diff --git a/sslic.php b/sslic.php
index 79e6078..9614a5e 100644
--- a/sslic.php
+++ b/sslic.php
@@ -3,24 +3,24 @@
  * ****************** SSL certificate installer for Cpanel *********************
  * *****************************************************************************
  *            Copyright (c) 2015-2016 Md. Jahidul Hamid
- * 
+ *
  * -----------------------------------------------------------------------------
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are met:
- * 
+ *
  *     * Redistributions of source code must retain the above copyright notice,
  *       this list of conditions and the following disclaimer.
- * 
+ *
  *     * Redistributions in binary form must reproduce the above copyright
  *       notice, this list of conditions and the following disclaimer in the
  *       documentation and/or other materials provided with the distribution.
- * 
- *     * The names of its contributors may be used to endorse or promote 
+ *
+ *     * The names of its contributors may be used to endorse or promote
  *       products derived from this software without specific prior written
  *       permission.
- *       
+ *
  * Disclaimer:
- * 
+ *
  *     THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
  *     AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  *     IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
@@ -52,7 +52,7 @@
         USER:  username
         PASS:  password
         EMAIL: email address
- 
+
 HTTP REQUEST:
     params:
         user: username
@@ -63,10 +63,6 @@
         chain: CABUNDLE file
  ';
 
-// Define the API call.
-$cpanel_host = 'localhost';
-$request_uri = "https://$cpanel_host:2083/execute/SSL/install_ssl";
-
 //Get args
 foreach($argv as $arg){
     if($arg == '--help'||$arg == '-h'){
@@ -78,32 +74,62 @@
 //Check whether it's a CLI session and parse args
 $isCLI = ( $argc > 0 );
 if($isCLI){
-    $tmp = getenv('EMAIL');
-    if($tmp != FALSE)   { $GLOBALS['email'] = $tmp;} //optional parameter
-    
-    $username = getenv('USER'); //taken from the environment variable USER.
+    $email = getenv('EMAIL');
+    if($email != FALSE)   { $GLOBALS['email'] = $email;} //optional parameter
+    $token = getenv('TOKEN');
+    if($token != FALSE)   { $GLOBALS['token'] = $token;} //optional parameter
     $password = getenv('PASS'); //taken from the environment vairable PASS. (It's safer this way)
+    if($password != FALSE)   { $GLOBALS['password'] = $password;} //optional parameter
+
+    $username = getenv('USER'); //taken from the environment variable USER.
+
     if(!$username){err('username can not be empty!!');}
-    if(!$password){err('password can not be empty!!');}
-    
+    // If token given, use WHM API instead of cPanel API with basic authentication
+    // Notice: token use requires WHM account not regular cpanel
+    // (usually for Reseller account, check with your hosting provider)
+    if(!$token && !$password){err('password can not be empty!!');}
+
     if(isset($argv[1])) { $dom      = $argv[1]; } else { err('$dom missing');   }
     if(isset($argv[2])) { $crt      = $argv[2]; } else { err('$crt missing');   }
     if(isset($argv[3])) { $key      = $argv[3]; } else { err('$key missing');   }
     if(isset($argv[4])) { $chain    = $argv[4]; } else { err('$chain missing'); }
 } else {
     if(isset($_REQUEST['email']))   { $GLOBALS['email']    = $_REQUEST['email']; } //optional parameter
-    
+    if(isset($_REQUEST['token']))   { $GLOBALS['token']    = $_REQUEST['token']; } //optional parameter
+
+    if(!$GLOBALS['token']) {
+        if(isset($_REQUEST['pass']))    { $GLOBALS['password'] = $_REQUEST['pass']; } else { err('pass is missing');  } //optional parameter
+        if($GLOBALS['password'] == NULL || $GLOBALS['password'] == ''){err('password can not be empty!!');}
+    }
+
     if(isset($_REQUEST['user']))    { $username = $_REQUEST['user']; } else { err('user is missing');  }
-    if(isset($_REQUEST['pass']))    { $password = $_REQUEST['pass']; } else { err('pass is missing');  }
     if($username == NULL || $username == ''){err('username can not be empty!!');}
-    if($password == NULL || $password == ''){err('password can not be empty!!');}
-    
     if(isset($_REQUEST['dom']))     { $dom      = $_REQUEST['dom'];  } else { err('dom is missing');   }
     if(isset($_REQUEST['crt']))     { $crt      = $_REQUEST['crt'];  } else { err('crt is missing');   }
     if(isset($_REQUEST['key']))     { $key      = $_REQUEST['key'];  } else { err('key is missing');   }
     if(isset($_REQUEST['chain']))   { $chain    = $_REQUEST['chain'];} else { err('chain is missing'); }
 }
 
+// Define the API call.
