# Secure API Setup Guide

<span data-path-to-node="5,0">To integrate with our API safely, authentication must be handled through a dedicated Sub-Admin account rather than your primary Admin account</span><span class="" data-path-to-node="5,1"><sup class="superscript"></sup></span><span data-path-to-node="5,2">. For maximum security, Multi-Factor Authentication (MFA) is mandatory on all Admin and Sub-Admin accounts unless they have an active IP restriction enabled.</span>

<span data-path-to-node="5,2"><span data-path-to-node="6,0">Since automated API scripts cannot easily process MFA prompts, you must secure your API Sub-Admin by restricting its login access to the specific IP addresses of your connecting servers</span><span class="" data-path-to-node="6,1"><sup class="superscript"></sup></span><span data-path-to-node="6,2">.</span></span>

<span data-path-to-node="5,2"><span data-path-to-node="6,2">Follow these steps to create your Sub-Admin, whitelist your server IPs, and lock down the account securely.</span></span>

### Step 1: Create a Dedicated Sub-Admin

<span data-path-to-node="9,0">A Sub-Admin is a specialized account that allows you to delegate administrative tasks while protecting your primary credentials</span><span class="" data-path-to-node="9,1"><sup class="superscript"></sup></span><span data-path-to-node="9,2">.</span>

1. <span data-path-to-node="10,0,0,0">Go to the Admin Panel and log in using your main Admin username and password</span><span class="" data-path-to-node="10,0,0,1"><sup class="superscript"></sup></span><span data-path-to-node="10,0,0,2">.</span>
2. <span class="" data-path-to-node="10,1,0,0">Click on **Sub-Admins** in the menu, then click the **New** button</span><span class="" data-path-to-node="10,1,0,1"><sup class="superscript"></sup></span><span data-path-to-node="10,1,0,2">.</span>
3. <span data-path-to-node="10,2,0,0">Fill in the details for the new account, including the username, password, email address for password recovery, and full name</span><span class="" data-path-to-node="10,2,0,1"><sup class="superscript"></sup></span><span data-path-to-node="10,2,0,2">.</span>
4. <span data-path-to-node="10,3,0,0">Select the appropriate permissions for each section</span><span class="" data-path-to-node="10,3,0,1"><sup class="superscript"></sup></span><span data-path-to-node="10,3,0,2">. Assign only the level of access required for your specific API integration</span><span class="" data-path-to-node="10,3,0,3"><sup class="superscript"></sup></span><span data-path-to-node="10,3,0,4">.</span>
5. <span class="" data-path-to-node="10,4,0,0">Click the **Add Sub-admin** button to save</span><span class="" data-path-to-node="10,4,0,1"><sup class="superscript"></sup></span><span data-path-to-node="10,4,0,2">.</span>

<span class="" data-path-to-node="11,0">**Note:** Once you have created your API Sub-Admin, please email our Support Team to enable unlimited email account creation for that specific Sub-Admin</span><span class="" data-path-to-node="11,1"><sup class="superscript"></sup></span><span data-path-to-node="11,2">. Without this step, the Sub-Admin will be limited by the resources of your current subscription</span><span class="" data-path-to-node="11,3"><sup class="superscript"></sup></span><span data-path-to-node="11,4">.</span>

### Step 2: Add Your Server IP to the Access List

<span data-path-to-node="13,0">Next, you need to tell the system which IP addresses are allowed to log in to this new account. Please ensure your server uses a static IP address, as this feature does not work with dynamic IPs that change over time</span><span class="" data-path-to-node="13,1"><sup class="superscript"></sup></span><span data-path-to-node="13,2">.</span>

1. <span data-path-to-node="14,0,0,0">Log out of your main account, then log in to the Admin Panel using your new Sub-Admin username and password</span><span class="" data-path-to-node="14,0,0,1"><sup class="superscript"></sup></span><span data-path-to-node="14,0,0,2">. After you log in with your Sub-Admin account, the system will prompt you to enable MFA. This is mandatory until you restrict the login to specified IPs.</span>
2. <span class="" data-path-to-node="14,1,0,0">In the menu, click on **Security** and then select **Admin IP Access Lists**</span><span class="" data-path-to-node="14,1,0,1"><sup class="superscript"></sup></span><span data-path-to-node="14,1,0,2">.</span>
3. <span class="" data-path-to-node="14,2,0,0">Click the **New** button</span><span class="" data-path-to-node="14,2,0,1"><sup class="superscript"></sup></span><span data-path-to-node="14,2,0,2">.</span>
4. <span data-path-to-node="14,3,0,0">Enter your server's IP address and a brief description</span><span class="" data-path-to-node="14,3,0,1"><sup class="superscript"></sup></span><span data-path-to-node="14,3,0,2">.</span>
5. <span class="" data-path-to-node="14,4,0,0">Click the **Add** button to save the IP to your list</span><span class="" data-path-to-node="14,4,0,1"><sup class="superscript"></sup></span><span data-path-to-node="14,4,0,2">.</span>
6. <span data-path-to-node="14,4,0,2">Note: Be sure to add your office or local IP address to the access list as well. This ensures you can still log in directly to the Admin Panel as the Sub-Admin if you need to manage settings manually.</span>

### Step 3: Restrict Login Access

Finally, you must enforce the IP restriction so the Sub-Admin can only be accessed from your approved list.

1. <span class="" data-path-to-node="17,0,0,0">While still logged in as the Sub-Admin, navigate back to **Security** and then **Admin IP Access Lists**</span><span class="" data-path-to-node="17,0,0,1"><sup class="superscript"></sup></span><span data-path-to-node="17,0,0,2">.</span>
2. <span class="" data-path-to-node="17,1,0,0">Click the button labeled **Restrict Admin access only to the IPs in list**</span><span class="" data-path-to-node="17,1,0,1"><sup class="superscript"></sup></span><span data-path-to-node="17,1,0,2">.</span>
3. <span class="" data-path-to-node="17,2,0,0">Read the warning prompt and click the **Restrict** button to confirm</span><span class="" data-path-to-node="17,2,0,1"><sup class="superscript"></sup></span><span data-path-to-node="17,2,0,2">.</span>

<span data-path-to-node="17,2,0,2"><span data-path-to-node="13,0">Once enabled, login access is restricted strictly to the IPs on your list</span><span class="" data-path-to-node="13,1"><sup class="superscript"></sup></span><span data-path-to-node="13,2">.</span></span>

### Step 4: Disable Multi-Factor Authentication (MFA)

Once login access is restricted to your approved IP list, you can disable MFA for the Sub-Admin account so your automated API scripts can connect without interruption.

1. <span class="" data-path-to-node="16,0,0,0">While logged in as the Sub-Admin, go to **Security** and select **Two-Factor Authentication** in the menu</span><span class="" data-path-to-node="16,0,0,1"><sup class="superscript"></sup></span><span data-path-to-node="16,0,0,2">.</span>
2. <span data-path-to-node="16,1,0,0">Click the option to disable Two-Factor Authentication</span><span class="" data-path-to-node="16,1,0,1"><sup class="superscript"></sup></span><span data-path-to-node="16,1,0,2">.</span>
3. Confirm your choice to save the change.

Note: The option to disable MFA is only available after you have restricted login access to your specified IPs. If login access remains unrestricted, MFA is mandatory and cannot be disabled.