Tyk Tyk API

openapi: 3.2.0
info:
  contact:
    email: support@tyk.io
    name: Tyk Technologies
    url: https://tyk.io/contact
  description: 'The Tyk Gateway API is the primary means for integrating your application with the Tyk API Gateway system. This API is very small, and has no granular permissions system. It is intended to be used purely for internal automation and integration.


    **Warning: Under no circumstances should outside parties be granted access to this API.**


    The Tyk Gateway API is capable of:


    * Managing session objects (key generation).

    * Managing and listing policies.

    * Managing and listing API Definitions (only when not using the Tyk Dashboard).

    * Hot reloads / reloading a cluster configuration.

    * OAuth client creation (only when not using the Tyk Dashboard).


    In order to use the Gateway API, you''ll need to set the **secret** parameter in your tyk.conf file.


    The shared secret you set should then be sent along as a header with each Gateway API Request in order for it to be successful:


    **x-tyk-authorization: <your-secret>***

    <br/>


    <b>The Tyk Gateway API is subsumed by the Tyk Dashboard API in Pro installations.</b>


    '
  license:
    name: Mozilla Public License Version 2.0
    url: https://github.com/TykTechnologies/tyk/blob/master/LICENSE.md
  title: Gateway Tyk API
  version: 5.7.1
servers:
- url: https://{tenant}
  variables:
    tenant:
      default: localhost:8080
      description: Your gateway host
security:
- api_key: []
tags:
- name: Tyk
paths:
  /tyk/apis:
    get:
      description: List APIs from Tyk Gateway
      operationId: listApis
      responses:
        '200':
          content:
            application/json:
              example:
              - api_id: b84fe1a04e5648927971c0557971565c
                auth:
                  auth_header_name: authorization
                definition:
                  key: version
                  location: header
                name: Tyk Test API
                org_id: 664a14650619d40001f1f00f
                proxy:
                  listen_path: /tyk-api-test/
                  strip_listen_path: true
                  target_url: https://httpbin.org
                use_oauth2: true
                version_data:
                  not_versioned: true
                  versions:
                    Default:
                      name: Default
              schema:
                items:
                  $ref: '#/components/schemas/APIDefinition'
                type: array
          description: List of API definitions.
        '403':
          content:
            application/json:
              example:
                message: Attempted administrative access with invalid or missing key!
                status: error
              schema:
                $ref: '#/components/schemas/ApiStatusMessage'
          description: Forbidden
      summary: Tyk Get List of Apis
      tags:
      - Tyk
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
    post:
      description: Create API. A single Tyk node can have its API Definitions queried, deleted and updated remotely. This functionality enables you to remotely update your Tyk definitions without having to manage the files manually.
      operationId: createApi
      parameters:
      - description: The base API which the new version will be linked to.
        example: 663a4ed9b6be920001b191ae
        in: query
        name: base_api_id
        required: false
        schema:
          type: string
      - description: The version name of the base API while creating the first version. This doesn't have to be sent for the next versions but if it is set, it will override base API version name.
        example: Default
        in: query
        name: base_api_version_name
        required: false
        schema:
          type: string
      - description: The version name of the created version.
        example: v2
        in: query
        name: new_version_name
        required: false
        schema:
          type: string
      - description: If true, the new version is set as default version.
        example: true
        in: query
        name: set_default
        required: false
        schema:
          type: boolean
      requestBody:
        content:
          application/json:
            example:
              api_id: b84fe1a04e5648927971c0557971565c
              auth:
                auth_header_name: authorization
              definition:
                key: version
                location: header
              name: Tyk Test API
              org_id: 664a14650619d40001f1f00f
              proxy:
                listen_path: /tyk-api-test/
                strip_listen_path: true
                target_url: https://httpbin.org
              use_oauth2: true
              version_data:
                not_versioned: true
                versions:
                  Default:
                    name: Default
            schema:
              $ref: '#/components/schemas/APIDefinition'
      responses:
        '200':
          content:
            application/json:
              example:
                action: added
                key: b84fe1a04e5648927971c0557971565c
                status: ok
