Understanding API Security

Overview

For security reasons, it is important that all method calls to the CloudBilling API are secure. This is achieved via a combination of transport-level security (HTTPS) and token-based authentication.

API Tokens

Along with your API request you provide a long-lived API token. These tokens are created through the Management Portal. API tokens are submitted for every request to the API in the SOAP header. The namespace to use for the header is http://api.cloudbilling.nl/2018/11/auth/token and the name to use for the element is ApiToken.

An example of embedding the ApiToken in the SOAP header:

<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/">
    <s:Header>
        <ApiToken xmlns="http://api.cloudbilling.nl/2018/11/auth/token">[token]</ApiToken>
    </s:Header>
    <s:Body>
        ...
    </s:Body>
</s:Envelope>