+$cpanel_host = 'localhost';
+$request_uri = "https://$cpanel_host:2083/execute/SSL/install_ssl";
+
+// If token parameter given, we'll assume WHM account exists for $username
+// NOTE: Hosting providers usually only provide WHM access on Reseller accounts
+// Without WHM access, you are not able to create API tokens.
+// Ref: https://documentation.cpanel.net/display/SDK/Use+WHM+API+to+Call+cPanel+API+and+UAPI
+$cpanel_request = [
+    'cpanel_jsonapi_user' => $username,
+    'cpanel_jsonapi_module' => 'SSL', // Use SSL module
+    'cpanel_jsonapi_func' => 'install_ssl', // Call install_ssl function
+    //'cpanel_jsonapi_func' => 'list_keys', // Call list_keys function, for testing
+    'cpanel_jsonapi_apiversion' => '3', // Use UAPI (instead of API 1 or 2)
+];
+
+// Define the WHM API call.
+$whm_request_uri = "https://$cpanel_host:2087/json-api/cpanel?api.version=1"
+    .http_build_query($cpanel_request);
+
 //Check for invalid input
 if(!isset($dom)||$dom == '' ||$dom == NULL){err('$dom is not valid');}
 if(!isset($crt)||$crt == '' ||$crt == NULL||!is_file($crt)){err('$crt is not valid');}
@@ -114,7 +140,7 @@
 $cert_file = realpath($crt);
 $key_file = realpath($key);
 $chain_file = realpath($chain);
- 
+
 // Set up the payload to send to the server.
 $payload = array(
     'domain'    => $dom,
@@ -122,32 +148,45 @@
     'key'       => file_get_contents($key_file),
     'cabundle'  => file_get_contents($chain_file)
 );
- 
+
 // Set up the CURL request object.
-$ch = curl_init( $request_uri );
-curl_setopt( $ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC );
-curl_setopt( $ch, CURLOPT_USERPWD, $username . ':' . $password );
+    $ch = curl_init();
+if (!$GLOBALS['token']) {
+    curl_setopt( $ch, CURLOPT_URL, $request_uri );
+    curl_setopt( $ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC );
+    curl_setopt( $ch, CURLOPT_USERPWD, $username . ':' . $GLOBALS['password'] );
+} else {
+    // Add cpanel_jsonapi parameters for WHM API
+    $payload = array_merge($payload, $cpanel_request);
+
+    curl_setopt( $ch, CURLOPT_URL, $whm_request_uri );
+    $header[0] = 'Authorization: whm ' . $username . ':' . $GLOBALS['token'];
+    curl_setopt( $ch, CURLOPT_HTTPHEADER, $header);
+}
 curl_setopt( $ch, CURLOPT_SSL_VERIFYHOST, false );
 curl_setopt( $ch, CURLOPT_SSL_VERIFYPEER, false );
-  
+
 // Set up a POST request with the payload.
 curl_setopt( $ch, CURLOPT_POST, true );
 curl_setopt( $ch, CURLOPT_POSTFIELDS, $payload );
 curl_setopt( $ch, CURLOPT_RETURNTRANSFER, true );
- 
+
 // Make the call, and then terminate the CURL caller object.
 $curl_response = curl_exec( $ch );
 curl_close( $ch );
- 
+
 // Decode and validate output.
 $response = json_decode( $curl_response );
 if( empty( $response ) ) {
     err("The CURL call did not return valid JSON");
-} elseif ( !$response->status ) {
+} elseif (!$GLOBALS['token'] && !$response->status ) {
+    $msg = json_encode($response);
+    err("The CURL call returned valid JSON, but reported errors: $msg");
+} elseif ( !$response->result->status ) {
     $msg = json_encode($response);
     err("The CURL call returned valid JSON, but reported errors: $msg");
 }
- 
+
 // Print and exit.
 res(json_encode($response));