The CCCAMBOX TV Reseller API uses API keys to authenticate every protected
request.
To create and manage keys, see API Keys.
Send your API key
Include your API key in the x-api-key HTTP header on every authenticated
request:
If you store the key in an environment variable, you can reference it directly
in your requests:
HTTPS is required
All API requests must be sent over HTTPS.
Plain HTTP requests are rejected.
Authentication failures
If your API key is missing, invalid, or no longer active, the API will usually
return a 401 Unauthorized response.
If authentication fails, check the following first:
- The
x-api-key header is present
- The key value is correct and complete
- The request is being sent over HTTPS
- You are using the key for the intended account or environment
Security guidance
- Keep API keys in server-side environments only
- Do not expose them in frontend code, public repositories, or screenshots
- Store them in environment variables, a password manager, or a secrets manager
- Rotate keys immediately if you think a key has been exposed
When a new API key is created, it is shown only once in the dashboard. Copy it
immediately and store it safely. Last modified on May 22, 2026