              schema:
                $ref: '#/components/schemas/ApiModifyKeySuccess'
          description: API created.
        '400':
          content:
            application/json:
              example:
                message: Request malformed
                status: error
              schema:
                $ref: '#/components/schemas/ApiStatusMessage'
          description: Bad Request
        '403':
          content:
            application/json:
              example:
                message: Attempted administrative access with invalid or missing key!
                status: error
              schema:
                $ref: '#/components/schemas/ApiStatusMessage'
          description: Forbidden
        '500':
          content:
            application/json:
              example:
                message: file object creation failed, write error
                status: error
              schema:
                $ref: '#/components/schemas/ApiStatusMessage'
          description: Internal server error.
      summary: Tyk Creat an Api
      tags:
      - Tyk
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
  /tyk/apis/{apiID}:
    delete:
      description: Deleting an API definition will remove the file from the file store, the API definition will NOT be unloaded, a separate reload request will need to be made to disable the API endpoint.
      operationId: deleteApi
      parameters:
      - description: The API ID.
        example: 1bd5c61b0e694082902cf15ddcc9e6a7
        in: path
        name: apiID
        required: true
        schema:
          type: string
      responses:
        '200':
          content:
            application/json:
              example:
                action: deleted
                key: 1bd5c61b0e694082902cf15ddcc9e6a7
                status: ok
              schema:
                $ref: '#/components/schemas/ApiModifyKeySuccess'
          description: API deleted.
        '403':
          content:
            application/json:
              example:
                message: Attempted administrative access with invalid or missing key!
                status: error
              schema:
                $ref: '#/components/schemas/ApiStatusMessage'
          description: Forbidden
        '404':
          content:
            application/json:
              example:
                message: API not found
                status: error
              schema:
                $ref: '#/components/schemas/ApiStatusMessage'
          description: API not found.
        '500':
          content:
            application/json:
              example:
                message: Delete failed
                status: error
              schema:
                $ref: '#/components/schemas/ApiStatusMessage'
          description: Internal server error.
      summary: Tyk Deleting an Api Definition With Id.
      tags:
      - Tyk
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
    get:
      description: Get API definition from Tyk Gateway.
      operationId: getApi
      parameters:
      - description: The API ID.
        example: keyless
        in: path
        name: apiID
        required: true
        schema:
          type: string
      responses:
        '200':
          content:
            application/json:
              example:
                api_id: b84fe1a04e5648927971c0557971565c
                auth:
                  auth_header_name: authorization
                definition:
                  key: version
                  location: header
                name: Tyk Test API
                org_id: 664a14650619d40001f1f00f
                proxy:
                  listen_path: /tyk-api-test/
                  strip_listen_path: true
                  target_url: https://httpbin.org
                use_oauth2: true
                version_data:
                  not_versioned: true
                  versions:
                    Default:
                      name: Default
              schema:
                $ref: '#/components/schemas/APIDefinition'
          description: API definition.
          headers:
            x-tyk-base-api-id:
              description: ID of the base API if the requested API is a version.
              schema:
                type: string
              style: simple
        '403':
          content:
            application/json:
              example:
                message: Attempted administrative access with invalid or missing key!
                status: error
              schema:
                $ref: '#/components/schemas/ApiStatusMessage'
          description: Forbidden
        '404':
          content:
            application/json:
              example:
                message: API not found.
                status: error
              schema:
                $ref: '#/components/schemas/ApiStatusMessage'
          description: API not found.
      summary: Tyk Get Api Definition With It's Id.
      tags:
      - Tyk
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
    put:
      description: 'Updating an API definition uses the same signature and object as a `POST`, however it will first ensure that the API ID that is being updated is the same as the one in the object being `PUT`.


