Reseller
Reseller API
Authenticate with an API key via the X-API-Key header

Generate your API key after login on the Welcome page. Use it for external server-to-server requests.

Header
X-API-Key: ak_<id>_<secret>
Endpoints
Base URL: same-origin or https://reseller.cap27.online
GET /api/reseller/[code]
Get product detail by code (public)
curl https://reseller.cap27.online/api/reseller/MLBB_DIAMOND_CODE
GET /api/reseller/profile
Get current profile (requires API key)
curl -H "X-API-Key: ak_XXXX_YYYY" https://reseller.cap27.online/api/reseller/profile
POST /api/reseller
Place an order (requires API key). Body:
{
  "code": "mlbb_86",
  "playerId": "123456789",
  "server": "1234",
  "variantCodeRegion": "sgshell",
  "providerType": "smileone",
  "url": "https://yourapp.com/webhook",
  "orderId": "ORD-0001"
}
Example
curl -X POST https://reseller.cap27.online/api/reseller   -H "Content-Type: application/json"   -H "X-API-Key: ak_XXXX_YYYY"   -d '{"code":"mlbb_86","playerId":"123456789","server":"1234","variantCodeRegion":"sgshell","providerType":"smileone","url":"https://yourapp.com/webhook","orderId":"ORD-0001"}'
Responses
Unified envelope
Success
{ "success": true, "data": { ... } }
Error
{ "success": false, "data": null, "error": { "code": "UNAUTHORIZED", "message": "Unauthorized" } }
Rate limits: up to 50 POST requests/minute. Use API key header for external calls.