PHP library for the Epik API

[7363824]

Hey everyone,

I am working on a PHP library to interface with the Epik API. I am planning to release my work on Github. There are a lot of different methods available in Epik's API and I don't expect to have all of them implemented on initial release, so what features would you actually want and use so I can focus on those first?

Update: initial release is here, and yes it supports Composer just require "x7media\epik-api".

https://github.com/x7media/epik-api

 

[Paul]

Hey everyone,

I am working on a PHP library to interface with the Epik API. I am planning to release my work on Github. There are a lot of different methods available in Epik's API and I don't expect to have all of them implemented on initial release, so what features would you actually want and use so I can focus on those first?

Composer, please.

 

[branding]

I would want to be able to:

- pull all the domains and info I have listed for sale on their marketplace including pricing (BIN/offer/lease).

- listing/updating/removing domains from/to the marketplace.

I have yet to find time to play with their API so not sure if that's supported.

Anyway, keep us posted. Cool project.

 

[cipcip]

You have the possibility to list and update to their marketplace: https://docs.userapi.epik.com/v2/#/

Sample scripts that I created: https://github.com/01fbk/epikapi

Thanks,
Cristian

 

[7363824]

Just an update for everyone, It seems to be stable and in a releasable state, I am just putting together some markdown docs to show how to use it and will probably have it released tomorrow if not tonight.

The current version supports:

Checking availability of a domain
Enabling and disabling AutoRenew
Obtaining the AuthCode
Showing the details of a domain name
Listing the domain names in your account
Locking and unlocking a domain
Renewing a domain
Initiating a transfer
Getting the status of a transfer
Viewing marketplace status for a domain
Adding/Editing a marketplace listing
Removing a marketplace listing
Getting all prices
Getting prices for a specific TLD

 

[7363824]

Thanks for that, to the both of you! Will check that out. Ultimately I want to integrate all epik marketplace management into my backend. I don't have a big portfolio with them but I'm a sucker for automating things

Me as well. I was working on a script to automatically take my domains I win at GD auctions and transfer them to Epik after 60 days but could not find a preexisting php library for Epiks api and figured other might want it as well.

 

[Sufyan Alani]

They do have the ability to view and edit marketplace listings.

No way to add an external domain to your epik account so you'd have to do that manually unless @Rob Monster could get that added to the api.

For that request, I surely need to check with our dev team for feasibility.

You know, the other solution would be: TRANSFER ALL OF YOUR DOMAIN NAMES TO EPIK! .. :D

 

[Sufyan Alani]

Actually, correction, I completely forgot Epik also does allow obtaining auth codes via API, it's a push to another Epik account that has to be done manually. But there are others that don't provide auth codes via api, like Dynadot for example.

I just took a quick look at it, and yes, I see "GET auth code" is there.

I'll check the possibility of adding that account-to-account push (probably based on using auth-code as well), and get back to you!

 

[branding]

They do have the ability to view and edit marketplace listings.

No way to add an external domain to your epik account so you'd have to do that manually unless @Rob Monster could get that added to the api.

You have the possibility to list and update to their marketplace: https://docs.userapi.epik.com/v2/#/

Sample scripts that I created: https://github.com/01fbk/epikapi

Thanks,
Cristian

Thanks for that, to the both of you! Will check that out. Ultimately I want to integrate all epik marketplace management into my backend. I don't have a big portfolio with them but I'm a sucker for automating things

 

[cipcip]

@NameDeck let me know via pm if you need help or something is unclear about their api, will help out

 

[Sufyan Alani]

Hey everyone,

I am working on a PHP library to interface with the Epik API. I am planning to release my work on Github. There are a lot of different methods available in Epik's API and I don't expect to have all of them implemented on initial release, so what features would you actually want and use so I can focus on those first?

Thats a cool project Ryan!
Let me know if you need any information about our API connectivity.
Good luck!

 

[7363824]

For that request, I surely need to check with our dev team for feasibility.

You know, the other solution would be: TRANSFER ALL OF YOUR DOMAIN NAMES TO EPIK! .. :D

I do but not everyone would want to. And it would be helpful to me to be able to use Epik dns on domains still under lock elsewhere and at least get a make offer lander up to collect leads.

Composer, please.

Of course.

 

[Sufyan Alani]

I do but not everyone would want to. And it would be helpful to me to be able to use Epik dns on domains still under lock elsewhere and at least get a make offer lander up to collect leads.



Of course.

Agree, regarding offering external domains. Let me see if this is doable. No promises, but I'll check for you (fingers crossed).

