API overview

Keys, authentication, rate limits and errors.

Social Boost Lab has two public APIs. Both use the same API keys and return JSON.

Reseller APIThe standard SMM panel API: list services, place and track orders, refills, cancellations and balance. SMS APISend SMS from your own app or website and check delivery and balance.

Get an API key

Go to Settings › API keys › Create key and give it a name (e.g. My website).
Copy the key straight away. It starts with sbl_live_ and isn't shown again, because we only store a secure hash of it.
Keep it secret. Use it only on your server, never in a browser or mobile app. Anyone with the key can spend your wallet.

Revoke a key at any time in the same place; it stops working immediately. Create a new one if a key may have leaked.

Authentication

API	Send the key as
Reseller API	A `key` form field (standard panel format), or an `Authorization: Bearer <key>` header
SMS API	An `Authorization: Bearer <key>` header

All requests must use HTTPS: https://socialboostlab.com

Rate limits

120 requests a minute per key on each API.
The Reseller API also allows up to 300 requests a minute per IP address.
Going over returns HTTP 429. Wait a minute and try again, and batch status checks (up to 100 orders per request).

Errors

Status	Meaning
`400`	Something in the request is missing or invalid; the message says what.
`401`	The API key is missing, wrong or revoked.
`404`	The order or message doesn't exist on your account.
`405`	Wrong HTTP method (e.g. GET where POST is needed).
`429`	Rate limit reached.

{"error": "Invalid API key"}

{"error": {"message": "Missing or invalid API key. Send 'Authorization: Bearer <your key>'.", "status": 401}}

Money

API usage is charged from your main wallet, in your wallet currency, at the same prices as the dashboard. Failed work is refunded automatically, just like in the dashboard.

The email marketing, websites and domains features aren't available through a public API yet. Tell us what you'd like to automate.

Was this page helpful?