What is an SMM panel script, and which kind should you use? It is the software that runs a panel: customer accounts, balances, the service list, payments, and orders passed to providers through their API. There are three ways to get one: rent a hosted panel platform for a monthly fee, run a child panel from a provider, or self-host a PHP script you buy or take from an open-source project. For most new owners, renting or a child panel is the sensible start. Never install a nulled or cracked script.
What the script actually does
Strip away the theme and every panel script does the same job. It keeps a ledger of customer balances, shows a service list with your prices, takes deposits through payment gateways, and forwards each order to a provider by API. Then it keeps checking the provider for status updates, refunds the undelivered part of partial or cancelled orders, and passes on refill requests.
The storefront is the easy part. The ledger, the order sync and the payment callbacks are where scripts differ, and where bad ones lose you money. Most self-hosted panel scripts are PHP with a MySQL database.
The three ways to get panel software
Hosted (rented) panel platforms
A company runs the software and the server. You pay a monthly fee, point your domain at it, connect providers and payment methods, and set prices. Updates and security patches are their job.
The trade-off is control. You cannot change the code, your data sits on their servers, and if they raise prices or shut down, your panel goes with them. Before committing, check that you can export your customers, balances and order history.
A child panel from a provider
A child panel is a storefront on a provider's own system, tied to that provider's service list. It is usually the cheapest and fastest way to open, but you inherit the provider's services, quality and limits, and cannot route orders elsewhere. The full trade-off is in child panel vs master panel, and you can browse panels that offer child panels.
Self-hosted PHP scripts, bought or open-source
You run the code on your own server. A bought script is usually a one-off licence, sometimes with paid updates; an open-source project is free to download, often from GitHub. Either way, hosting, scheduled jobs, backups, security patches and fixing things at 2 a.m. are on you. In exchange you get full control: any provider, any gateway your code supports, your own changes.
Open-source quality varies enormously. Check when the code was last updated, whether reported issues get answers and what licence it uses, then read the code before trusting it with money. A free upload of a script that is sold elsewhere is a nulled copy with a GitHub address.
Side-by-side comparison
| Factor | Hosted platform | Child panel | Self-hosted script |
|---|---|---|---|
| Upfront cost | Low, recurring monthly fee | Lowest, small monthly fee | Licence fee or free, plus a server |
| Setup time | Fast, connect providers and gateways | Fastest, inherits the parent's setup | Slowest, server, install, cron, gateways |
| Control | Settings and prices | Prices and branding | Full code and data |
| Providers | Usually any with a standard API | The parent provider only | Any your code integrates |
| Security | Handled by the platform | Handled by the provider | Entirely yours |
| Payment gateways | The platform's supported list | Whatever the provider allows | Whatever you integrate and get approved for |
| Updates | Automatic | Automatic | You apply them, or nobody does |
| Main exit risk | Platform closes or reprices | Parent provider fails | Your own neglect |
There is no universally right column. With no customers yet, the first two cost little to try and little to abandon. Self-hosting makes sense once you have steady volume, more than one provider and someone who can maintain a server.
Nulled and cracked scripts: do not
A nulled script is a paid script with its licence check removed, passed around free or cheap. They are easy to find. Do not install one.
People who crack scripts are not doing it as a public service. A cracked script can contain hidden admin accounts, backdoors that let someone run code on your server, code that copies your provider API keys and payment credentials, swapped crypto deposit addresses so customer top-ups land in someone else's wallet, and quiet collection of customer emails and passwords. Even a clean crack never gets security updates, so every hole later found in the original stays open on your server.
When it goes wrong, it is your customers' money and data and your name on the panel. Add the copyright problem of running pirated software and the saving is never worth it. If a licence is too expensive, rent a platform or start with a child panel.
What any panel script must have
Provider API integration in the standard format
Most panels speak the same API format, usually called API v2: one endpoint taking POST requests with your API key and an action such as services, add, status, refill, cancel or balance, answered in JSON. Your script must work as a client of that format so you can connect any standard provider, and should offer it to your own customers so resellers can connect to you. The SMM panel API guide covers the details, and the list of SMM panels with an API shows providers that offer one.
Order, price and service sync
A scheduled job should poll providers for order status, mark partial and cancelled orders correctly and refund the undelivered amount automatically. It should also flag when a provider changes a rate or disables a service, because a provider price rise with your price unchanged means selling at a loss.
Refill and cancel
Customers should be able to request a refill or cancel where the provider supports it, with the script passing the request upstream and tracking the result. Show the refill button only on services your provider actually refills.
Payment gateways
Check which gateways the script supports out of the box, and whether those gateways will accept your business at all. Payment callbacks must be verified with the gateway on the server side. A callback that can be faked is free balance for anyone who finds it.
Support, roles, affiliates and child panels
- Ticket system linked to orders, so support sees exactly what a customer means.
- User roles, so support staff can answer tickets without seeing payment settings or API keys.
- Affiliate system with referral credit you control.
- Child panel selling, if you want customers to open their own panels on top of yours.
- Mass order and drip-feed, which resellers and agencies expect.
Security basics
- Two-factor authentication on every admin account.
- Rate limiting on login, registration and API endpoints.
- Automated off-server backups, with a restore you have actually tested.
- Hashed passwords and HTTPS everywhere, with provider API keys kept out of any public code repository.
Telegram bots as an add-on
Plenty of buyers would rather order inside Telegram, and a bot can let them browse services, top up, place orders and check status without opening your site. But a bot is a front-end, not a panel. It should talk to your panel through its API, so balances, refunds and order sync stay in one ledger instead of two that drift apart.
People look for ready-made SMM panel Telegram bots on GitHub. If you use one, apply the same scrutiny as for any script: read the code, keep the bot token and API keys out of the repository, and follow Telegram's rules for bots.
Checklist before you choose
- Do you have customers yet? If not, rent or start a child panel; owning software does not create demand. Is an SMM panel business profitable runs the numbers.
- Who fixes it when it breaks? If the answer is nobody, do not self-host.
- Does it speak standard API v2, both to your providers and to your own resellers?
- Will its payment gateways approve you? See SMM panel payment methods.
- Can you export customers, balances and orders if you leave?
- When was it last updated, and how are security fixes delivered?
- Is the licence legitimate? Bought from the developer, or open-source under a stated licence.
- Have you tested a full cycle? Deposit, order, partial, refund, refill and cancel, before your first real customer.
The full launch sequence is in how to start an SMM panel. Once you are running, directories where buyers compare panels are one way to be found. SMMPANEL.LOL lists panels for $1 per 30 days, every position is a paid placement ordered by bid, and you can list a panel here.
FAQ
What is an SMM panel script?
The software behind an SMM panel: accounts, balances, service list, payments, and order forwarding to providers by API. You can rent it, get it as a child panel, or host a script yourself.
Is there a free SMM panel script?
There are open-source projects, mostly on GitHub, and some are usable starting points if you can read and maintain the code. Free copies of scripts sold elsewhere are nulled and should never be installed.
What is the SMM panel script API?
Most scripts use the common API v2 format: POST requests with an API key and an action such as add, status, refill or cancel, answered in JSON. Supporting it lets you connect to almost any standard provider and lets resellers connect to you.
Is there an SMM panel Telegram bot on GitHub?
Telegram bot front-ends for SMM panels are published on GitHub, with very mixed quality. Use one only after reading the code, and connect it to your panel's API so orders and balances stay in one place.
Do I need coding skills to run an SMM panel script?
Not for a rented platform or a child panel. A self-hosted script needs someone who can manage a server, scheduled jobs, updates and backups, or you will be paying someone who can.