API and integration
API key
Last updated by The PanelCompare editorial team
Why does api key matter to a buyer?
The key is a bearer secret with your wallet balance behind it. Anyone who obtains it can spend your funds, read your order history and see every link you have ordered against. Because the specification has no signing and no expiry, a leaked key stays valid until you rotate it — and many panels make rotation hard to find.
The design makes leaks easy. Keys travel in request bodies, get pasted into third-party dashboards and reseller tools, and end up in server logs and shared scripts. That is also why nulled panel software is such an effective theft vector: it sits exactly where the keys are.
How does api key show up in a price list?
You find it on the panel’s account or API page, usually as a single long string with a regenerate button beside it.
Treat regeneration as routine hygiene: rotate after connecting any new tool, after any shared-hosting change, and immediately if a reseller tool you used has gone offline or changed hands.
Think this definition is wrong?
Terminology in this market is set by the panels that use it, and it moves. If a panel uses api key to mean something other than what is written here, send us the listing and we will either correct the definition or record the variant. The process is on the about page.