> ## Documentation Index
> Fetch the complete documentation index at: https://tyk.io/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Tyk Gateway API

> Use the Tyk Gateway API to manage APIs, Policies, keys and OAuth clients in a Tyk Gateway open source deployment.

[Download Swagger](https://raw.githubusercontent.com/TykTechnologies/tyk-docs/refs/heads/production/swagger/5.16/gateway-swagger.yml)

Use the Tyk Gateway API to manage a [Tyk Gateway open source](https://tyk.io/docs/tyk-oss-gateway.md) deployment. With the Tyk Gateway API, you can:

* Manage API definitions.
* Manage Policies.
* Manage keys.
* Manage OAuth clients.
* Reload a Tyk Gateway or a cluster of Tyk Gateways.

> [!WARNING]
>
> If you use Tyk Dashboard or Tyk MDCB, do not call the Tyk Gateway API directly. Tyk Dashboard manages your Tyk Gateways. Use the [Tyk Dashboard API](https://tyk.io/docs/tyk-dashboard-api.md) instead.

## Authentication

Set a shared secret in the [`secret`](https://tyk.io/docs/tyk-oss-gateway/configuration#secret) field of `tyk.conf`. Send this secret in the `x-tyk-authorization` header of each request:

```http theme={null}
x-tyk-authorization: <your-secret>
```

Change the default secret immediately after you install Tyk Gateway.

## Security

The Tyk Gateway API has no user accounts or permissions. Any client that has the secret has full access. Use the Tyk Gateway API only for your own automation. Do not give access to external parties.

By default, Tyk Gateway serves the Tyk Gateway API on the same port as your APIs, at the `/tyk/` path. To serve it on a different port, set [`control_api_port`](https://tyk.io/docs/tyk-oss-gateway/configuration#control_api_port). You can then block access to that port with a firewall.