Application API
Internal endpoints, authentication and request formats.
Pre-launch workspace. Live traffic protection is not active.
Scope#
These are internal browser endpoints on panel.packetshield.xyz, not a public API-key product. Authenticated endpoints require the existing browser session. Creating, editing or deleting records also requires the expected same-origin context.
Do not copy authentication cookies into shared scripts. Account data responses use private or no-store caching.
Endpoints#
| Endpoint | Method | Purpose |
|---|---|---|
| /api/account | GET | Current user and provider availability |
| /api/panel | GET | Own saved drafts |
| /api/panel | POST | Create a validated draft |
| /api/panel?id=ID | DELETE | Delete an owned draft |
| /api/protection | GET | Mitigation connection status |
| /api/admin | GET | Approved-admin records and search |
| /api/admin | PATCH | Audited configuration update |
| /api/admin/customers/ID | GET | Approved-admin read-only customer inspection |
| /api/checkout | POST / GET | Legacy Stripe flow; unused by Free |
Free draft payload#
Ownership is derived from the signed-in account, not a supplied user ID. The server rejects unsupported regions and supplied plan IDs. Success returns the saved service with status 201.
{
"name": "Example network",
"target": "play.example.com",
"category": "game",
"integration": "Protected endpoint",
"edition": "both",
"javaPort": 25565,
"bedrockPort": 19132,
"region": "europe",
"planId": "game-free"
}Response codes#
| Code | Meaning |
|---|---|
| 200 / 201 | Successful operation / saved draft |
| 400 | Invalid fields, region or plan |
| 401 / 403 | Sign-in required / access or origin check failed |
| 404 | Record missing or not owned |
| 409 | Draft limit reached |
| 413 / 415 | Request too large / JSON required |
| 503 | Database or integration unavailable |