Resellers can place orders programmatically when API access is enabled for their account. Authentication, rate limits, and key rotation are enforced server-side.