secret (returned ONCE). (webhooks:write)
- GET    /v1/webhooks/:id/deliveries              — Recent delivery attempts with status, duration, and errors. (webhooks:read)
- POST   /v1/webhooks/:id/deliveries/:deliveryId/redeliver — Clone a past delivery into a fresh attempt. (webhooks:write)

## Webhooks

Signed (HMAC-SHA256, header `X-444host-Signature: t=<ts>,v1=<hex>` over `"<ts>." + body`). Events:
- vps.created          — A server finished ordering/provisioning. Payload: vpsId, label, hostname, planSlug, status, ipv4.
- hosting.created      — A hosting account was provisioned. Payload: hostingId, username, domain, status.
- invoice.paid         — An invoice transitioned to paid (any gateway, incl. API orders and renewals). Payload: invoiceId, invoiceNumber, totalUsdCents, currency.
- vps.power.changed    — A power action ran. Payload: vpsId, action (start/stop/reboot).
- vps.reinstalled      — A reinstall ran. Payload: vpsId, os, osTemplate.
- vps.ptr.changed      — A reverse-DNS (PTR) record was set or cleared. Payload: vpsId, ip, ptr (null when cleared).
- vps.terminated       — A server was terminated. Payload: vpsId.
- ticket.created       — A support ticket was opened. Payload: ticketId, ticketNumber, subject, status, priority.
- ticket.replied       — Support staff replied to your ticket. Payload: ticketId, ticketNumber, subject, status.