Back
Panel Basics

Create client API credentials

Generate a personal client API key in the Victus control panel to automate your own servers, restrict it with an allowed-IP list, and keep it secret.

apiapi keyclient apicredentialsautomationtoken

The control panel exposes a client API so you can script actions against the servers on your own account — read state, send power signals, run console commands, manage files and more — without clicking through the UI. This is the per-user client key, and it is separate from the Reseller API used to provision brand-new services.

Client API vs Reseller API

The client API key created here controls servers you already own. The Reseller API (https://control.victuscloud.com/api/reseller/v1, keys prefixed rslr_) is a different system for programmatically creating and billing new services from a prepaid balance — see the Reseller API docs for that.

Create a key

  1. 1Sign in to control.victuscloud.com and open your account settings (profile / account menu).
  2. 2Find the API Credentials / API Keys section.
  3. 3Create a new key: give it a clear description (e.g. "restart-bot script") so you remember what it is for.
  4. 4Optionally set an allowed-IP list so the key only works from the machine/server that will use it.
  5. 5Copy the generated key immediately and store it in a secret manager — it is shown only once.

You only see the full key once

The panel displays the secret a single time at creation. If you lose it, you cannot recover it — delete the key and create a new one. Never commit keys to Git, paste them in Discord/tickets, or hard-code them in client-side apps.

Using the key

Send the key as a Bearer token in the Authorization header. The client API lives under the panel domain. For example, to list the servers you can access:

bash
curl "https://control.victuscloud.com/api/client" \
  -H "Authorization: Bearer YOUR_CLIENT_API_KEY" \
  -H "Accept: application/json" \
  -H "Content-Type: application/json"

# Send a power signal to a specific server (start | stop | restart | kill)
curl -X POST "https://control.victuscloud.com/api/client/servers/SERVER_ID/power" \
  -H "Authorization: Bearer YOUR_CLIENT_API_KEY" \
  -H "Accept: application/json" \
  -H "Content-Type: application/json" \
  -d '{"signal":"restart"}'

Find your server ID

A server’s ID is shown on its Settings tab in the panel and in the server URL. Use it in the /api/client/servers/<id>/... endpoints.

Housekeeping

  • Create one key per script/integration so you can revoke a single one without breaking the others.
  • Delete keys you no longer use — a leaked key can control your servers.
  • Lock keys to a fixed IP whenever the calling machine has a stable address.
  • Rotate a key immediately if you suspect it leaked, then update your scripts with the new value.

Related in Panel Basics

Logging in and SSO from the websiteHow single sign-on links your Victus billing account to the control panel, how to jump straight from the store to a running server, and what to do when a session gets stuck.Navigating the panel and server tabsA tour of the Victus control panel dashboard, the power controls, and what every tab on a game server does — Console, Files, Databases, Schedules, Users, Backups, Network, Startup and Settings.Enable two-factor authentication (2FA)Protect your Victus control-panel account with an authenticator-app TOTP code, save your recovery codes, and understand how 2FA relates to your billing login.Change server startup variablesUse the Startup tab to change a game server’s version, JAR/build, memory and other startup variables safely, and understand when a change triggers a reinstall.Server states explained (installing / offline / starting / suspended)Understand every status your Victus server can show — Installing, Offline, Starting, Running, Stopping and Suspended — what each means, and what to do about it.