        Updating will completely replace the file descriptor and will not change an API Definition that has already been loaded, the hot-reload endpoint will need to be called to push the new definition to live.'
      operationId: updateApi
      parameters:
      - description: The API ID.
        example: 1bd5c61b0e694082902cf15ddcc9e6a7
        in: path
        name: apiID
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            example:
              api_id: b84fe1a04e5648927971c0557971565c
              auth:
                auth_header_name: authorization
              definition:
                key: version
                location: header
              name: Update the API name sample
              org_id: 664a14650619d40001f1f00f
              proxy:
                listen_path: /update-listen-path
                strip_listen_path: true
                target_url: https://tyk.io/api
              use_oauth2: true
              version_data:
                not_versioned: true
                versions:
                  Default:
                    name: Default
            schema:
              $ref: '#/components/schemas/APIDefinition'
      responses:
        '200':
          content:
            application/json:
              example:
                action: modified
                key: 1bd5c61b0e694082902cf15ddcc9e6a7
                status: ok
              schema:
                $ref: '#/components/schemas/ApiModifyKeySuccess'
          description: API updated.
        '400':
          content:
            application/json:
              example:
                message: Request malformed
                status: error
              schema:
                $ref: '#/components/schemas/ApiStatusMessage'
          description: Bad Request
        '403':
          content:
            application/json:
              example:
                message: Attempted administrative access with invalid or missing key!
                status: error
              schema:
                $ref: '#/components/schemas/ApiStatusMessage'
          description: Forbidden
        '404':
          content:
            application/json:
              example:
                message: API not found
                status: error
              schema:
                $ref: '#/components/schemas/ApiStatusMessage'
          description: API not found.
        '500':
          content:
            application/json:
              example:
                message: File object creation failed, write error.
                status: error
              schema:
                $ref: '#/components/schemas/ApiStatusMessage'
          description: Internal server error.
      summary: Tyk Updating an Api Definition With Its Id.
      tags:
      - Tyk
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
  /tyk/apis/{apiID}/versions:
    get:
      description: Listing versions of an API.
      operationId: listApiVersions
      parameters:
      - description: The API ID.
        example: keyless
        in: path
        name: apiID
        required: true
        schema:
          type: string
      - $ref: '#/components/parameters/SearchText'
      - $ref: '#/components/parameters/AccessType'
      responses:
        '200':
          content:
            application/json:
              example:
                apis:
                - expirationDate: ''
                  id: keyless
                  internal: false
                  isDefaultVersion: false
                  name: Tyk Test Keyless API
                  versionName: ''
                - expirationDate: ''
                  id: 1f20d5d2731d47ac9c79fddf826eda00
                  internal: false
                  isDefaultVersion: true
                  name: Version three Api
                  versionName: v2
                status: success
              schema:
                $ref: '#/components/schemas/VersionMetas'
          description: API version metas.
        '403':
          content:
            application/json:
              example:
                message: Attempted administrative access with invalid or missing key!
                status: error
              schema:
                $ref: '#/components/schemas/ApiStatusMessage'
          description: Forbidden
        '404':
          content:
            application/json:
              example:
                message: API not found
                status: error
              schema:
                $ref: '#/components/schemas/ApiStatusMessage'
          description: API not found.
      summary: Tyk Listing Versions of an Api.
      tags:
      - Tyk
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
components:
  schemas:
    GlobalRateLimit:
      properties:
        disabled:
          type: boolean
          example: true
        per:
          type: number
          example: 42.5
        rate:
          type: number
          example: 42.5
      type: object
    GraphQLIntrospectionConfig:
      properties:
        disabled:
          type: boolean
          example: true
      type: object
    OpenIDOptions:
      properties:
        providers:
          items:
            $ref: '#/components/schemas/OIDProviderConfig'
          type:
          - array
          - 'null'
          example: []
        segregate_by_client:
          type: boolean
          example: true
      type: object
    GraphQLEngineConfig:
      properties:
        data_sources:
          items:
            $ref: '#/components/schemas/GraphQLEngineDataSource'
          type:
          - array
          - 'null'
          example: []
        field_configs:
          items:
            $ref: '#/components/schemas/GraphQLFieldConfig'
          type:
          - array
