Programmatic interface to a 3X-UI panel. Authenticate either by logging in (cookie) or with an API token from Settings → Security → API Token (Bearer). All endpoints under /panel/api/* honour both modes.

New

feat(frontend): TanStack Query + React Router migration & in-panel API docs (#4541)
Migrate frontend models/api/utils to TypeScript and modernize AntD theming (#4563)
feat: complete Zod mi...

New

feat(postgres): in-panel backup/restore and consistent CLI backend
feat(nodes): bulk panel self-update with live online indicator
feat(inbounds): multi-select and bulk delete
feat(inbounds): a...

New

feat(outbounds): pick dialerProxy from other outbound tags for proxy chaining
feat(nodes): add per-node TLS verification mode for self-signed certs (#4757)
feat(inbounds): support Unix domain ...

New

feat(dashboard): richer System History & Xray Metrics charts
feat(dashboard): more System History metrics, persistence & localized labels
feat(xray): merge basic routing into the routi...

🚀 v3.2.8 — Multi-Node Resilience, ECH & Scale
🆕 New

feat(sub): modern xray JSON format with unified finalmask editor (#4912)
feat(Clash): add routing rules and enable-routing option for Clash ...

🚀 MTProto, WARP Rotation, Subscription Outbounds & a Typed API

🛡️ MTProto (FakeTLS) — new protocol served through a managed mtg sidecar, no external setup required.
🌐 WARP IP rotation — rotate...

🚀 Live Config Apply, Native Geodata, Smarter Nodes & a Big Internal Refactor

⚡ Live config apply — inbound / outbound / routing changes now apply over the Xray gRPC API without a full core res...

What's Changed

Go v1.26.3 - Xray-core v26.6.1 (not a full released version)
[feat] IP limit (Linux Only)
hysteria inbound
Separate outbounds
Separate routing rules
[feat] outbound test
Sockopt...

What's Changed

import-export outbounds
import-export routing rules
Complete Xray's tls object
Add support for verifyPeerCertByName to the links
faster frontend
[security] Reject SSL handsh...

🚀 Multi-Node Hardening, Notification Event Bus, Managed Hosts & Scale to 100k Clients

🛰️ Per-node outbound routing & node hardening — route each node through its own outbound, plus mTLS, h...

🚀 Rolling Dev Channel, Logs Viewer Overhaul, Leaner Memory & Client Bulk Ops

🧪 Rolling Dev update channel — opt into per-commit builds from the panel, node updates, the x-ui.sh menu, and the i...

What's Changed

SingBox v1.13.14
Go v1.26.4
Creation time, last-online and remark for clients #1115
Support external JSON subscriptions/configs #652
Optional default routing rules for JSON sub ...

🚀 WireGuard Multi-Client, Panel Accessibility, Balancer Observatory & Hardened Settings

🔐 WireGuard goes multi-client — WireGuard inbounds are now first-class multi-client (native users), with...

Bug Fixes

Fix blank traffic chart by adapting chart resolution to the stored bucket size #1150
Fix v1.5.0 startup hang on the stats dedup migration for large tables #1148
Fix self-signed TLS certi...

What's Changed

Go v1.26.4 and update dependencies
complete outbound sockopt
adjust sub
migration for sub
update translations
tls ping query
hy link enhancements #1635
freedom finalRules
xray a...

Bug Fixes

Fix missing flow: xtls-rprx-vision in generated Clash/JSON config for VLESS #1156
Fix SHA256 pin fingerprint on generated links #1093

Enhancements

Add certificate to the outbound TLS p...

Bug Fixes

Fix pinSHA256 (and per-protocol insecure flag) on generated Hysteria/Hysteria2 links #1093

Enhancements

Clash subscription: optionally disable the default Proxy/Auto proxy-groups and e...

What's Changed

[subjson] support json rule editor #1138
advance Inbound tab #1264

Bug fixes

fix hysteria pinsha256 on link

Reports