How to Create a Domain Name API Key (Step-by-Step Guide)

Managing domain operations manually is time-consuming and prone to errors. With Domain Name API, you can automate domain registration, transfers, and DNS management from a single Domain API integration point. This guide walks you through creating your API key and storing it securely, step by step.

Who is this guide for?

What Can You Do with Your API Key?

For the full endpoint list covering domain registration, transfer, renewal, DNS management and Whois queries, visit the API Library section in your reseller panel.

1. Accessing the Integration Details Page

1. Log in to the reseller panel
   Go to dm.domainnameapi.com and sign in with your reseller account.
2. Open the left menu
   Expand the "My Account" section in the left navigation bar.
3. Click "Reseller Settings"
   Select "Reseller Settings" under the "My Account" section.
4. Select the "Integration Details" tab
   The Reseller Settings page has three tabs. Click on "Integration Details".

i The API key and credentials displayed here provide full access to your reseller account. Keep them confidential.

✓ Click "Send Details via Email" to send your Reseller ID and API keys to your registered email address.

2. Integration Details Fields

The Integration Details tab contains three main fields:

! When developing a new Domain API integration, always start with the test environment key. Only switch to the live key once your tests pass.

3. "Send Details via Email" Feature

When you click "Send Details via Email", a notification is sent to your registered email address in the following format:

Information included in the email:

• Reseller ID – Used for authentication in Domain API requests.
• API Key (Live Environment) – Your key for real domain operations.
• Test Environment API Key – Your key for development (shown only if configured).

⚠ Store this email securely. Do not share it with third parties — it contains credentials that provide full access to your reseller account.

4. Best Practices for Storing Your API Key Securely

Your API key grants full privileged access to the Domain API. Follow these practices to keep it secure:

4.1 Do's

• Store the API key in your application's environment variables (.env); never hard-code it in source code.
• Add .gitignore to your repository to prevent the .env file from being committed.
• For server-side apps, use environment variables or an encrypted secrets manager (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault).
• Restrict Domain API calls to trusted IP addresses; create an IP whitelist where possible.
• Rotate your Domain API key on a regular basis.

4.2 Don'ts

! Warning: The following mistakes can lead to your account being compromised.

• Never share your key via email, messaging apps, or screenshots.
• Never commit files containing your Domain API key to public repositories. Bots can detect exposed keys within minutes.
• Never embed the Domain API key in client-side JavaScript or mobile app bundles.
• Do not share the same Domain API key across multiple applications or teams.

⚠ If you suspect your Domain API key has been compromised: Contact support immediately, request a key rotation and update all applications.

5. Example Usage (PHP)

PHP example showing how to securely read the Domain API key from environment variables:

// Wrong - hard-coding the key
$apiKey = 'abc123secret'; // NOT SECURE!

// Correct - reading from environment variables
$apiKey     = getenv('DOMAINNAMEAPI_KEY');
$resellerId = getenv('DOMAINNAMEAPI_RESELLER_ID');

// Example: domain availability check
$response = $client->checkDomain([
    'resellerId' => $resellerId,
    'apiKey'     => $apiKey,
    'domain'     => 'exampledomain.com'
]);

6. Frequently Asked Questions

7. Related Articles