 

[7363824]

I just took a quick look at it, and yes, I see "GET auth code" is there.

I'll check the possibility of adding that account-to-account push (probably based on using auth-code as well), and get back to you!

I don't mean to overburden you with requests about the API but I did notice when testing adding marketplace listings via the API that you cannot configure payment plan options (or at least its not documented that its possible). Something else to consider to maybe eventually add.

Also, could you explain the difference between the user api signature versus the marketplace api signature. When if the marketplace api signature used?

 

[Samer]

Cool stuff, Ryan.

I followed thread, keep us posted.

Samer

 

[7363824]

I would want to be able to:

- pull all the domains and info I have listed for sale on their marketplace including pricing (BIN/offer/lease).

- listing/updating/removing domains from/to the marketplace.

I have yet to find time to play with their API so not sure if that's supported.

Anyway, keep us posted. Cool project.

They do have the ability to view and edit marketplace listings.

No way to add an external domain to your epik account so you'd have to do that manually unless @Rob Monster could get that added to the api.

 

[Sufyan Alani]

Could be some security vulnerability here, honestly. We need to deeply think about it.
Imagine loosing this access to a hacker, and no further restrictions are done on this activity. It's not secured.
However, I like the idea of giving domainers robust access to the market, inventory & their account/domains.

 

[7363824]

Godaddy seems to be one of the only registrars I know of that actually allow you to unlock a domain and request an auth code via their API. Even Epik only allows unlock but you still have to manually request auth codes.

Actually, correction, I completely forgot Epik also does allow obtaining auth codes via API, its a push to another Epik account that has to be done manually. But there are others that don't provide auth codes via api, like Dynadot for example.

 

[Save Breach]

I guess you can hack your way into even if official API is not there
Although this can be considered a security flaw as it does not require any type of signature or auth. As long as you know the domain id, you can push. Haven't tested the solution, but this should be it.

@Rob Monster

Nope, its not a security issue. Simply because there's proper access control between domains which you don't own, so, you need the auth cookie (or, effectively compromise their account, in which scenario) for carrying out the transfer. Tested it out

 

[Save Breach]

Off-Topic: I did find something different while playing around, not sure if its a security issue, but apparently, its possible to extract any (Epik) domain ID, if you know the domain name... (haven't fully tested it, but will try to make a PoC) if @Rob Monster considers that a security issue, I can report it to them

 

[cipcip]

Just an update for everyone, It seems to be stable and in a releasable state, I am just putting together some markdown docs to show how to use it and will probably have it released tomorrow if not tonight.

The current version supports:

Checking availability of a domain
Enabling and disabling AutoRenew
Obtaining the AuthCode
Showing the details of a domain name
Listing the domain names in your account
Locking and unlocking a domain
Renewing a domain
Initiating a transfer
Getting the status of a transfer
Viewing marketplace status for a domain
Adding/Editing a marketplace listing
Removing a marketplace listing
Getting all prices
Getting prices for a specific TLD

Seems like you had a lot of time today to work on this :D

Thank you,
Cristian

 

[7363824]

https://github.com/x7media/epik-api

 

[7363824]

Just update this library it now also includes:

Restarting a stalled transfer (shoutout to Epik's great support for helping to get that working)
Redeeming a domain in the Redemption Grace Period
Purchasing a domain from the Epik Marketplace
Registering a new domain
Getting and Setting NameServers
Management of DNS Host Records for those using Epik's DNS

While I try to test each new method before release because there is no test environment for the Epik API I can only test against my real account, so I have not tested making a purchase from the marketplace or redeeming a domain. So if you get a chance to use either of those I'd suggest manually checking that it was completed until others can confirm they are working as expected.

It should only take 1 or 2 more releases to get the rest of the functionality from the API included.

 

[branding]

Me as well. I was working on a script to automatically take my domains I win at GD auctions and transfer them to Epik after 60 days but could not find a preexisting php library for Epiks api and figured other might want it as well.

@Rob Monster

Cool idea ryan and something rob should be able to help with I guess. nice!

 

[branding]

Could be some security vulnerability here, honestly. We need to deeply think about it.
Imagine loosing this access to a hacker, and no further restrictions are done on this activity. It's not secured.
However, I like the idea of giving domainers robust access to the market, inventory & their account/domains.

Yeah, security would be the biggest concern for me as well. That alone might make it not feasable. maybe somethink like a 2FA would work, Epik triggers the transfers, a mail goes out requesting approval. Thinking of it... GD randomly requires further approval on transfer outs so it might not even work anyway