NotPanel exposes a documented v3 action API for direct reseller-panel compatibility, service discovery, retry-safe order placement, status and refund reconciliation, single or bulk cancellation, refills, balance reads, and HMAC-signed webhooks. API keys are intentionally narrower than a logged-in dashboard session.
One account-scoped secret per key. Every active key shares the account's effective API requests-per-minute limit and can be revoked from the dashboard.
One spend-earned rolling 60-second account limit shared by all keys, plus IP and action protections. Standard X-RateLimit headers describe the effective window.
Best-effort outbound webhooks with retries, signed using a per-endpoint secret and each attempt's timestamp. Receivers choose their own timestamp-based replay policy and reconcile important state with status.
Legacy adds work without an extra field and receive 60-second identical-payload duplicate protection. Advanced clients can optionally send request_id, or its idempotency_key alias, for exact caller-controlled retries; request_id wins when both are sent.
Retrying the same logical add returns its committed order without another debit. An order successfully cancelled during its grace window is not submitted later.
Established key + action reseller clients can switch the base URL directly for the familiar services, add, status, balance, refill, refill_status, and cancel contract. v3 capabilities are optional and additive.
Generate a key and follow a clear first-order walkthrough.
Read the cached compatibility catalog with account-priced rates, limits, and capability flags.
Submit an order with idempotency, drip-feed scheduling, and coupon support.
Receive signed best-effort notifications for the documented order and refill events.
https://notpanel.com/api/v3Every request is a POST to this URL with an application/x-www-form-urlencoded body. The body must include key and action; additional parameters depend on the action. Responses are JSON. The canonical URL is /api/v3; /api/v1 and /api/v2 are exact aliases of the current v3 contract and do not change behavior.