Your Brand. Our APIs.
Seamless White Label Gateway

1. Platform Overview & Business Architecture

The White Label API Gateway is an advanced multi-tenant developer middleware. It is designed to let agencies, SaaS developers, and IT enterprises package, brand, and resell raw APIs under their own name and domain. This solution removes the need to build authentication gateways, request logging, rate limits, SDK compilers, and subscription billing tools from scratch.

Using our white-labeled proxy architecture, calls to your custom API subdomain (e.g., `api.yourcompany.com`) are securely validated and forwarded to our core engine. The client is authenticated, usage limits are updated, and the response payload is returned with customized headers. Your customer interacts solely with your brand throughout the entire process.

This system includes a customizable Developer Portal. Resellers can offer their clients a fully-branded portal where developers can register accounts, generate API keys, review interactive Swagger documentation, and track usage metrics.

2. Enterprise Reseller Features

3. Reseller Management API Reference

The Reseller API allows you to automate client provisioning, manage API key rotations, adjust rate limits, and retrieve billing statistics.

{
  "client_id": "customer_acme_89172",
  "scopes": [
    "sms.send",
    "whatsapp.send",
    "auth.verify"
  ],
  "rate_limits": {
    "requests_per_minute": 600,
    "burst_limit": 50
  },
  "metadata": {
    "department": "Engineering Operations",
    "project": "Production Notifications"
  }
}

{
  "key_id": "key_ust_9871abz",
  "api_key": "acme_live_f827a192b8374d82910abec1287eab42",
  "created_at": "2026-08-19T06:05:40Z",
  "expires_at": null,
  "status": "active"
}

4. Proxy Gateway & Header Normalization

To keep the underlying infrastructure hidden, our proxy server intercepts client calls and strips all reseller indicators:

How it works:

• Endpoint Mapping: Client requests hit `https://api.yourcompany.com/v1/messages`.
• Header Extraction: The gateway reads your client's API key, resolves the reseller association, validates usage credits, and forwards the request to DEV SEC IT backend nodes.
• Payload Normalization: The engine processes the call, generates the result payload, strips all backend server identifiers from response headers, and returns it with customized headers (e.g., `X-Powered-By: Your Company`).

5. Security, Cryptographic Vaulting & Compliance

Protecting developer keys and usage logs is critical for enterprise security:

• HMAC Key Hashing: Raw API keys are never stored in the database. The gateway stores salted SHA-256 HMAC hashes of client keys, protecting them from database security threats.
• DDoS & Request Protection: Our edge network uses Cloudflare Enterprise routing, offering real-time DDoS protection, Web Application Firewall (WAF) rule sets, and rate throttling.
• Encrypted Logs: API request and response bodies can be optionally encrypted with a tenant-provided public key, ensuring data privacy.
• Security Auditing: The portal maintains comprehensive audit logs, recording key generations, revocations, and configuration changes.

6. Enterprise Use Cases

7. FAQ & Troubleshooting Guide