Skip to Content

API Settings

The API Settings page manages your QuickBox Pro API connection and provides tools for local integrations. It is organized into four sections: API Status, Telemetry, Local API Keys, and the API Playground.

Admin only
Info

API Settings requires admin privileges (admin.system.api permission). Navigate to System > API Control from the sidebar.


Key features

API Status

View your connection status to QuickBox Central and manage API credentials

Telemetry Controls

Turn on the optional heartbeat to QuickBox, preview its data, and see what it sends

Local API Keys

Generate and manage API keys for local integrations and automation

API Playground

Test API endpoints interactively from within the dashboard


API status

The API Status banner shows the current connection status between your server and QuickBox Central. This connection validates your license and enables update checks.

From this section you can:

  • View credentials status — See whether your API key is active and validated
  • Edit credentials — Update your Central API key if it has changed or needs to be refreshed

A valid API connection is required for license validation, update checks, and accessing the QuickBox software catalog.


Telemetry

The Telemetry panel controls the heartbeat your server sends to QuickBox Central. Telemetry is off by default on new installs; it only runs after you turn it on. Servers installed before this default changed keep whatever setting they already had.

To turn it on or off, use the toggle in the Telemetry panel, or run:

bash
qb manage telemetry -o on
qb manage telemetry -o off
qb manage telemetry -o status

When telemetry is on, the server sends one heartbeat every 5 minutes by default. You can change the schedule from the panel, but a server is shown offline in your QuickBox account after 7 minutes without a heartbeat, so a longer interval makes it appear offline between check-ins. The data is tied to your license and server, so it is not anonymous. Each heartbeat contains:

  • Server identity — hostname, public and local IP address, operating system, and the QuickBox and dashboard versions
  • Licensing — your license key and server instance ID, which authenticate the request, plus the number of seats in use
  • Hardware and load — CPU model, core count, frequency and usage, load averages, uptime, and total, used, and free memory and disk
  • Network — interface name, current speeds, monthly received and sent totals, and your latest speed test result (download, upload, ping, jitter, test tool, and time)
  • User accounts — every account’s username, email address, active status, and last login, with that user’s pending application updates (application, installed version, and available version)
See exactly what is sent
Tip

Select Preview Payload in the Telemetry panel to view the data your server would send on the next heartbeat. Send Test sends one heartbeat immediately.

With telemetry off, your license, update checks, and every dashboard feature work normally. Your QuickBox account still lists the server, but it cannot show whether the server is online, because online status comes from the heartbeat. A server is marked offline after 7 minutes without one. For the full field list and how the account dashboard uses it, see Server Telemetry.


Local API keys

Generate API keys for local integrations and automation scripts. Local API keys allow external tools to interact with your QuickBox Pro dashboard API without using session-based authentication.

Managing keys

  • Create a key — Generate a new API key. Each key can have read, write, or both permissions
  • Revoke a key — Immediately invalidate a key so it can no longer be used for authentication
  • View active keys — See all generated keys with their creation date and permission scope
Key security
Warning

Treat API keys like passwords. Store them securely, do not share them in public channels, and revoke any key you suspect has been compromised.

Linked to QBxBot
Note

If you link your account to the QBxBot Command Channel, that link is bound to a Local API Key. Rotating or clearing the bound key disconnects the link automatically, and you will need to link again with the new key.


API playground

The API Playground lets you test API endpoints interactively from within the dashboard. Send requests to any available endpoint and view the response directly — useful for verifying integrations or exploring the API before writing automation scripts.

  • Select an endpoint and method
  • Provide request parameters or body content
  • Execute the request and inspect the response
  • Save frequently used requests for quick access

CLI equivalent

Dashboard ActionCLI Command
View API statusqb manage api -o status
Set API keyqb manage api -k <key> -o activate
Deactivate APIqb manage api -o deactivate
Send heartbeatqb manage api -o heartbeat
Check connectionqb manage api -o check
Dashboard advantage
Tip

The API Playground and local API key management are dashboard-exclusive features. The CLI provides basic API key activation and status checks, but the interactive playground is only available through the web interface.


Best practices

Do

  • Keep your Central API key current — an expired or invalid key prevents update checks and license validation
  • Generate separate local API keys for each integration so you can revoke them independently if needed
  • Use the API Playground to test requests before building automation scripts — it is the fastest way to verify endpoint behavior
  • Review your active API keys periodically and revoke any that are no longer in use

Don't

  • Don't share your Central API key or local API keys publicly — they grant access to your server's API
  • Don't generate a single API key for all integrations — if it is compromised, revoking it breaks everything
  • Don't expect your server to show as online in your QuickBox account while telemetry is off — online status comes from the heartbeat

FAQ


Join the Community

Media server operators sharing configs, getting support, and shaping the future of QuickBox Pro.

  • Dedicated Support
  • Feature Previews
  • Community Configs
  • Active Discussions
Join Discord Server
Last updated on