> ## Documentation Index
> Fetch the complete documentation index at: https://docs.seyaha.net/llms.txt
> Use this file to discover all available pages before exploring further.

# Developer Settings

> Manage your API token and configure your reseller integration.

Navigate to **Settings → Developer** for your API credentials and integration options.
Everything here is what you need to call the Seyaha Reseller API from your platform.

## Your API token

Your reseller API token authenticates all calls to the Reseller API.

```http theme={null}
x-api-token: rsl_live_abc123def456
```

### Viewing your token

1. Go to **Settings → Developer**
2. The token is masked by default — click the **eye icon** to reveal it
3. Click **Copy** to copy it to your clipboard

<Warning>
  Your API token has full access to your reseller account including creating bookings
  and viewing customer data. Never embed it in client-side JavaScript, mobile apps,
  or public repositories. Treat it like a password.
</Warning>

### Token format

| Environment | Prefix      | Use                                             |
| ----------- | ----------- | ----------------------------------------------- |
| Live        | `rsl_live_` | Real bookings, real payments                    |
| Test        | `rsl_test_` | Development and testing — bookings are not real |

Use your **test token** during development. Switch to the live token only when you
are ready to process real bookings.

### Rotating your token

Tokens do not expire, but rotate them if you suspect a compromise:

1. Click **Rotate token**
2. Read the warning — the old token is **immediately invalidated** on confirmation
3. Click **Confirm rotation**
4. Copy the new token before closing the modal

<Warning>
  Rotation is immediate and irreversible. Any service still using the old token
  will receive `401 Unauthorized`. Update all your servers before confirming.
</Warning>

## API base URL

```
https://api.seyaha.net/api/v1/resellers
```

Store this alongside your token in your environment configuration.

## Allowed origins (CORS)

If your integration calls the Reseller API from a browser (not recommended for
production — your token would be exposed), add your domain to the allowed origins list:

1. Click **Add origin**
2. Enter your full domain with protocol (e.g. `https://yourplatform.com`)
3. Click **Save**

For server-side integrations this section does not apply.

## Testing your connection

Use the **Test connection** button on the Developer Settings page to verify your token:

* Green checkmark — token is valid and the API is reachable
* Red error — shows the HTTP status and error message returned

Or run a manual test via cURL:

```bash theme={null}
curl "https://api.seyaha.net/api/v1/resellers/activities?limit=1" \
  -H "x-api-token: $RESELLER_TOKEN"
```

A `200 OK` with a `data` array confirms your token is active.

## Account information

The top of the Developer Settings page also shows:

| Field              | Description                                                       |
| ------------------ | ----------------------------------------------------------------- |
| **Reseller ID**    | Your unique account identifier — include this in support requests |
| **Account status** | `Active`, `Suspended`, or `Pending`                               |
| **Member since**   | Account creation date                                             |

## Next steps

* [API Quickstart](/pages/reseller/quickstart) — make your first API call
* [Activities API](/pages/reseller/activities) — browse and filter the catalog
* [Bookings API](/pages/reseller/bookings) — create bookings and confirm payments