Skip to main content
Use the Tyk Gateway API to manage a Tyk Gateway open source deployment. With the Tyk Gateway API, you can:
  • Manage API definitions.
  • Manage Policies.
  • Manage keys.
  • Manage OAuth clients.
  • Reload a Tyk Gateway or a cluster of Tyk Gateways.
If you use Tyk Dashboard or Tyk MDCB, do not call the Tyk Gateway API directly. Tyk Dashboard manages your Tyk Gateways. Use the Tyk Dashboard API instead.

​
Authentication

Set a shared secret in the secret field of tyk.conf. Send this secret in the x-tyk-authorization header of each request:
Change the default secret immediately after you install Tyk Gateway.

​
Security

The Tyk Gateway API has no user accounts or permissions. Any client that has the secret has full access. Use the Tyk Gateway API only for your own automation. Do not give access to external parties. By default, Tyk Gateway serves the Tyk Gateway API on the same port as your APIs, at the /tyk/ path. To serve it on a different port, set control_api_port. You can then block access to that port with a firewall.