API introduction

The Control Panel API does what the Control Panel does, over HTTPS, with the same checks and the same refusals. Requests and answers are JSON.

Base URL

Every path in this reference is relative to the base URL.

Text

https://manage.corefinity.com/api

Send a personal access token as a bearer token and ask for JSON. This request reads the user the token belongs to.

Terminal

curl https://manage.corefinity.com/api/user \
  -H "Authorization: Bearer $COREFINITY_TOKEN" \
  -H "Accept: application/json"

Part	Rule
Body	JSON, with `Content-Type: application/json`
`Accept`	`application/json` on every request
Ids in paths	Mostly whole numbers; see Identifiers
Browsers	Cross-origin requests are allowed from any origin, with a bearer token only; cookies are not read

Authentication

Scopes

Two-factor authentication

Errors and refusals

Pagination

Rate limits

Long-running work

Apply now or in a window

Identifiers

Idempotency and safe retries

Versioning

Create a site and deploy it

Go live with a domain

Clone production to staging

Take a snapshot and keep it

Export logs

Rotate an SSH key

Invite a team member

Download invoices