Authentication
Send an API key as a bearer token. The key must carry the reseller.manage permission; a key without it is refused with 403, not 404.
Where your organisation id goes
This endpoint takes org_id as a query parameter. Leave it out and the call covers your whole tenancy subtree; send it to narrow the call to one organisation.
Your organisation id is on the API keys screen in your dashboard, beside the key itself. It is the same id in every call you make.
Try it
Replace anything in angle brackets with your own values, and the key placeholder with a key from your dashboard.
curl -X PUT https://api.zinndigital.com/v1/reseller/brand \
-H "Authorization: Bearer zdk_live_…" \
-H "Content-Type: application/json" \
-d '{ "name": <string> }'Signed in? The API console in your dashboard fills in your real organisation id and your own key, and runs the request against the live API so you can see the actual response. Open this endpoint in the API console
Details
Creates or updates your brand. Requires `reseller.manage` — reading your brand is a view permission; changing what every one of your clients sees is not. ⛔ **This endpoint is why white-label was unreachable until 2026-08-16.** The resolver, the entitlement gate, the org-tree walk, the e-mail path and the panel painting were all built and correct, and nothing anywhere could create the row they all read — `Brand` held zero rows across the estate. ⛔ `panel_hostname`, `sending_domain` and `sending_domain_verified` are **refused here, with a sentence saying why**, rather than ignored. All three are facts about the outside world this endpoint cannot establish: a hostname nobody serves is a link to nowhere, an unverified sending domain does not deliver, and a verified flag a customer can set is a wish rather than a verification. Refused with 422 when white-label is not on your plan — storing a brand the resolver would decline to serve is configuration that silently does nothing.
Parameters
| Name | Type | Required | What it is |
|---|---|---|---|
org_id (query) | Uuid | No | The organization this call acts on. Optional for a caller with exactly one direct membership; **required** for anyone with more than one — which is every reseller and every agen… |
Request body
| Name | Type | Required | What it is |
|---|---|---|---|
name | string | Yes | What your clients are told they are using. Never blank. |
primary_colour | string | No | — |
support_url | string | No | — |
status_url | string | No | — |
palette | object | No | Named colour tokens, hex values only. An unrecognised token is a **422 naming it**, not a silent drop — a field that is ignored is how somebody comes to believe the platform is… |
font_source | string<catalogue, google, > | No | — |
font_key | string | No | — |
font_google_family | string | No | Install it with `POST /v1/reseller/brand/font` first — this field selects a family we already hold, and setting it alone would name a stylesheet with nothing behind it. |
nav_position | string<side, top, > | No | — |
density | string<comfortable, compact, > | No | — |
corner_radius | string<soft, square, > | No | — |
colour_scheme | string<system, light, dark, > | No | — |
favicon_sha256 | string | No | — |
email_logo_sha256 | string | No | — |
dns_nameservers | string[] | No | Your own nameservers. **At least two, or none** — a registrar refuses a single one, and refusing it here with a sentence is better than at the registrar with a code. |
Response
| Name | Type | Required | What it is |
|---|---|---|---|
configured | boolean | Yes | Whether a brand row exists yet. False renders an empty form, not a 404. |
entitled | boolean | Yes | Whether white-label is on this org's plan at all. |
name | string | Yes | — |
logo_url | string | Yes | — |
primary_colour | string | Yes | — |
support_url | string | Yes | — |
status_url | string | Yes | — |
panel_hostname | string | Yes | Read-only here — provisioned on `/v1/reseller/brand/panel-hostname`, because a hostname you merely typed is a link to nowhere on every client's screen. |
panel_hostname_active | boolean | Yes | Whether the edge is actually **serving** it. ⛔ Measured, not the edge's status word: a custom hostname can be `active` with a valid certificate and still answer 522, so the engi… |
panel_hostname_status | string | Yes | The edge's own status word, for display. Never branch on it. |
panel_hostname_records | BrandDnsRecord[] | Yes | — |
sending_domain | string | Yes | Read-only here — provisioned on `/v1/reseller/brand/sending-domain`, because an unverified domain does not deliver. |
sending_domain_verified | boolean | Yes | Read-only. The mail provider's answer, not a setting. |
sending_domain_status | string | Yes | The provider's own status word, for display. Never branch on it. |
sending_domain_records | BrandDnsRecord[] | Yes | — |
palette | object | No | Named design-system colour tokens, `{token: "#rrggbb"}`, over the closed set in `palette_tokens`. ⛔ Hex only, and that is a security boundary rather than a formatting rule: a CS… |
font_source | string<catalogue, google, > | No | `catalogue` for one of `font_catalogue`, `google` for a family we self-host. |
font_key | string | No | The catalogue key when `font_source` is `catalogue`. |
font_google_family | string | No | A Google family NAME, never a URL. ⛔ We fetch the family once, server-side, and serve the woff2 files from our own origin — so your clients never make a request to Google and th… |
nav_position | string<side, top, > | No | — |
density | string<comfortable, compact, > | No | — |
corner_radius | string<soft, square, > | No | — |
colour_scheme | string<system, light, dark, > | No | The scheme a client's **first** visit lands on. ⛔ A default, never a lock — the panel's own theme toggle still works, because removing a visitor's dark mode is an accessibility… |
favicon_sha256 | string | No | A favicon distinct from the panel logo. Upload it with `POST /v1/branding/logo` and `purpose=favicon`. Empty falls back to the logo — a 32px render of a wordmark beats somebody… |
favicon_url | string | No | — |
email_logo_sha256 | string | No | The mark used in transactional mail (`purpose=email`). Separate because the constraints differ: mail clients render on a light background whatever the reader's theme, block SVG,… |
email_logo_url | string | No | — |
dns_nameservers | string[] | No | Your **own** authoritative nameservers, so a client typing them into a registrar never reads ours. Empty means ours. ⛔ At least two, or none — registrars refuse a single nameser… |
font_catalogue | object[] | No | The typefaces you may pick, served **with** the value so a new one appears in your picker on deploy rather than when somebody remembers to update the app too. |
layout_options | object | No | The allowed values for each layout choice, keyed by field name. |
palette_tokens | string[] | No | The colour tokens `palette` may name. |
accent_contrast | BrandAccentContrast | No | How readable your accent colour is, and the ink we will paint on it. ⚠️ **Reported, never enforced.** A legitimate corporate colour can be mid-grey, and refusing to save it woul… |
Errors this endpoint can return
401 · 403 · 404 · 422 · 429