LuraFlow
PlatformPricingBlogDocs
Log inStart Free →
LuraFlow

AI-powered business operations platform for hosting and digital service businesses.

Product

  • Platform
  • Pricing
  • Early Access
  • Roadmap
  • Platform comparison

Resources

  • Documentation
  • API Reference
  • Changelog
  • Status Page
  • Community

Company

  • About Us
  • Blog
  • Contact
  • Migration

Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • DPA
  • Security

© 2026 LuraFlow Inc. All rights reserved.

Encryption in transit & at restPrivacy-first designhello@luraflow.com
Guides home
Getting started
  • Platform accounts and tenant workspaces
  • Choose a workspace at sign-in
  • Initial reseller setup sequence
  • Staff roles and access
  • View your LuraFlow plan and grant
  • Account security and MFA
  • Platform plan billing versus customer billing
Hosting and domains
  • Connect a WHM / cPanel server
  • Understand Test connection versus Save
  • Discover and map hosting packages
  • Hosting products and pricing
  • Hosting service lifecycle
  • Dedicated, VPS, and manual delivery
  • Connect Dynadot
  • TLD catalogue and sell prices
  • Domain search and registration
  • Transfers, renewals, lock, and auth codes
  • Nameservers and DNS
  • Domain search widgets
  • Domain order settings
  • Hosting and domain failure recovery
  • Subscriptions and cancellations
Brand and operations
  • Staff roles and access
  • Name, logo, and colours
  • Multiple brands and limits
  • Custom portal domain, DNS, and TLS
  • Support contact versus account email
  • Customer portal settings
  • Email sender and provider
  • Email templates, variables, and preview
  • Customer records
  • Support tickets
  • Notifications and automation
Billing and finance
  • View your LuraFlow plan and grant
  • Hosting products and pricing
  • Platform plan billing versus customer billing
  • Invoices and payments
  • Tax, coupons, and credits
  • Subscriptions and cancellations
  • Reports and export
  • Bookkeeping features that are not available
Marketing and growth
  • Social Hub workflow today
  • Planned Social Hub capabilities
API and integrations
  • Notifications and automation
  • API keys, webhooks, and safe examples
API overview
  1. Guides
  2. /integrations
  3. /API keys, webhooks, and safe examples

limited · reviewed 2026-09-12

API keys, webhooks, and safe examples

You create an API token or webhook endpoint without inventing undocumented REST paths.

Audience
developer, tenant-admin
Roles / plan
reseller_admin for API tokens; partner onboarding for broader REST. Reseller grant.
Menu
Manage → Settings → API tokens / Webhooks, and /docs/api

The dashboard calls tenant-scoped HTTP APIs through api.luraflow.com. A public, versioned partner REST catalogue is still summarised at /docs/api. Early Access partners request access case by case.

  • API tokens: Settings → API tokens. Treat tokens as secrets; never put them in Guides examples.
  • Webhooks: Settings → Webhooks. Subscribe only to events the form lists.
  • Auth: Bearer access tokens from login/MFA. Do not send passwords on query strings.
  • Example (safe): Authorization: Bearer <access_token> on HTTPS to https://api.example.com/api/v1/... using only endpoints your token was granted.

No invented endpoints

If a path is not in /docs/api or in the token’s documented scopes, do not call it. Google OAuth redirect remains https://api.luraflow.com/api/v1/auth/google/callback.

Preserve /docs/api

The static API overview page stays at /docs/api and is not replaced by this article.

Open this setting on luraflow.com — uses the safe login redirect. Never opens another tenant hostname.

Related guides

  • Notifications and automation
  • Account security and MFA

Canonical: https://luraflow.com/docs/integrations/api-overview

On this page

  • Outcome
  • Steps
  • Related