Customer-scoped inventory, lifecycle, sharing, transfer, telemetry, and native service-manager automation.
Responses contain public service references and customer-visible properties only.
| Method | Path | Required scope | Description |
|---|---|---|---|
| GET | /customers/{customer_ref}/services | services:read | List every service type with safe runtime properties. |
| GET | /customers/{customer_ref}/services/{service_ref} | services:read | Read one service after customer and tenant ownership checks. |
| GET | /customers/{customer_ref}/services/{service_ref}/metrics | services:read | Read bounded stored CPU, memory, disk, network and traffic series. |
| GET | /customers/{customer_ref}/services/{service_ref}/access | services:read | List share capabilities, members, and pending invitations without internal user IDs. |
| POST | /customers/{customer_ref}/services/{service_ref}/access | services:write | Invite a member from the same reseller tenant with an explicit capability set. |
| PATCH | /customers/{customer_ref}/services/{service_ref}/access/members/{member_ref} | services:write | Change one member's permission and capabilities. |
| DELETE | /customers/{customer_ref}/services/{service_ref}/access/members/{member_ref} | services:write | Revoke an accepted member. |
| DELETE | /customers/{customer_ref}/services/{service_ref}/access/invitations/{invitation_ref} | services:write | Revoke a pending invitation. |
| PUT | /customers/{customer_ref}/services/{service_ref}/auto-renew | services:write | Set automatic renewal after tenant and lifecycle checks. |
| POST | /customers/{customer_ref}/services/{service_ref}/power | services:power | Start, stop, or reboot a supported KVM. Requires Idempotency-Key. |
| POST | /customers/{customer_ref}/services/{service_ref}/transfer | services:transfer | Transfer ownership and linked services to another eligible customer in this reseller tenant. |
| GET | /customers/{customer_ref}/services/{service_ref}/manager | services:read | Read the native customer manager payload for KVM, game, storage, S3, dedicated, IP and protection services. |
| GET/POST/PATCH/PUT/DELETE | /customers/{customer_ref}/services/{service_ref}/manager/{resource}[/{operation}] | resource-specific | Use the same validated manager resources as the Atlas customer panel without exposing a reusable customer session. |
The gateway resolves both customer and service inside the authenticated reseller tenant, then dispatches to the same service handler used by Atlas. The API key never receives a reusable customer session.
services:readdetails, resources, metrics, debug and BGP usage
services:consoleconsole session creation; connect to the returned provider URL directly
services:reinstallOS catalog, recipes, reinstall, ISO and rescue operations
services:networkfirewall, network allocations and PTR operations
services:filesgame-server file listing, reads, writes and file actions
services:backupsgame-server backup listing and mutations
services:credentialsSFTP, game-database and storage credential-returning actions
services:manageother native manager mutations such as commands, startup and settings
Storage Box and S3 mutations use /manager/action with the existing action payload. Dedicated, IP subnet and DDoS protection services expose customer-visible manager details as read-only because they have no customer-side provider controls.
curl 'https://phylex.net/api/proxy/reseller-api/v1/customers/PHX-RCU-0000002A/services' \
--header 'Authorization: Bearer phxrk_REPLACE_WITH_YOUR_KEY'curl 'https://phylex.net/api/proxy/reseller-api/v1/customers/PHX-RCU-0000002A/services/PHX-SVC-0000008F/manager/metrics/live?window_seconds=30' --header 'Authorization: Bearer phxrk_REPLACE_WITH_YOUR_KEY'