The reseller API lets approved resellers browse the catalog, place and renew orders and read their proxies from their own website, panel or bot. Apply from My account → Reseller API; after an admin approves you, you can create an API key there.

Basics

Base URL: https://proxysold.com/api/v1

Authenticate every request with your key: Authorization: Bearer YOUR_API_KEY (or the header X-API-Key). Keep the key secret and only call the API from your server - never from a browser or an app you distribute. You can restrict a key to your server IPs in your account.

• Responses are JSON. Success: {"success":true,"data":...}. Error: {"success":false,"error":{"code":"...","message":"..."}}.
• Send POST bodies as JSON (Content-Type: application/json) or as a normal form.
• Only GET and POST are used. All amounts are USD. Times are ISO 8601 (UTC).
• List endpoints accept page and per_page (max 100) and return meta.total.
• Every key has a per-minute rate limit (see your account). Headers X-RateLimit-Limit and X-RateLimit-Remaining are sent.
• Your reseller discount applies to API orders and API renewals. It can differ per product - the catalog already shows your price.
• If a daily spending limit is set on your account, API orders and renewals stop with daily_limit_exceeded once the last 24 hours of API spending reach it.

Endpoints

Quick start

1. Check your balance

curl https://proxysold.com/api/v1/balance \
  -H "Authorization: Bearer YOUR_API_KEY"

2. Browse the catalog

curl https://proxysold.com/api/v1/catalog -H "Authorization: Bearer YOUR_API_KEY"
curl "https://proxysold.com/api/v1/catalog/PRODUCT_SLUG?country=US" -H "Authorization: Bearer YOUR_API_KEY"

3. Place an order

Fields: product (slug), country (code), quantity, duration_days, protocol (http / https / socks5), isp and region when the country requires them, ips (whitelist products), and an optional reference.

Use a unique reference for every order. If your request times out and you send it again with the same reference, you get the same order back and are never charged twice (the response contains "duplicate": true).

curl -X POST https://proxysold.com/api/v1/orders \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"product":"PRODUCT_SLUG","country":"US","quantity":5,"duration_days":30,"protocol":"http","reference":"shop-order-1001"}'

Status 201 = delivered, the proxies are in data.proxies. Status 202 = accepted but not ready yet (status is pending, provisioning or waiting for an admin): poll GET /orders/{id} every 10-30 seconds. If the order cannot be fulfilled it is refunded to your wallet automatically.

{
  "success": true,
  "data": {
    "id": 1842, "reference": "shop-order-1001", "status": "active",
    "product": {"slug": "...", "name": "..."}, "country": "US", "quantity": 5, "duration_days": 30,
    "price_paid": 8.5, "discount": 1.5, "currency": "USD",
    "created_at": "2026-10-26T10:00:00+00:00", "expires_at": "2026-11-25T10:00:00+00:00",
    "proxies": [
      {"id": 9001, "ip": "203.0.113.5", "port": 8000, "username": "u1", "password": "p1", "protocol": "http",
       "country": "US", "status": "active", "line": "203.0.113.5:8000:u1:p1"}
    ]
  }
}

4. Renew

curl -X POST https://proxysold.com/api/v1/orders/1842/renew -H "Authorization: Bearer YOUR_API_KEY"

PHP example

$ch = curl_init('https://proxysold.com/api/v1/orders');
curl_setopt_array($ch, [
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_HTTPHEADER => ['Authorization: Bearer YOUR_API_KEY', 'Content-Type: application/json'],
  CURLOPT_POSTFIELDS => json_encode(['product' => 'PRODUCT_SLUG', 'country' => 'US', 'quantity' => 5,
                                     'duration_days' => 30, 'reference' => 'shop-order-1001']),
]);
$res = json_decode(curl_exec($ch), true);
if (!$res['success']) { echo $res['error']['code'] . ': ' . $res['error']['message']; }

Webhooks

Set a webhook URL in My account → Reseller API and we will POST a JSON event to it when one of your API orders changes. No more polling.

Events: order.active (proxies delivered), order.failed (not fulfilled, refunded when it was paid from the wallet), order.renewed, order.expired and webhook.test. The data field has the same shape as GET /orders/{id}.

{
  "id": "evt_8841", "event": "order.active", "created_at": "2026-10-26T10:00:05+00:00",
  "data": { "id": 1842, "reference": "shop-order-1001", "status": "active", "proxies": [ ... ] }
}

Your server must answer with a 2xx status within 8 seconds. Otherwise we retry after 1 min, 5 min, 30 min, 2 h and 6 h, then give up. The same event can arrive more than once, so use id to ignore duplicates. The URL must be public https.

Verify the signature. Each request has the headers X-Webhook-Timestamp and X-Webhook-Signature (sha256= followed by HMAC-SHA256 of timestamp + "." + raw body with your signing secret). Reject requests with an old timestamp (for example older than 5 minutes).

$raw = file_get_contents('php://input');
$ts  = $_SERVER['HTTP_X_WEBHOOK_TIMESTAMP'] ?? '';
$sig = $_SERVER['HTTP_X_WEBHOOK_SIGNATURE'] ?? '';
$ok  = abs(time() - (int)$ts) < 300
    && hash_equals('sha256=' . hash_hmac('sha256', $ts . '.' . $raw, 'YOUR_SIGNING_SECRET'), $sig);
if (!$ok) { http_response_code(401); exit; }
$event = json_decode($raw, true);
http_response_code(200);

// Node.js (Express, use express.raw({type: 'application/json'}))
const crypto = require('crypto');
const expected = 'sha256=' + crypto.createHmac('sha256', SECRET).update(ts + '.' + req.body).digest('hex');
const ok = crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(sig));

Order statuses

pending / processing (being placed), provisioning (placed with the supplier, proxies not ready), active, expired, suspended, failed, refunded. When awaiting_admin is true the product needs a manual approval or manual delivery by our team.

Errors