Welcome to CronJobFast

CronJobFast is a premium HTTP cron platform: REST API, signed webhooks, DHRU Auto Sync, reseller flow with sub-accounts, and one-time security unlocks. This page is the complete developer reference — auth, endpoints, integrations, comparisons.

How it works

1. Sign up for a free account at app.cronjobfast.com.
2. Issue an API key from Sidebar → Integrations → API Keys. The cleartext token is shown only once; we store SHA-256 hashes.
3. Create a cron job — manually from the panel, programmatically via POST /api/v1/jobs, or via the DHRU Other Script endpoint.
4. Listen for results — register a webhook endpoint to get HMAC-signed delivery on every interesting event.

Authentication

The REST API uses Bearer tokens. Each request must include:

Authorization: Bearer cjf_live_<32-char-secret>

• Format: cjf_live_ prefix + 32 alphanumeric characters.
• Storage: only the SHA-256 hash is persisted; the cleartext is shown once at issuance.
• Scopes: read, write, plus optional dhru_otherscript for the DHRU integration.
• Revocation: instant. The hash row is marked revoked_at and every subsequent request returns 401.

Rate limits

60 requests per minute per API key, sliding window backed by Redis. Every authenticated response carries:

X-RateLimit-Limit:     60
X-RateLimit-Remaining: 57
X-RateLimit-Reset:     32   # seconds until window resets

When the budget is exhausted you get HTTP 429 with the same headers; back off until Reset.

Envelopes & errors

Every response is wrapped:

{ "data": { ...handler-specific... } }

{ "error": { "code": "snake_case", "message": "Human", "details": { ... } } }

API · Account

GET /me

Current user, plan, balance, monthly add-on cost.

{ "data": {
  "user_id": 7, "email": "ops@example.com",
  "plan": "advanced", "balance": "12.50",
  "monthly_addon_cost": "1.99",
  "scopes": ["read","write"], "api_key_id": 4
}}

API · Balance & transactions

GET /balance

Lightweight; only the current balance.

GET /transactions?limit=50

Recent credit_transactions. limit clamped to [1..200].

POST /balance/topup (reseller-only)

Credit a sub-account from the reseller's balance. Atomic with paired ledger rows.

API · Plans

GET /plans

Catalogue: basic, starter, advanced, professional, dhru_premium.

POST /plans/change

Switches the user's plan with automatic Stripe-style prorate. Requires write scope.

{ "plan": "advanced" }

API · Add-ons

GET /addons/catalog

Returns every add-on key with price, eligibility flags and benefit. Source of truth for the panel UI.

POST /addons

Activate a monthly add-on. Body: { "addon_key": "extra_manual_jobs", "quantity": 1 }.

DELETE /addons/{id}

Cancel an active add-on. Status transitions to cancelled; the row is preserved for history.

API · Jobs

GET /jobs

List manual jobs. Supports limit, offset, status, type query params.

POST /jobs

Create a new manual job.

{
  "name":     "Daily backup ping",
  "url":      "https://example.com/cron/backup",
  "method":   "GET",
  "interval": 86400,
  "headers":  { "X-Auth": "secret" },
  "body":     null
}

PATCH /jobs/{id}

Partial update. Only the fields you send change.

POST /jobs/{id}/run-now

Force an out-of-band execution of a job. Returns the job_runs row id.

GET /jobs/{id}/runs?limit=50

Recent execution log for one job.

API · Webhooks

Full CRUD for outbound webhook endpoints — see the Webhooks section below for event types and HMAC verification details.

API · Reseller (gated)

Available only to accounts flagged is_reseller=1. The full reseller namespace under /api/v1/reseller/* covers sub-account CRUD, credit transfers, suspension/reactivation, public profile, and aggregate usage.

POST   /api/v1/reseller/accounts                — create sub-account
POST   /api/v1/reseller/accounts/{id}/topup     — atomic credit transfer
POST   /api/v1/reseller/accounts/{id}/suspend   — suspend
POST   /api/v1/reseller/accounts/{id}/reactivate
GET    /api/v1/reseller/usage                   — fleet aggregates

DHRU Integration · Other Script endpoint

CronJobFast speaks the DHRU Fusion API standards (v6.1) so resellers can plug it into their DHRU panel as an "Other Script" provider. The endpoint lives at:

https://app.cronjobfast.com/dhru-sync

DHRU appends /api/index.php automatically; no need to suffix the URL.

Setup

1. From the panel: Sidebar → Account → Reseller Panel → DHRU Connect. Generate an API key (auto-scoped to dhru_otherscript).
2. In your DHRU admin: API Settings → Add Other Script with:
   • Name → CronJobFast
   • API KEY → the cleartext key you just generated
   • Username → your numeric user id (shown next to the key)
   • API url → https://app.cronjobfast.com/dhru-sync
   • Currency → USD
3. Click Synchronize. DHRU will pull our service catalog and surface our products under your shop.

Actions catalog

Order flow

When a customer of yours buys from your DHRU storefront, DHRU calls our placeimeiorder. We:

1. Resolve (or create) the customer's sub-account by email.
2. Debit the agreed credits from your reseller balance and credit them to the sub.
3. If the order is a plan, run changePlanWithProrate() on the sub — full Stripe-style upgrade math.
4. Email the customer a "set your password" link if the sub-account is brand new.
5. Emit dhru.order.completed webhook to your registered endpoints.

