Getting Started

This guide helps you start using the empowsec Reseller API in a few minutes.

Prerequisites

An active reseller account with API access enabled.
An API key or OAuth2 client credentials.
The scopes required for the endpoints you want to call.

Step 1: Get Your API Credentials

Sign in to the reseller portal.
Open Settings > API Keys.
Create a key, assign the required scopes, and copy it immediately.
Store the key in a secret manager or environment variable.

Security Notice

Never share API keys or commit them to version control. Rotate keys regularly and remove unused credentials.

Step 2: Make Your First Request

Fetch the list of companies to confirm that authentication, networking, and permissions are working.

curl -X GET "https://api.empowsec.com/v1/reseller/companies" 
  -H "Authorization: Bearer YOUR_API_KEY" 
  -H "Accept: application/json"

<?php

$apiKey = 'YOUR_API_KEY';

$ch = curl_init('https://api.empowsec.com/v1/reseller/companies');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'Authorization: Bearer ' . $apiKey,
    'Accept: application/json',
]);

$response = curl_exec($ch);
$companies = json_decode($response, true);

print_r($companies);

const apiKey = 'YOUR_API_KEY';

const response = await fetch('https://api.empowsec.com/v1/reseller/companies', {
    headers: {
        Authorization: `Bearer ${apiKey}`,
        Accept: 'application/json',
    },
});

const companies = await response.json();
console.log(companies);

import requests

api_key = 'YOUR_API_KEY'

response = requests.get(
    'https://api.empowsec.com/v1/reseller/companies',
    headers={
        'Authorization': f'Bearer {api_key}',
        'Accept': 'application/json',
    },
)

companies = response.json()
print(companies)

Step 3: Understand the Response

List responses return a data array and pagination metadata.

{
  "data": [
    {
      "id": 1,
      "name": "Acme Corporation",
      "contact_email": "admin{'@'}example.com",
      "status": "active",
      "seat_limit": 100,
      "seat_limit_type": "hard",
      "seats_used": 45
    }
  ],
  "meta": {
    "current_page": 1,
    "last_page": 1,
    "per_page": 20,
    "total": 1
  }
}

Next Steps

Authentication

Review API keys, OAuth2, scopes, and token lifetimes.

Companies API

Create, update, suspend, and delete companies.

Seats API

Review reseller seat pools and company allocations.

Users API

Manage users inside customer companies.

Common Issues

Status	Likely Cause
401 Unauthorized	The key is missing, incorrect, expired, or not sent with the Bearer prefix.
403 Forbidden	The credential does not have the required scope or API access is disabled.
429 Too Many Requests	The client exceeded the rate limit and should retry with backoff.