Client API: Reverse Proxy

User-managed reverse-proxy routes (TLS, upstreams, WAF settings).

Base URL: https://api.coritan.com/api/v1. Paths below are complete.

To try these requests in the browser, open the interactive Client API reference.

GET /api/v1/proxy/routes

List proxy routes owned by the current user.

The list stays slim: what the Proxies list and the website's WAF tab show for a row, so neither reads a route or a certificate per row. That is the origin and whether it speaks TLS, the redirect, the extra origins, the switches, development mode as the edge reads it and the certificate GET /ssl/certificates/{domain}/status would name. Origin protocol, gRPC, and outbound PROXY are on create/update and the detail SELECT *.

Authentication: an access token, sent as Authorization: Bearer <token>.

POST /api/v1/proxy/routes

Create a proxy route for a domain you own. Ownership is verified via domain registration or DNS zone.

Authentication: an access token, sent as Authorization: Bearer <token>.

application/json (required)

POST /api/v1/proxy/routes/connect-domain

Connect a user's domain to their container server. Creates or updates a proxy route pointing the domain at the container's IP/port, and optionally provisions an SSL certificate.

Requirements:

• User must own the domain (via registration or DNS zone)
• User must own the server

Authentication: an access token, sent as Authorization: Bearer <token>.

application/json (required)

GET /api/v1/proxy/routes/{route_id}

Get details of a proxy route you own.

Authentication: an access token, sent as Authorization: Bearer <token>.

PATCH /api/v1/proxy/routes/{route_id}

Update a proxy route you own.

Authentication: an access token, sent as Authorization: Bearer <token>.

application/json (required)

DELETE /api/v1/proxy/routes/{route_id}

Delete a proxy route you own.

Authentication: an access token, sent as Authorization: Bearer <token>.

POST /api/v1/proxy/routes/{route_id}/error-page/preview

Render the page visitors would see, for a block that is not saved yet.

error_page: null shows the inherited page instead, so the console can put "with" and "without" side by side.

Authentication: an access token, sent as Authorization: Bearer <token>.

application/json (required)

GET /api/v1/proxy/routes/{route_id}/redirect-rules

List redirect rules for a route you own.

Authentication: an access token, sent as Authorization: Bearer <token>.

POST /api/v1/proxy/routes/{route_id}/redirect-rules

Create a redirect rule for a route you own.

Authentication: an access token, sent as Authorization: Bearer <token>.

application/json (required)

PATCH /api/v1/proxy/routes/{route_id}/redirect-rules/{rule_id}

Update a redirect rule for a route you own.

Authentication: an access token, sent as Authorization: Bearer <token>.

application/json (required)

DELETE /api/v1/proxy/routes/{route_id}/redirect-rules/{rule_id}

Delete a redirect rule for a route you own.

Authentication: an access token, sent as Authorization: Bearer <token>.

POST /api/v1/proxy/routes/{route_id}/ssl

Request SSL certificate issuance for a proxy route you own.

Authentication: an access token, sent as Authorization: Bearer <token>.