Skip to main content
The Partner API does not use email/password login. You authenticate with an API key and a request signature. Generate keys on the Fleeticc website → Partner API (owner only), after Fleeticc enables access.

Headers on every request

string
required
Your public API key (pk_…)
string
required
Current Unix time in seconds
string
required
HMAC-SHA256 hex of the canonical string (see below)
Your server clock should stay accurate. Timestamps more than 5 minutes off are rejected.

How to build the signature

  1. Build this text (four lines, joined by newlines):
  1. Sign that text with HMAC-SHA256 using your secret
  2. Send the result as hex in X-Signature

Example (Node.js)

Request example (curl)

On macOS, use awk '{print $NF}' (not $2) so the OpenSSL hex hash is read correctly. Do not set a shell variable named PATH to the API path — that breaks system commands.

Tips

  • Always sign the exact path you request (including ?imeis=… if present)
  • Keep the secret on your backend only
  • Rotate or revoke keys from the Fleeticc website → Partner API (owner only). After rotate, update your server with the new secret immediately.