verified · reviewed 2026-09-12
Connect a WHM / cPanel server
A CPANEL_WHM provider exists after a successful Test connection, then Save.
- Audience
- tenant-admin
- Roles / plan
- reseller_admin. Reseller grant.
- Menu
- Manage → Host control → Web hosting → Web servers
Prerequisites
- WHM access on your hosting server (reseller or root WHM, not a cPanel end-user session)
- Firewall/Host Access Control that allows LuraFlow egress to port 2087
LuraFlow talks to WHM JSON API 1 (`/json-api/<function>?api.version=1`) with header `Authorization: whm USERNAME:TOKEN`. That is a WHM API token, not a token issued inside an ordinary cPanel account. Official token documentation: https://api.docs.cpanel.net/whm/tokens
Create the token in WHM for the same username you will type in LuraFlow (often a reseller WHM user). Grant only the privileges required by LuraFlow’s calls:
- version — read-only connectivity
- listpkgs — package discovery
- createacct — new shared accounts
- suspendacct / unsuspendacct
- removeacct — terminate
- changepackage
- passwd
- limitbw
- create_user_session — one-click cPanel SSO
Do not mint an unrestricted root token if a reseller WHM user with those ACLs is enough for your isolation model.
- Open Manage → Host control → Web hosting → Web servers.
- Set Environment to Staging (test server) or Production (live server). Staging servers are ignored by the live launch gate.
- WHM Host: hostname only, for example server.example.com — no https:// and no path.
- Port: 2087.
- Username: the WHM user that owns the token.
- API Token: paste the WHM token.
- Click Test connection before Save. Save stays disabled until the test succeeds.
Open this setting on luraflow.com — uses the safe login redirect. Never opens another tenant hostname.
Canonical: https://luraflow.com/docs/hosting-domains/connect-whm