Everything you can do in the Togglebox client portal, you can now do over HTTP. The Togglebox API is a REST API that covers the whole account: services, billing, cloud infrastructure, DNS, domains, object storage, SSL certificates, and support. The full interactive reference lives at manage.togglebox.com/userapi.
Earlier this summer we shipped API tokens and Terraform support for the cloud service itself. That API speaks to a single service and is the right tool for infrastructure-as-code. This one sits a level up. It is the same API that powers the client area, so if the portal can do it, so can your script.
What it covers
The API exposes 258 endpoints. The largest group is Cloud Hosting: create, clone, resize, and destroy VMs, manage disks, backups, volumes, ISOs, networking, security groups, and pull usage metrics. Services covers listing, upgrading, and renewing what you have. Object Storage manages RGW buckets, credentials, and lifecycle policies. The rest covers Billing (balances and invoices), DNS zones and records, domain registration and management, SSL certificates, support tickets, the cart, and the client area itself, including login and account details.
Tasks that used to mean logging in and clicking around are now one request each: pull this month’s invoices into your accounting system, list every VM across every service, open a support ticket from your alerting pipeline, rotate your object storage credentials on a schedule.
Authentication
Personal access tokens are the recommended way in. Generate one in the management portal under Account, then API Tokens; give it a name and an expiry date, and copy the tbpat_ value when it appears, because it is shown only once. Requests pass it as a standard bearer header:
curl 'https://manage.togglebox.com/api/details'
-H "Authorization: Bearer tbpat_your_saved_token"Revocation is immediate, so rotating is painless: create a new token, update your integration, revoke the old one. If you prefer, you can also log in with your client area credentials and get a short-lived JWT.
The docs write the curl for you
The API reference is interactive. Every endpoint shows its parameters, its response schema, and a ready-to-copy curl command. Browse a category, find the endpoint, copy the command. That is the whole learning curve.
And your AI agent can use it too
The same API powers our MCP server, released alongside it. If you would rather say “clone the web server and put it on the private network” to Claude, Cursor, or Codex than write the requests yourself, install @toggleboxcloud/togglebox-mcp from npm, hand it a personal access token, and the agent gets 70+ tools covering the same ground. The source is on GitHub under the MIT license, and there is a read-only mode for when the agent should look but not touch.
Script it, Terraform it, or delegate it to an agent. The portal is no longer the only door.
