CTY Auth
API Reference
Introduction
What the management API covers and how its responses are shaped.
The CTY Auth API lets your own server do what you would otherwise do by hand in the panel: issue and revoke licenses, freeze or extend them, ban a device, top up a reseller.
Everything lives under one base URL and answers in JSON. Start with Authentication to get a token, then pick the resource you need from the sidebar.
Conventions
JSON in, JSON out
Every request body is JSON and every response is JSON, including failures. Send
Content-Type: application/json on anything that carries a body.
Money is integer cents
Any field ending in
_cents is a whole number of cents in the workspace currency. There are no floats anywhere in this API.
Times are ISO 8601
Timestamps come back as
2026-09-19T09:00:00+00:00 in UTC. A null timestamp means the thing has not happened yet.
Lists are paged
Every list takes
per_page up to 200 and answers with a page object holding current, last, total and per_page. Pass page to walk it.