NotPanel exposes the same v2 action-string convention every SMM reseller SDK already speaks — placed orders, status polling, refills, cancels, balance, and HMAC-signed webhooks. The dashboard is itself a client of this API; anything a logged-in user can do, you can automate.
Single shared secret in the request body. Per-key rate limits, scoped permissions, instant revocation from the dashboard.
Per-IP, per-key, and per-tier (deposit-tier-based). Standard headers — X-RateLimit-Limit, -Remaining, -Reset.
Outbound webhooks signed with a per-endpoint secret + replay-window timestamp. Inbound payment webhooks verified before any balance credit.
Order placement requires a caller-supplied request_id. Replays return the same response — never a duplicate order, never a double-charge.
Workers claim rows before calling upstream providers. Cancels never race fulfilment. No phantom double-deliveries.
Action-string convention preserved for legacy SDKs (key + action body params). Per-endpoint pages document each action on individual URLs for discoverability.
Generate a key, place your first order in under 60 seconds.
Browse the full live catalog with rates, min/max, and feature flags.
Submit an order with idempotency, drip-feed scheduling, and coupon support.
Push notifications on order completion, refunds, low balance.
https://notpanel.com/api/v2Every request is a POST to this URL with an application/x-www-form-urlencoded body. The body must include key and action; additional parameters depend on the action. Responses are JSON.