          - 'null'
          example: []
        global_headers:
          items:
            $ref: '#/components/schemas/UDGGlobalHeader'
          type:
          - array
          - 'null'
          example: []
      type: object
    TemplateData:
      properties:
        enable_session:
          type: boolean
          example: true
        input_type:
          enum:
          - json
          - xml
          type: string
          example: json
        template_mode:
          enum:
          - blob
          - file
          type: string
          example: blob
        template_source:
          type: string
          example: example_value
      type: object
    Scopes:
      properties:
        jwt:
          $ref: '#/components/schemas/ScopeClaim'
        oidc:
          $ref: '#/components/schemas/ScopeClaim'
      type: object
    ResponseProcessor:
      properties:
        name:
          type: string
          example: Example Title
        options:
          example: example_value
      type: object
    EndpointMethodMeta:
      properties:
        action:
          enum:
          - no_action
          - reply
          type: string
          example: no_action
        code:
          type: integer
          example: 10
        data:
          type: string
          example: example_value
        headers:
          additionalProperties:
            type: string
          type:
          - object
          - 'null'
          example: example_value
      type: object
    DatasourceSourceConfig:
      properties:
        data_source_config:
          example: example_value
        kind:
          type: string
          example: example_value
      type: object
    GraphQLSubgraphConfig:
      properties:
        sdl:
          type: string
          example: example_value
      type: object
    InternalMeta:
      properties:
        disabled:
          type: boolean
          example: true
        method:
          type: string
          example: example_value
        path:
          type: string
          example: example_value
      type: object
    GraphQLConfig:
      properties:
        enabled:
          type: boolean
          example: true
        engine:
          $ref: '#/components/schemas/GraphQLEngineConfig'
        execution_mode:
          enum:
          - proxyOnly
          - executionEngine
          - subgraph
          - supergraph
          type: string
          example: proxyOnly
        introspection:
          $ref: '#/components/schemas/GraphQLIntrospectionConfig'
        last_schema_update:
          format: date-time
          type:
          - string
          - 'null'
          example: '2026-01-15T10:30:00Z'
        playground:
          $ref: '#/components/schemas/GraphQLPlayground'
        proxy:
          $ref: '#/components/schemas/GraphQLProxyConfig'
        schema:
          type: string
          example: example_value
        subgraph:
          $ref: '#/components/schemas/GraphQLSubgraphConfig'
        supergraph:
          $ref: '#/components/schemas/GraphQLSupergraphConfig'
        type_field_configurations:
          items:
            $ref: '#/components/schemas/DatasourceTypeFieldConfiguration'
          type:
          - array
          - 'null'
          example: []
        version:
          enum:
          - ''''
          - '1'
          - '2'
          type: string
          example: ''''
      type: object
    RoutingTrigger:
      properties:
        'on':
          enum:
          - all
          - any
          type: string
          example: all
        options:
          $ref: '#/components/schemas/RoutingTriggerOptions'
        rewrite_to:
          type: string
          example: example_value
      type: object
    HeaderInjectionMeta:
      properties:
        act_on:
          type: boolean
          example: true
        add_headers:
          additionalProperties:
            type: string
          type:
          - object
          - 'null'
          example: example_value
        delete_headers:
          items:
            type: string
          type:
          - array
          - 'null'
          example: []
        disabled:
          type: boolean
          example: true
        method:
          type: string
          example: example_value
        path:
          type: string
          example: example_value
      type: object
    JWTValidation:
      properties:
        enabled:
          type: boolean
          example: true
        expires_at_validation_skew:
          minimum: 0
          type: integer
          example: 10
        identity_base_field:
          type: string
          example: example_value
        issued_at_validation_skew:
          minimum: 0
          type: integer
          example: 10
        not_before_validation_skew:
          minimum: 0
          type: integer
          example: 10
        signing_method:
          type: string
          example: example_value
        source:
          type: string
          example: example_value
      type: object
    CORSConfig:
      properties:
        allow_credentials:
          example: false
          type: boolean
        allowed_headers:
          example:
          - Origin
          - Accept
          - Content-Type
          - Authorization
          items:
            type: string
          type:
          - array
          - 'null'
        allowed_methods:
          example:
          - GET
          - HEAD
          - POST
          items:
            type: string
          type:
          - array
          - 'null'
        allowed_origins:
          example:
          - https://*.foo.com
          items:
            type: string
          type:
          - array
          - 'null'
