Core ZTProxy authentication, account, product, order, usage and transaction endpoints.
API 基础地址
https://backend.ztproxy.net/api中国大陆和海外网络统一使用此地址。需要认证的接口必须携带有效的访问令牌。
English Core API Reference
All paths below are relative to https://backend.ztproxy.net/api and require a Bearer token unless marked public.
| Task | Method and path | Notes |
|---|---|---|
| Sign in | POST /auth/login | Public. Returns data.token. |
| Dashboard and balance | GET /open/app/dashboard/info/v2 | Current account summary. |
| Current balance | GET /open/app/user/balance/current | Current authenticated user only. |
| Standard products | POST /open/app/product/query-standard/v2 | Pass language: "en" for English names. |
| Product IP ranges | GET /open/app/product/ip-ranges/v2 | Read-only availability details. |
| Create a rotating order | POST /open/app/order/create/v2 | trafficAmount is GB. |
| Create a static order | POST /open/app/static/order/create-standard/v2 | Use identifiers returned by the product query. |
| List static orders | GET /open/app/static/order/list/v2 | Supports pagination and search. |
| Renew static resources | POST /open/app/static/order/renew | The server determines the role-aware historical renewal price. |
| Release a static order | POST /open/app/static/order/{order_no}/cancel | Confirm the target order before calling. |
| Usage and resources | GET /user/{user_id}/products-flow | Access is limited by account ownership and role. |
| Transactions | GET /open/app/user/transactions | Audit consumption records with date and order filters. |
Authentication
Authorization: Bearer <token>
Content-Type: application/jsonTokens and proxy credentials are secrets. Store them server-side, rotate them after suspected disclosure, and redact them from logs.
Pagination
List endpoints commonly accept page plus pageSize or page_size as documented for that endpoint. Do not fetch unbounded histories. Preserve the returned total and page metadata when synchronising data.
Order safety
Before a write request, resolve the product and location from a current product response, check the account balance, and generate a stable client request identifier. After submission, read the order until it reaches a final state. A transport success or queued: true alone does not confirm fulfilment.
Errors
The API may return a non-2xx HTTP response or a JSON body whose code is non-zero. Record the request ID, endpoint, HTTP status and public error code, but never log passwords, tokens or proxy credentials. Contact ZTProxy Support with redacted evidence if the documented corrective action does not resolve the issue.