Developer Docs

API Documentation

Everything you need to integrate Authon into your application. Full REST API with examples in cURL, Python, C++, and more.

Base URL: https://api.authon.pro

Getting Started Authentication Client API Admin API Reseller API File Downloads Webhooks Error Codes

Getting Started

Set up your first application and make your first API call in under 2 minutes.

Create an Application

Go to your dashboard and create a new application. You'll receive an API key and secret.

Install the SDK

Choose your language SDK or use the REST API directly with any HTTP client.

Initialize & Authenticate

Use your API key to initialize the client and start authenticating users.

Quick Start (cURL)

curl -X POST https://api.authon.pro/v1/client/login \
  -H "Content-Type: application/json" \
  -H "X-Api-Key: your_api_key_here" \
  -d '{"username": "user1", "password": "pass123", "hwid": "ABC-DEF-123"}'

Authentication

All API requests require authentication via API key in the header.

HEADERX-Api-Key: your_api_key

Include your API key in every request header. For admin endpoints, use your seller token via Bearer authentication.

HEADERAuthorization: Bearer your_seller_token

Client API

Endpoints used by your application to authenticate users, validate licenses, and fetch data.

POST/v1/client/login

Authenticate a user with username, password, and optional HWID.

Request Body

{
  "username": "testuser",
  "password": "securepass",
  "hwid": "ABCD-1234-EFGH"
}

Response

{
  "success": true,
  "data": {
    "token": "eyJhbG...",
    "user": {
      "id": "usr_abc123",
      "username": "testuser",
      "hwid": "ABCD-1234-EFGH",
      "subscription": "premium",
      "expiresAt": "2026-12-31T23:59:59Z"
    }
  }
}

POST/v1/client/register

Request Body

{
  "username": "newuser",
  "password": "securepass",
  "licenseKey": "XXXX-XXXX-XXXX-XXXX",
  "hwid": "ABCD-1234-EFGH"
}

Response

{
  "success": true,
  "data": {
    "token": "eyJhbG...",
    "user": {
      "id": "usr_def456",
      "username": "newuser"
    }
  }
}

POST/v1/client/license

Request Body

{
  "licenseKey": "XXXX-XXXX-XXXX-XXXX",
  "hwid": "ABCD-1234-EFGH"
}

Response

{
  "success": true,
  "data": {
    "token": "eyJhbG...",
    "license": {
      "key": "XXXX-XXXX-XXXX-XXXX",
      "expiresAt": "2026-12-31T23:59:59Z",
      "hwid": "ABCD-1234-EFGH"
    }
  }
}

Admin API

Manage your applications, users, licenses, and settings. Requires seller authentication.

GET/v1/admin/apps

List all your applications with user and license counts.

Response

{
  "success": true,
  "data": [
    {
      "id": "app_123",
      "name": "My App",
      "apiKey": "ak_...",
      "version": "1.0.0",
      "status": "ACTIVE",
      "_count": { "appUsers": 150, "licenses": 200 }
    }
  ]
}

POST/v1/admin/apps

Create a new application

POST/v1/admin/licenses/generate

Generate license keys in bulk

GET/v1/admin/users

List all users for an application

DELETE/v1/admin/users/:id

Delete a user and their sessions

POST/v1/admin/blacklist

Add IP or HWID to blacklist

Reseller API

Endpoints for resellers to generate keys and manage their customers.

POST/v1/reseller/keys/generate

Generate keys using reseller credits

GET/v1/reseller/keys

List all keys generated by this reseller

GET/v1/reseller/stats

Get reseller sales statistics

File Downloads

Upload, manage, and serve encrypted files to authenticated users.

POST/v1/admin/files/upload

Upload an encrypted file (multipart/form-data)

GET/v1/client/files/:fileId

Download a file by File ID (requires valid session)

GET/v1/client/files/:fileId/bytes

Get raw bytes for memory execution

Webhooks

Receive real-time notifications when events occur in your application.

Available Events

•user.login

•user.register

•user.ban

•license.activate

•license.expire

•license.delete

•file.download

•session.create

Webhook Payload Example

{
  "event": "user.login",
  "timestamp": "2026-06-15T12:00:00Z",
  "data": {
    "userId": "usr_abc123",
    "username": "testuser",
    "ip": "192.168.1.1",
    "hwid": "ABCD-1234-EFGH",
    "country": "US"
  }
}

Error Codes

Standard error responses returned by the API.

Code	Message	Description
401	`INVALID_KEY`	API key is missing or invalid
401	`INVALID_CREDENTIALS`	Username or password is incorrect
403	`HWID_MISMATCH`	Hardware ID does not match registered device
403	`BLACKLISTED`	User IP or HWID is blacklisted
403	`LICENSE_EXPIRED`	License key has expired
429	`RATE_LIMITED`	Too many requests, try again later
404	`NOT_FOUND`	Requested resource does not exist

Ready to integrate?

Create your free account and start building in minutes. Full API access on all plans.

Start Securing →Join Discord