HustleAPI · Public Beta
Every action in HostHustler,
as an API call.
300+ endpoints across hosting, domains, DNS, email, SSL, WordPress, databases, backups, security, and CDN. Public docs from day one. No waitlist. No enterprise gating.
# 1. Provision hosting for a new brand
$ curl -X POST https://api.hosthustler.com/v1/hosting \
-H "Authorization: Bearer $API_KEY" \
-d '{"domain": "mybrand.com", "plan": "operator"}'
# 2. Create a mailbox on that brand
$ curl -X POST https://api.hosthustler.com/v1/email/mailboxes \
-H "Authorization: Bearer $API_KEY" \
-d '{"domain": "mybrand.com", "address": "hello", "password": "..."}'
# 3. Add a DNS A record
$ curl -X POST https://api.hosthustler.com/v1/dns/mybrand.com/records \
-H "Authorization: Bearer $API_KEY" \
-d '{"type": "A", "name": "app", "value": "1.2.3.4", "ttl": 300}'
# Brand is live with hosting, email, and DNS — in three calls.Twelve resource groups. Every action covered.
Built on 20i's battle-tested reseller API surface, rebranded and standardised under HustleAPI. Every endpoint our dashboard uses is available to you and your agents.
Hosting Packages
Provision hosting · upgrade plans · resource limits · PHP config · redirects · caching
Domain Names
Register · transfer · renew · check availability · contact details · nameservers · privacy
DNS & Nameservers
Read and write A · AAAA · CNAME · MX · TXT · SRV · CAA records · zone management
Email & Mailboxes
Create mailboxes · forwarders · aliases · catch-alls · DKIM · SPF · DMARC · webmail SSO
SSL / TLS Certificates
Issue Let's Encrypt · install custom certs · auto-renew · force HTTPS · HSTS
WordPress
One-click install · staging · plugin management · WP-CLI access · WP-specific backups
Databases
Create databases · users · backups · phpMyAdmin SSO · remote MySQL · Redis
CDN
Enable · purge · cache rules · custom origins · edge logs
Security & Access
WAF rules · IP block lists · two-factor auth · audit logs · brute force protection
Timeline Backups
Snapshot · restore (single file or whole site) · backup retention · off-site copies
Applications
Install Magento · Joomla · Drupal · Ghost · 200+ apps with one API call
PHP Configuration
Set PHP version · memory limit · upload size · custom php.ini per site
Authentication
Bearer-token auth on every request. API keys are scoped — read-only, read-write, or admin — and rotated from your dashboard. Sub-account keys available on Agency.
Authorization: Bearer hh_live_••••••••••••
Rate limits
- Operator: 120 requests / minute · burst to 300
- Agency: 600 requests / minute · burst to 1,500
- Write operations: separately metered to protect upstream provisioning
- Idempotency: all POST/PUT/DELETE accept an
Idempotency-Keyheader
Build with the API your hosts wish they had.
Full reference documentation is rolling out endpoint-by-endpoint. Get on Operator today and your API key works immediately.
