Reseller & API

Authentication and base URL

The Reseller API base URL, how to send your rslr_ bearer token, required headers, and a quick authenticated request to confirm your key works.

authenticationbearerbase urlheaderstoken

All Reseller API requests go to a single versioned base URL and are authenticated with your rslr_ key sent as a Bearer token in the Authorization header.

Base URL

text

https://control.victuscloud.com/api/reseller/v1

Every path in this documentation is relative to that base. For example, GET /account means GET https://control.victuscloud.com/api/reseller/v1/account.

Required headers

Header	Value	Notes
Authorization	Bearer rslr_your_key_here	Required on every request.
Accept	application/json	Responses are always JSON.
Content-Type	application/json	Required on POST/PUT requests with a body.

Confirm your key works

bash

curl https://control.victuscloud.com/api/reseller/v1/account \
  -H "Authorization: Bearer rslr_your_key_here" \
  -H "Accept: application/json"

A successful call returns your account details and current credit balance inside a data object. Store the key in an environment variable rather than hard-coding it:

bash

export VICTUS_KEY="rslr_your_key_here"

curl https://control.victuscloud.com/api/reseller/v1/account \
  -H "Authorization: Bearer $VICTUS_KEY" \
  -H "Accept: application/json"

Getting 401 Unauthorized?

Check that the header is exactly Authorization: Bearer rslr_... (with the word Bearer and a space), that the key was copied in full, and that it has not been revoked on the Reseller API page.

Always use HTTPS

Only call the API over HTTPS. Never send your key over plain HTTP or embed it in a URL query string where it can be logged.

Related in Reseller & API

Reseller API overview (sell VPS, game, bot and app hosting under your brand)What the Victus Reseller API is, what you can sell with it, and how the prepaid credit model works so you can build your own storefront on top of Victus infrastructure.Get an API key and understand the prepaid credit modelMint a reseller API key (rslr_...) from the Reseller API page in the Victus panel, store it safely, and top up the prepaid credit balance the API spends.Response format, errors, rate limits and scopesThe standard success {data} and error {errors:[{code,status,detail}]} envelopes, common HTTP status codes, the 240 req/min rate limit, and how key scopes restrict access.List the catalog, plans and regionsRead the available product categories, plans and pricing with GET /catalog, drill into a specific plan code, and list deployment regions with GET /regions.Provision a service (VPS, game, bot and app examples)Create services with POST /services for every category — full curl examples for a VPS, a Minecraft game server, a Discord bot and an app, plus how to poll until it is ready.Manage a service (power, console, usage, lifecycle, backups)Control a provisioned service: power signals, console access, usage stats, suspend/unsuspend, reinstall, resize, reset-password, backups and termination.List services, get a single service, and check your balanceUse GET /services to list everything you have provisioned, GET /services/{id} for one service, GET /account for your credit balance, and GET /account/transactions for the ledger.Webhooks (events and X-Victus-Signature HMAC verification)Register a webhook endpoint with PUT /webhooks, receive service and billing events, and verify every delivery with the X-Victus-Signature HMAC header.