Monitoring your cPanel accounts without root access

Not every hosting team has the datacenter root password — and you should not need it to know when a customer domain is broken.

Reseller API tokens

WHM issues reseller-scoped API tokens that can list accounts, read disk usage, and trigger read-only health checks. Reflex connects with that token, syncs the account tree, and runs daily email DNS validation without SSH or agent installs on client servers.

What you still get

Per-account SPF, DKIM, DMARC, and MX status
SSL certificate expiry visibility
Suspended account and quota warnings
IP blacklist polling for the server IP

What requires root

Automatic DNS repair via WHM zone editor needs a root connection — or a linked Cloudflare/Route53 Site when the customer uses external DNS.

Try it

Create a WHM API token on your reseller account
Connect in Reflex under Settings → cPanel / WHM
Open Email health for the connection

Hosting resellers persona page · Compare vs native WHM monitoring