Developers

OmbreVPN REST API v2

Everything the dashboard does, you can automate. Bearer-token auth, JSON in, JSON out, versioned forever.

Authentication

Create a key in Dashboard → Developers. Keys are scoped and rotate without downtime.

curl https://api.ombrevpn.com/v2/servers \
  -H "Authorization: Bearer ombre_sk_live_..." \
  -H "Content-Type: application/json"

Returns a ready-to-use WireGuard config with a 24-hour key lifetime.

POST /v2/tunnels
{
  "region": "eu-frankfurt-1",
  "protocol": "wireguard",
  "features": ["threat_protection", "multi_hop"]
}

GET/v2/serversList servers with live load, region, and capabilities.

POST/v2/tunnelsCreate a WireGuard tunnel and return its config.

DELETE/v2/tunnels/{id}Tear down a tunnel and revoke its keys.

GET/v2/devicesList devices attached to the authenticated account.

POST/v2/seatsInvite a team member and assign a policy group.

POST/v2/static-ipsProvision a static egress address in a region.

GET/v2/usageRetrieve aggregate usage for billing reconciliation.

POST/v2/webhooksRegister a signed webhook endpoint.

Rate limits

600 requests per minute per key, burst to 1,200. 429 responses include Retry-After.

Webhooks

HMAC-SHA256 signed payloads with automatic replay for 72 hours.

SDKs

TypeScript, Python, Go, and Rust clients published on every release.

Sandbox tunnels are free and unlimited.