Skip to main content
HESK 3.7 Compatible

The REST API for
HESK Help Desk

Drop one zip into your HESK install. Full ticket management via a secure, rate-limited API with a built-in admin panel. No dependencies. No monthly fees.

"status": "success",
"tickets": [
  {
    "trackid": "ABC-123456",
    "subject": "Login issue on mobile",
    "status":  0,
    "priority": 2,
    "email":   "[email protected]",
    "dt":      "2024-06-01 09:14:22"
  }
]

Real JSON output from a live HESK install

Built for HESK 3.7.10· PHP 8.1+· Drop-in install· No server dependencies· 1 year support included

Everything you need. Nothing you don't.

A purpose-built REST API that integrates seamlessly with your existing HESK installation.

🔒

API Key Authentication

Every request is authenticated via a rotating API key. Set via HTTP header or query param. Rotate it at any time from the built-in admin panel.

Rate Limiting

Atomic per-key rate limiting backed by your HESK database. Configurable request-per-minute thresholds with 429 responses and proper Retry-After headers.

🖥️

Built-in Admin Panel

Manage API keys, view request logs, set rate limits, and toggle the API on/off — all from a clean admin interface inside your HESK install.

📎

Attachment Support

Upload file attachments when creating or updating tickets via multipart form-data. Full HESK attachment validation and storage — identical to the web UI.

🔔

Native HESK Notifications

API-created tickets trigger HESK's native email notification system — staff get the same alerts they expect, even for tickets submitted via the API.

🛡️

Security Built-In

IP and email ban enforcement, CSRF protection on the admin panel, XSS-safe HTML output, and domain-locked RSA licensing — secure by default.

Manage it all from one screen

A clean admin panel installs right inside HESK. Enable or disable the API, copy or re-issue your key, tune per-IP rate limits, and choose exactly which events email your customers — no config files to edit.

  • Enable, disable & re-issue your API key in one click
  • Per-IP rate limiting with sensible defaults
  • Toggle customer email notifications per event
  • Built-in request log & live API tester
HeskAPI API Manager admin panel inside HESK — API status, endpoint, key, rate limiting, and per-event email notification settings

Also available: HESK → Discord & Slack Webhooks

Get real-time ticket alerts posted directly to your Discord channel or Slack workspace the moment a new HESK ticket is created. Drop-in cron script — no coding required. $19 each.

Simple, one-time pricing

No subscriptions. No monthly fees. Pay once, own it forever.

Webhooks

$19

per webhook · one-time

  • Discord or Slack (pick one)
  • Real-time new ticket alerts
  • Priority color coding
  • Category & priority filters
  • Drop-in cron script
  • 1 year support & updates
See Webhooks
Best Value — Save $9

Bundle

$99

one-time · API + Discord or Slack

  • Everything in API License
  • Discord or Slack webhook
  • Setup guide & links
  • 1 year support & updates
Buy Bundle

Only available at time of purchase

Support renewal after year 1: API $39/yr · Webhooks $7/yr each. Learn about renewals →

Common Questions

No. HeskAPI is a true drop-in — unzip it into your HESK root and it works alongside HESK without touching any of its original files.

After your PayPal payment, you'll receive your license key within 1 business day. We review each purchase manually — but don't be surprised to see it within minutes.

Nothing breaks. Your API keeps running exactly as before. You simply won't receive future updates or support until you renew. See full FAQ →

Get HeskAPI today

Activate within 1 business day — don't be surprised to see it much sooner.

View Pricing