Start your 7-day free trial, card not charged until it ends
Browse all topics

WHM & cPanel

Apps & integrations · Last updated 16 July 2026

A hosting account that runs out of disk or bandwidth takes the site down just as surely as a server crash, but it usually gives you warning first. Connect your WHM server to TLDTrack and we watch the resource usage on every cPanel account for you, and shout while there is still time to act, not after the site has already stopped.

What it is

A read-only connection to a WHM (Web Host Manager) server. TLDTrack uses your WHM API token to read the cPanel accounts on the server, their disk and bandwidth usage against quota, and their account status, then raises alerts as an account approaches or crosses its limits.
Read more
All WHM communication is strictly read-only. Your API token is encrypted before it is stored, and it is used only to list accounts and read their usage. You can connect more than one server, import the hosting accounts as domains in your portfolio, and re-sync on demand.

Why it matters

Disk filling up or bandwidth running out will break a site or get an account throttled or suspended, and these creep up gradually. A warning at 75% used, and a projection that says "at this rate you will run out by month end", is the difference between a calm upgrade and an emergency.
Read more
Beyond alerts, connecting WHM lets you pull the accounts on the server into your portfolio in one go, and record the price of each hosting package. But the day-to-day payoff is the limit checks running quietly in the background.

What gets checked, and when it alerts

A scheduled job checks every connected account and raises an alert when any of these thresholds is crossed:

  • Disk usage. A warning at 75% full (whm_disk_warning), and a critical at 90% full (whm_disk_critical), where the site may stop working.
  • Bandwidth usage. A warning at 75% used (whm_bandwidth_warning) and a critical at 90% (whm_bandwidth_critical), noting that monthly bandwidth resets on the 1st.
  • Projected bandwidth (whm_bandwidth_projected). Based on usage so far this month, if the account is on track to reach 85% or more by month end it warns early, and if it is projected to exceed 100% it is treated as critical, so you see an overage coming before it arrives.
  • Account suspended (whm_account_suspended). A critical alert if a cPanel account has been suspended.

You will not be spammed with the same warning

Usage alerts re-fire only when the account crosses the next 5% boundary (10% for the projection), and repeat at most once in 24 hours while the condition holds. A suspension alert, once dismissed, is not raised again for that same account.

How the alerts reach you

WHM alerts use the same notification plumbing as the rest of TLDTrack. They are batched per organisation into a single message so ten accounts crossing a limit do not mean ten separate emails, and sent to your notification contacts who have WHM alerts switched on, by email and, if you have SMS credits and a contact opted in, by text. Every account's usage is also visible in the dashboard whenever you want to check it, alert or no alert.

Connecting a server

You will need a WHM API token from your server (created in WHM under API tokens). Then:

  1. 1
    In TLDTrack, open the WHM servers page and choose to add a server.
  2. 2
    Enter a label, the hostname, the port (usually 2087), the username (usually root), and paste the API token. Leave SSL on unless you have a reason not to.
  3. 3
    Use Test connection to confirm the credentials work before saving. TLDTrack reports back the WHM version on success.
  4. 4
    Save. You are taken to a preview of the accounts on the server, showing which already match domains in your portfolio and which are new.
  5. 5
    Select the accounts you want to import as domains. From then on they are watched, and the limit checks run automatically.
  6. 6
    Optionally, record the price of each hosting package.

Read-only, and your token is encrypted

The token is only ever used to read account and usage data. It is encrypted before it is stored and is never shown back to you or sent to the browser. Deleting a server connection removes its hosting records but never deletes the underlying domains.

Keeping it current

Once a server is connected, its accounts are re-synced automatically so usage figures stay fresh for the limit checks, and you can trigger a manual re-sync at any time from the server's page. If an account shows up that you do not want tracked, you can dismiss it, which tombstones it so a future sync never re-imports it.

Where to set this up

Good to know

  • The connection is strictly read-only. TLDTrack reads usage; it never changes anything on your server.
  • Disk and bandwidth both warn at 75% and go critical at 90%; bandwidth also projects the month-end position and warns early.
  • Alerts are batched per organisation and only re-fire as usage climbs past each new 5% step, so they stay useful rather than noisy.
  • You can connect several servers, import their accounts as monitored domains, and record package pricing.
Available on:StarterProAgency

Was this guide helpful?

If anything is unclear or missing, tell us and we will improve it.

Contact support