{"schema_version":"1.0","service":"Publicasta","type":"article","id":519,"slug":"hosting_api","title":"Hosting API","excerpt":"Find your API key, choose the correct domain and understand which password is used. Start with an account read request, check its result and prepare a useful support report.","language":"en","default_language":"en","canonical_url":"https://hosting-help.livegpstracks.com/hosting_api?lang=en","image":{"url":"https://hosting-help.livegpstracks.com/storage/projects/45/pages/519/2026/09/12d44eee-43d0-449b-9240-f9d960301c03.webp","alt":"API key and reference link in Settings; the displayed key is a non-working example"},"publisher":{"id":45,"slug":"hosting_livegpstracks","name":"LiveGPSTracks Hosting: Administrator Guide","url":"https://hosting-help.livegpstracks.com"},"author":{"name":"LiveGPSTracks"},"published_at":"2026-09-06T09:17:54+00:00","updated_at":"2026-09-06T09:17:54+00:00","content_markdown":"[Guide contents](./contents)\n\n The hosting API connects your online store, CRM or internal software to the platform. It can retrieve account details, create customers, work with devices and automate selected operations. You do not need the API for normal work in the hosting panel.\n\n This chapter is a starting point for an integrator, not a replacement for the full reference. Commands that change balances, access or devices require separate development and testing beyond a simple read request.\n\n ## Find your key and the reference\n\n Open **Settings → API key**. The documentation link is next to the key. The screenshot uses the non-working value `DEMO-KEY-NOT-VALID`.\n\n An [English PDF API reference](https://hosting.livegpstracks.com/hostingapi_en.pdf) is available. It describes the legacy interface and is useful for its command list, but some examples and explanations contain inaccuracies. If an actual response differs from an example, retain the response for your integrator and clarify the behavior with support.\n\n ![API key and reference link in Settings; the displayed key is a non-working example](https://hosting-help.livegpstracks.com/storage/projects/45/pages/519/2026/09/12d44eee-43d0-449b-9240-f9d960301c03.webp)\n\n *Use the owner's Settings, not a customer card. DEMO-KEY-NOT-VALID cannot authorize a request.*\n\n ## Endpoint and authorization\n\n Send requests to **your customer website's domain**, for example `/api/v1.1/account`. Do not substitute `hosting.livegpstracks.com`, the administration-panel address: the domain identifies the hosting website.\n\n The main parameters are:\n\n<table>\n<thead>\n<tr>\n<th>Parameter</th>\n<th>Meaning</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td><code>xusername</code></td>\n<td>Hosting owner's login</td>\n</tr>\n<tr>\n<td><code>xpassmd</code></td>\n<td>MD5 of the owner's main-account password</td>\n</tr>\n<tr>\n<td><code>xkey</code></td>\n<td>That owner's API key from Settings</td>\n</tr>\n<tr>\n<td><code>username</code></td>\n<td>Customer login targeted by the command</td>\n</tr>\n<tr>\n<td><code>action</code></td>\n<td>Action supported by the endpoint</td>\n</tr>\n</tbody>\n</table>\n\n **The two owner passwords can differ.** Changing a password in the hosting panel does not update the main-account password. The legacy `account` API verifies the main account. Do not use the customer's password here.\n\n MD5 does not make this value safe to publish: for this authorization scheme, it is itself a credential. Send the complete parameter set in POST over HTTPS with a valid certificate. Keep credentials out of URLs, public browser JavaScript, logs and analytics. If HTTPS is not yet configured for your domain, arrange it with support first.\n\n ## Start by reading an account\n\n Use `action=get` for an existing demonstration customer. This does not credit a balance, create a device or change a tariff.\n\n The following request structure is illustrative. Its domain and values are fictional, not working credentials:\n\n ```http\nPOST /api/v1.1/account HTTP/1.1\nHost: tracking.northline.example\nContent-Type: application/x-www-form-urlencoded\n\naction=get&username=riverfleet&xusername=northlineadmin&xpassmd=OWNER_PASSWORD_MD5&xkey=API_KEY\n```\n\n Encode the body as ordinary form data. The response is JSON. Check the `result` field as well as the HTTP status: successful execution uses code `1000`. A response can contain a separate result element and a separate data array; do not assume the entire response is one customer object.\n\n After success, compare the login, balance, currency and assignments with the panel before moving on to another method.\n\n ## What you can automate\n\n - Accounts: reading, creation, enabling and disabling, and changing supported account data or assignments.\n- Devices: listing, adding and other commands covered by the reference.\n- Retrieving positions through the available API methods.\n\n Not every command is read-only. A top-up or device activation can change financial data. After a timeout, inspect the result before retrying; an automatic retry may execute a change again. Start with a separate test customer, not a bulk operation against your customer base.\n\n ## When the response is unexpected\n\n - HTML or an nginx 404 instead of JSON: check the domain and exact route, then contact support. This is not proof of an incorrect password.\n- `1005` or `1006`: check the owner, website domain, complete credentials, main-account password and current API key.\n- `1001`: check the required fields for the selected command.\n- `1012` when reading an account: check the customer login and whether it belongs to your hosting operation.\n\n For support, retain the timestamp, endpoint without secret parameters, action, HTTP status and sanitized JSON. Update every integration after replacing the API key.\n\n [Back to contents](./contents)","available_translations":[{"language":"en","title":"Hosting API","html_url":"https://hosting-help.livegpstracks.com/hosting_api?lang=en","markdown_url":"https://hosting-help.livegpstracks.com/hosting_api.md?lang=en","json_url":"https://hosting-help.livegpstracks.com/hosting_api.json?lang=en","api_url":"https://hosting-help.livegpstracks.com/api/public/v1/channels/hosting_livegpstracks/articles/hosting_api?lang=en"},{"language":"ru","title":"API хостинга","html_url":"https://hosting-help.livegpstracks.com/hosting_api?lang=ru","markdown_url":"https://hosting-help.livegpstracks.com/hosting_api.md?lang=ru","json_url":"https://hosting-help.livegpstracks.com/hosting_api.json?lang=ru","api_url":"https://hosting-help.livegpstracks.com/api/public/v1/channels/hosting_livegpstracks/articles/hosting_api?lang=ru"}],"_links":{"self":"https://hosting-help.livegpstracks.com/hosting_api.json?lang=en","api":"https://hosting-help.livegpstracks.com/api/public/v1/channels/hosting_livegpstracks/articles/hosting_api?lang=en","html":"https://hosting-help.livegpstracks.com/hosting_api?lang=en","canonical":"https://hosting-help.livegpstracks.com/hosting_api?lang=en","markdown":"https://hosting-help.livegpstracks.com/hosting_api.md?lang=en","json":"https://hosting-help.livegpstracks.com/hosting_api.json?lang=en","channel":"https://hosting-help.livegpstracks.com/api/public/v1/channels/hosting_livegpstracks","channel_articles":"https://hosting-help.livegpstracks.com/api/public/v1/channels/hosting_livegpstracks/articles","search":"https://hosting-help.livegpstracks.com/api/public/v1/search","documentation":"https://publicasta.com/api-docs#reading-publicasta","openapi":"https://publicasta.com/api-docs/openapi.json","llms":"https://hosting-help.livegpstracks.com/llms.txt"}}