LuraFlow
PlatformPricingBlogDocs
Log inStart Free →
LuraFlow

AI-powered business operations platform for hosting and digital service businesses.

Product

  • Platform
  • Pricing
  • Early Access
  • Roadmap
  • Platform comparison

Resources

  • Documentation
  • API Reference
  • Changelog
  • Status Page
  • Community

Company

  • About Us
  • Blog
  • Contact
  • Migration

Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • DPA
  • Security

© 2026 LuraFlow Inc. All rights reserved.

Encryption in transit & at restPrivacy-first designhello@luraflow.com
Guides home
Getting started
  • Platform accounts and tenant workspaces
  • Choose a workspace at sign-in
  • Initial reseller setup sequence
  • Staff roles and access
  • View your LuraFlow plan and grant
  • Account security and MFA
  • Platform plan billing versus customer billing
Hosting and domains
  • Connect a WHM / cPanel server
  • Understand Test connection versus Save
  • Discover and map hosting packages
  • Hosting products and pricing
  • Hosting service lifecycle
  • Dedicated, VPS, and manual delivery
  • Connect Dynadot
  • TLD catalogue and sell prices
  • Domain search and registration
  • Transfers, renewals, lock, and auth codes
  • Nameservers and DNS
  • Domain search widgets
  • Domain order settings
  • Hosting and domain failure recovery
  • Subscriptions and cancellations
Brand and operations
  • Staff roles and access
  • Name, logo, and colours
  • Multiple brands and limits
  • Custom portal domain, DNS, and TLS
  • Support contact versus account email
  • Customer portal settings
  • Email sender and provider
  • Email templates, variables, and preview
  • Customer records
  • Support tickets
  • Notifications and automation
Billing and finance
  • View your LuraFlow plan and grant
  • Hosting products and pricing
  • Platform plan billing versus customer billing
  • Invoices and payments
  • Tax, coupons, and credits
  • Subscriptions and cancellations
  • Reports and export
  • Bookkeeping features that are not available
Marketing and growth
  • Social Hub workflow today
  • Planned Social Hub capabilities
API and integrations
  • Notifications and automation
  • API keys, webhooks, and safe examples
API overview
  1. Guides
  2. /hosting-domains
  3. /Connect a WHM / cPanel server

verified · reviewed 2026-09-12

Connect a WHM / cPanel server

A CPANEL_WHM provider exists after a successful Test connection, then Save.

Audience
tenant-admin
Roles / plan
reseller_admin. Reseller grant.
Menu
Manage → Host control → Web hosting → Web servers

Prerequisites

  • WHM access on your hosting server (reseller or root WHM, not a cPanel end-user session)
  • Firewall/Host Access Control that allows LuraFlow egress to port 2087

LuraFlow talks to WHM JSON API 1 (`/json-api/<function>?api.version=1`) with header `Authorization: whm USERNAME:TOKEN`. That is a WHM API token, not a token issued inside an ordinary cPanel account. Official token documentation: https://api.docs.cpanel.net/whm/tokens

Do not disable TLS

The adapter uses HTTPS on port 2087 by default. Do not turn off certificate verification or switch to unencrypted 2086 to “make it work”.

Create the token in WHM for the same username you will type in LuraFlow (often a reseller WHM user). Grant only the privileges required by LuraFlow’s calls:

  • version — read-only connectivity
  • listpkgs — package discovery
  • createacct — new shared accounts
  • suspendacct / unsuspendacct
  • removeacct — terminate
  • changepackage
  • passwd
  • limitbw
  • create_user_session — one-click cPanel SSO

Do not mint an unrestricted root token if a reseller WHM user with those ACLs is enough for your isolation model.

  1. Open Manage → Host control → Web hosting → Web servers.
  2. Set Environment to Staging (test server) or Production (live server). Staging servers are ignored by the live launch gate.
  3. WHM Host: hostname only, for example server.example.com — no https:// and no path.
  4. Port: 2087.
  5. Username: the WHM user that owns the token.
  6. API Token: paste the WHM token.
  7. Click Test connection before Save. Save stays disabled until the test succeeds.

Named package mapping

If this workspace maps named shared packages, Test connection lists WHM package names. Missing names are a warning; you can still save, but auto-provision will fail until those packages exist on the server.

Open this setting on luraflow.com — uses the safe login redirect. Never opens another tenant hostname.

Related guides

  • Understand Test connection versus Save
  • Discover and map hosting packages
  • Hosting and domain failure recovery

Canonical: https://luraflow.com/docs/hosting-domains/connect-whm

On this page

  • Outcome
  • Steps
  • Related