Open API
Tenants create API keys in the control plane; servers call operations marked “API key” with Authorization: CdncaKey <key_id>.<secret>.
API keys can only call marked operations — no sign-in, password changes or key management.
Developer platform
Build plugins. Sell them in every cdnca control plane.
Open API, event webhooks and a plugin market: your extension appears in every control plane’s market, one click to buy.
Three ways to integrate
Event webhooks
Seven domain events: deployments, sites, certificate status, certificate expiry, nodes, usage thresholds and security incidents. At-least-once delivery with per-site filters, redelivery and time-based replay.
Events carry change categories only; read current values through the open API (today with an API key the tenant grants).
Plugins
Four shapes: out-of-process HTTPS services, declarative rule packs, theme packages and sandboxed pages.
Third-party code never runs in the control plane or the request path; rule packs are data interpreted by the core engine.
From sign-up to payout
What you can build
Categories match the plugin kinds the market accepts; those marked “Official only” are published by cdnca alone.
Open theme
Themes
Declarative theme packages: design tokens, brand and layout slots, error-page templates — no scripts.
Open rule_pack
Protection rule packs
WAF, CC and ACL rules, conflict-checked before publishing and interpreted by the core engine.
Open provider / payment
Payment providers
Add a payment channel. The plugin reports payment facts; the control plane confirms by querying the order before crediting.
Open provider / dns
DNS providers
Selectable in the control plane after passing the contract suite (record CRUD, lines, weights, TXT).
Open provider / sms
SMS
A new SMS channel for verification codes and alerts.
Open provider / mail
Email delivery
A new email delivery channel (mail push services and more), alongside the built-in SMTP; the control plane chooses which one is active.
Coming soon provider / notify
Notification channels
Coming soon: deliver notification-centre messages to new channels (IM, webhooks and more). The market accepts the declaration; the control plane will not call it until it is enabled.
Open provider / icp
ICP filing lookup
Plug in an ICP filing data source used when domains are added.
Open external_service
Data import adapters
Convert data from other CDN systems into the cdnca.migrate/v1 format, uploaded by an admin to the official import module.
Open external_service
External services
Out-of-process HTTPS services — automation, exports, CRM or ticketing bridges — receiving event webhooks and calling the open API with an API key the tenant grants.
Open ui_page
Plugins with pages
Sandboxed pages embedded in the plugin centre or a site’s “Extensions” tab.
Official only provider / cdn
Aggregated-edge adapters
Third-party CDN adapters are maintained by cdnca (Cloudflare, CloudFront, EdgeOne, ESA).
Official only module
Official modules
Built-in capability modules such as aggregated edge, automatic defense and payment channels.
Official only dataset
Datasets
Signed data such as IP intelligence and crawler lists.
Official only engine_module
Engine modules
Native nginx modules on the edge.
How you earn
Plugin market
Set your own price: free, one-off, monthly or yearly, with optional trial days. Buyers pay into escrow from their control plane; once the licence is active the amount becomes your pending balance and is paid out under the settlement rules.
Node market
Suppliers set their own price by day, traffic, 95th percentile or daily peak. Configure your payment channel; subscribers top up in one click, money lands in your merchant account and the callback credits their balance.