Skip to content
AquadactylAquadactyl
API reference

Aquadactyl API

Build integrations with the Client and Application APIs, browser authentication, Blueprint, and Wings callbacks.

Use the Client API to control servers as a panel user, or the Application API to provision users, nodes, allocations, and servers as an administrator. Blueprint extensions can use the same Client API through the panel's shared HTTP client.

This reference is pinned to Aquadactyl commit 2bfd6ae2a30c. It covers 135 operations: every route in api-client.php, api-application.php, and api-remote.php, plus Blueprint's built-in client endpoint. Browser authentication and WebSocket protocols have separate guides. Installed extensions can register additional endpoints.

Start here

  1. Read authentication and conventions for keys, permissions, identifiers, pagination, validation, and errors.
  2. Follow the request examples to list servers, send power actions, edit files, use trash, create schedules, or provision a server.
  3. Build the Server Pulse Blueprint extension to use the API inside the panel with its current libraries.

Choose an API

APIBase pathAuthenticationTypical use
Client/api/clientUser's Client API key or panel sessionConsole, files, backups, schedules, subusers, account settings
Application/api/applicationAdministrator; Application API key with resource ACLsHosting automation and provisioning
Blueprint/api/client/extensions and /api/application/extensionsCorresponding panel API middlewareExtension-owned endpoints
Browser authentication/auth and /account/securityGuest or authenticated web session, with CSRFPasswords, passkeys, OAuth, account linking
Wings callbacks/api/remoteNode tokenWings reporting installation, transfer, backup and activity results

The Wings callback API is hosted by the panel. The HTTP and WebSocket servers hosted by Wings use separate URLs and credentials.

Client reference

Find an endpoint

Application reference

Source and maintenance

Each operation links to its pinned route, controller, and request class. Field tables resolve the request's model rules; expandable implementation excerpts retain conditional authorization, responses and service calls. The response object reference contains all 28 Client and Application response transformers, including relationship objects.

Download the JSON route and validation inventory. It records the source revision, method, path, validation expressions, success status, and documentation URL. This is a source inventory, not an OpenAPI schema.

Maintainers can regenerate these pages from a reviewed panel checkout:

node scripts/generate-api-docs.mjs /path/to/aquadactyl

The generator checks route counts and fails on missing handlers. Review the handwritten guides and the example extension when the source changes. This reference describes the pinned checkout; deployments may have different feature flags, custom extensions or a different release. Examples use illustrative IDs and response data. They do not send requests to a live panel.

Source excerpts retain the upstream MIT attribution in the included license.