Webhooks · Event types

Signature verification

Every delivery includes:

Cronjobfast-Signature: t=1700000000,v1=<hex>

Where v1 is hmac_sha256(secret, "{t}.{body}"). Verify on your side:

// Node
const crypto = require('crypto');
const [_, ts, sig] = req.headers['cronjobfast-signature'].match(/t=(\d+),v1=([a-f0-9]+)/);
const expected = crypto.createHmac('sha256', SECRET)
                       .update(ts + '.' + req.rawBody).digest('hex');
const valid = crypto.timingSafeEqual(Buffer.from(sig), Buffer.from(expected));

Retries & backoff

Up to 6 attempts at 1m → 5m → 30m → 2h → 6h → 12h. After 12 consecutive failures the endpoint is auto-disabled and we emit nothing else until you flip it back to active. During key rotation we double-sign with both old and new secrets for 24 hours, so you can rotate without downtime.

Why CronJobFast

A factual breakdown of where CronJobFast leads compared to popular alternatives. All numbers reflect publicly published specs at the time of writing — verify with each provider before final selection.

Headline differentiators

• 2-second minimum interval from the Pro tier and up — most general-purpose providers cap at 60 seconds.
• HMAC-signed webhooks on 19 event types with 24-hour double-signing during secret rotation, exponential retry to 12 hours, and auto-disable after 12 consecutive failures.
• Idempotency-Key receipts on write endpoints — database effects and their response share one commit, with response replay for 24 hours.
• Native DHRU vertical: Auto Sync of 260+ endpoint catalog, DHRU "Other Script" provider, and a reseller flow with sub-account management built into the API.
• Reseller credit purchases are the current purchase channel. Agree on payment and plan extensions with an authorised reseller. Direct payment collection and automatic plan renewal are deferred until Acequia Pay is integrated.
• Endpoint Protection — cron endpoint protection as a one-time unlock (1.99 credits, account-wide). Currently unavailable while the worker egress set is being re-verified.
• Reseller program with overdraft, atomic credit transfers, DHRU Other Script API, and a public directory at /resellers.

Pricing parity

CronJobFast lists in credits (1 credit ≈ $1 USD nominal). Credits do not expire; paid plans keep their stated expiry date and require an explicit extension. Resellers confirm their payment conditions. Equivalents in monthly USD for like-for-like tiers:

Snapshot as of May 2026. Sub-second-precision execution and DHRU integration are unique to CronJobFast at any of these tiers.

Feature matrix

When to pick a different provider

To stay factual: each alternative has its own strengths and we want you to choose based on what your project needs, not a sales pitch.

• FastCron — solid choice if you already run on AWS regions covered by their nodes and don't need DHRU or sub-second precision.
• cron-job.org — generous free tier if you're happy with minute-precision and don't need a reseller layer.
• EasyCron — long-running history retention on the enterprise tier if you just need a UI to schedule URLs.

If your stack involves DHRU panels, GSM tools, sub-second timing, reseller management or reseller credit purchases, none of the alternatives match what CronJobFast ships today.

In-depth · vs cron-job.org

cron-job.org publishes a free, generous-jobs-count tier limited to 60-second precision and offers basic failure email alerts. CronJobFast adds: sub-second timing on Pro+, idempotent writes, signed webhooks across 19 events, sub-account API, DHRU vertical, and credits that never expire.

In-depth · vs EasyCron

EasyCron's UI focuses on URL scheduling with email notifications and Telegram on higher tiers. CronJobFast prices its mid tier ~3× cheaper for 30× more execution capacity, retains up to 50,000 run-log rows on DHRU Premium (vs ~10,000 on EasyCron's plus tier), and adds a programmable reseller layer with overdraft and prorate billing.

FAQ · Cloudflare WAF blocks

If your origin sits behind Cloudflare and the cron URL returns 403, allowlist our worker:

• User-Agent: CronJobFast/1.0

For the full setup, the Cron Endpoint Protection add-on (1.99 credits, one-time) emails step-by-step instructions and a link to the panel wizard, which generates the Cloudflare Custom rule that blocks every other source. Currently unavailable while the worker egress set is being re-verified — it is not purchasable and no charge is possible.

FAQ · Migrating from another service

1. Check Endpoint Protection in the add-ons section (optional; unavailable while the worker egress set is being re-verified).
2. Replicate your jobs via POST /jobs or by importing JSON in the panel.
3. When Endpoint Protection is available again, its setup instructions email and the panel wizard walk you through the WAF rule so the old service stops triggering double-executions.
4. Cancel the old subscription. Done.

FAQ · Domain & job quotas

Need more? Buy the corresponding add-ons (stackable per slot/domain) or upgrade tier.

Changelog

See the public changelog. Earlier highlights:

• 2026-05 · Phase 6.3 ships — DHRU Other Script, reseller overdraft, public listing, Endpoint Protection one-time unlock (1.99 credits).
• 2026-04 · TOTP 2FA, full REST API v1, signed webhooks (15 events).
• 2026-03 · Reseller v1 — sub-accounts, atomic credit transfers, public profile.
• 2026-02 · DHRU Auto Sync — 260+ endpoint catalog, Smart Speed scheduling.