Custom Brand Mapping
Completely brand developer portals, client invoices, SDKs, error messages, and payload headers with your company identity.
Resellable Enterprise API Gateway
Your Brand. Our APIs. White Label Gateway
Provide comprehensive developer APIs directly to your clients under your own brand identity. Build bespoke developer consoles, configure subscription pricing tires, distribute branded software development kits (SDKs), and monetize API gateways.
- OpenAPI
- Salted HMAC
- OAuth2 client creds
White Label Router
Active Gateway
POST /api/v1/reseller/keys/generate HTTP/1.1
Host: gateway.yourbrand.com
Authorization: Bearer RES_JWT_...
Content-Type: application/json
// Request Payload
{
"client_id": "cli_98471",
"tier": "enterprise_gold",
"rate_limit_rpm": 5000
}Reseller Console Built-inSalted HMAC API Authentication
Platform overview
Platform Overview & Business Architecture
The White Label API Gateway is an advanced multi-tenant developer middleware. It is designed to let agencies, SaaS developers, and IT enterprises package, brand, and resell raw APIs under their own name and domain. This solution removes the need to build authentication gateways, request logging, rate limits, SDK compilers, and subscription billing tools from scratch.
Using our white-labeled proxy architecture, calls to your custom API subdomain (e.g., `api.yourcompany.com`) are securely validated and forwarded to our core engine. The client is authenticated, usage limits are updated, and the response payload is returned with customized headers. Your customer interacts solely with your brand throughout the entire process.
This system includes a customizable Developer Portal. Resellers can offer their clients a fully-branded portal where developers can register accounts, generate API keys, review interactive Swagger documentation, and track usage metrics.
Capabilities
Enterprise Reseller Features
Automatic SDK Generator
Provide developers with ready-to-use SDKs in NodeJS, Python, Java, PHP, and Go, compiled under your company package namespace.
Usage-Based Billing Engine
Configure flexible subscription pricing tiers, credit-based topups, or flat-rate monthly plans with built-in invoice tracking.
Configurable Rate Throttling
Set fine-grained limits on requests per second, minute, or month, protecting backend resources from traffic spikes.
Technical reference
Reseller Management API Reference
The Reseller API allows you to automate client provisioning, manage API key rotations, adjust rate limits, and retrieve billing statistics.
GENERATE CLIENT API KEY
POST https://api.yourcompany.com/v1/keys/generate
Header "Authorization: Bearer YOUR_RESELLER_ACCESS_TOKEN"
Header "Content-Type: application/json"
{
"client_id": "customer_acme_89172",
"scopes": [
"sms.send",
"whatsapp.send",
"auth.verify"
],
"rate_limits": {
"requests_per_minute": 600,
"burst_limit": 50
},
"metadata": {
"department": "Engineering Operations",
"project": "Production Notifications"
}
}{
"key_id": "key_ust_9871abz",
"api_key": "acme_live_f827a192b8374d82910abec1287eab42",
"created_at": "2026-08-19T06:05:40Z",
"expires_at": null,
"status": "active"
}How it works
Proxy Gateway Header Normalization
To keep the underlying infrastructure hidden, our proxy server intercepts client calls and strips all reseller indicators:
Endpoint Mapping
Client requests hit `https://api.yourcompany.com/v1/messages`.
Header Extraction
The gateway reads your client's API key, resolves the reseller association, validates usage credits, and forwards the request to DEV SEC IT backend nodes.
Payload Normalization
The engine processes the call, generates the result payload, strips all backend server identifiers from response headers, and returns it with customized headers (e.g., `X-Powered-By: Your Company`).
Security & compliance
Security, Cryptographic Vaulting & Compliance
Protecting developer keys and usage logs is critical for enterprise security:
HMAC Key Hashing
Raw API keys are never stored in the database. The gateway stores salted SHA-256 HMAC hashes of client keys, protecting them from database security threats.
DDoS & Request Protection
Our edge network uses Cloudflare Enterprise routing, offering real-time DDoS protection, Web Application Firewall (WAF) rule sets, and rate throttling.
Encrypted Logs
API request and response bodies can be optionally encrypted with a tenant-provided public key, ensuring data privacy.
Security Auditing
The portal maintains comprehensive audit logs, recording key generations, revocations, and configuration changes.
Deployments
Enterprise Use Cases
Developer API Marketplace
Build your own API marketplace. Bundle various utility APIs (SMS, authentication, data lookup) and offer them to developers under your own brand.
Enterprise API Gateways
IT departments can use the system as an internal API gateway, providing standardized access control, rate limits, and audit logs across internal divisions.
SaaS Value-Add Integrations
SaaS platforms can offer branded API access to their customers, allowing users to build custom workflows and integrations with the platform’s data.
FAQ & Troubleshooting Guide
Frequently asked
Can we configure our own subdomain for our developer portal?
Yes. You can configure your portal to be accessible at any domain or subdomain (e.g., `developers.yourbrand.com`) by setting up a simple CNAME record in your DNS settings.
How do we generate custom SDKs for our clients?
Our system automatically generates and packages SDKs based on your Swagger/OpenAPI specifications, including your branding and namespaces.
What happens if a client exceeds their monthly rate limit?
You can configure the gateway to either block requests with an HTTP 429 status code or allow overflow traffic and charge usage-based fees.
Do you support OAuth2 for third-party integrations?
Yes. The gateway supports OAuth2 client credentials grant flows, allowing your clients to integrate securely with their backend applications.
Get started
Launch your branded Developer Portal
Package developer-centric APIs, configure client accounts, set subscription parameters, and generate SDKs under your own brand.