Skip to content
Zeyo Host

Manage API Tokens

Create tokens that let your own scripts change DNS records, mailboxes or the website cache without your password.

Reference Checked against panel v2.3.2 Updated 11 Oct 2026 · 2 min read Open in your panel

An API token lets your own scripts and apps manage parts of your hosting account through the hosting server's API, without your password. Each token may only do what you tick when you create it, and you can delete it at any time. Use one for a script that updates a DNS record, creates mailboxes or clears the website cache.

Create a token

  1. In the panel, open Security → Manage API Tokens.
  2. Under Create a Token, enter a Name that says what uses it, such as Backup script.
  3. Under It may, tick what the token may do (see the table below). Tick only what the script needs.
  4. Click Create Token.
  5. Copy the Access key ID and the Secret access key into your script or password manager. Copy puts the secret on your clipboard.
  6. Click I have saved it.
The Manage API Tokens page with the Create a Token form, its permission checkboxes, the list of your tokens and the Using a token example.The Manage API Tokens page with the Create a Token form, its permission checkboxes, the list of your tokens and the Using a token example.

What a token may do

Option What it allows
Manage email accounts, forwarders and autoresponders Work with the mailboxes of your email domains
Read and change DNS records Work with the records of your DNS zones
Clear the website cache Empty the cache of your websites

Use a token

The Using a token box at the bottom of the page shows the address your scripts send requests to and a ready-made curl example with your username. Send the access key ID as access_key and the secret as secret_key, with the command and its arguments, for example:

curl -s ENDPOINT -d access_key=ACCESS_KEY_ID -d secret_key=SECRET -d returncode=no -d cmd=v-list-dns-records -d arg1=USERNAME -d arg2=example.com -d arg3=json

Replace ENDPOINT and USERNAME with the values the page shows. A request for something the token was not allowed to do is refused.

Delete a token

  1. Find the token under Your tokens. The May column shows what it can do and Created when it was made.
  2. Click Delete, then Delete token to confirm.

Common errors

Message Why What to do
The name field is required. The name is empty. Enter a name.
Use 2–66 letters, numbers, spaces, dots, dashes or underscores, starting and ending with a letter or number. The name is too short, too long or has other characters. Use a name such as Backup script.
Choose what the token may do. No option is ticked. Tick at least one option under It may.
That token does not exist. The token was already deleted, for example in another tab. Reload the page.

Related

Was this page helpful?

Sent without cookies; we do not store your IP address.

Still stuck? Contact the team; tell us the page and what you see.