        debug:
          example: true
          type: boolean
        enable:
          example: false
          type: boolean
        exposed_headers:
          example:
          - Accept
          - Content-Type
          items:
            type: string
          type:
          - array
          - 'null'
        max_age:
          example: 24
          type: integer
        options_passthrough:
          example: false
          type: boolean
      type: object
    VersionMeta:
      properties:
        expirationDate:
          example: 2026-03-26 09:00
          type: string
        id:
          example: keyless
          type: string
        internal:
          example: false
          type: boolean
        isDefaultVersion:
          example: true
          type: boolean
        name:
          example: Tyk Test Keyless API
          type: string
        versionName:
          example: v2
          type: string
      type: object
    RequestSizeMeta:
      properties:
        disabled:
          type: boolean
          example: true
        method:
          type: string
          example: example_value
        path:
          type: string
          example: example_value
        size_limit:
          format: int64
          type: integer
          example: 10
      type: object
    AuthConfig:
      properties:
        auth_header_name:
          example: Authorization
          type: string
        cookie_name:
          type: string
          example: example_value
        disable_header:
          type: boolean
          example: true
        name:
          type: string
          example: Example Title
        param_name:
          type: string
          example: example_value
        signature:
          $ref: '#/components/schemas/SignatureConfig'
        use_certificate:
          type: boolean
          example: true
        use_cookie:
          type: boolean
          example: true
        use_param:
          type: boolean
          example: true
        validate_signature:
          type: boolean
          example: true
      type: object
    RoutingTriggerOptions:
      properties:
        header_matches:
          additionalProperties:
            $ref: '#/components/schemas/StringRegexMap'
          type:
          - object
          - 'null'
          example: example_value
        path_part_matches:
          additionalProperties:
            $ref: '#/components/schemas/StringRegexMap'
          type:
          - object
          - 'null'
          example: example_value
        payload_matches:
          $ref: '#/components/schemas/StringRegexMap'
        query_val_matches:
          additionalProperties:
            $ref: '#/components/schemas/StringRegexMap'
          type:
          - object
          - 'null'
          example: example_value
        request_context_matches:
          additionalProperties:
            $ref: '#/components/schemas/StringRegexMap'
          type:
          - object
          - 'null'
          example: example_value
        session_meta_matches:
          additionalProperties:
            $ref: '#/components/schemas/StringRegexMap'
          type:
          - object
          - 'null'
          example: example_value
      type: object
    TemplateMeta:
      properties:
        disabled:
          type: boolean
          example: true
        method:
          type: string
          example: example_value
        path:
          type: string
          example: example_value
        template_data:
          $ref: '#/components/schemas/TemplateData'
      type: object
    EndPointMeta:
      properties:
        disabled:
          type: boolean
          example: true
        ignore_case:
          type: boolean
          example: true
        method:
          type: string
          example: example_value
        method_actions:
          additionalProperties:
            $ref: '#/components/schemas/EndpointMethodMeta'
          type: object
          example: example_value
        path:
          type: string
          example: example_value
      type: object
    GraphQLEngineDataSource:
      properties:
        config:
          example: example_value
        internal:
          type: boolean
          example: true
        kind:
          type: string
          example: example_value
        name:
          type: string
          example: Example Title
        root_fields:
          items:
            $ref: '#/components/schemas/GraphQLTypeFields'
          type:
          - array
          - 'null'
          example: []
      type: object
    Introspection:
      properties:
        cache:
          $ref: '#/components/schemas/IntrospectionCache'
        client_id:
          type: string
          example: '500123'
        client_secret:
          type: string
          example: example_value
        enabled:
          type: boolean
          example: true
        identity_base_field:
          type: string
          example: example_value
        url:
          type: string
          example: https://www.example.com
      type: object
    DatasourceMappingConfiguration:
      properties:
        disabled:
          type: boolean
          example: true
        path:
          type: string
          example: example_value
      type: object
    CacheOptions:
      properties:
        cache_all_safe_requests:
          example: false
          type: boolean
        cache_by_headers:
          items:
            type: string
          type:
          - array
          - 'null'
          example: []
        cache_control_ttl_header:
          type: string
          example: example_value
        cache_response_codes:
          items:
            type: integer
          type:
          - array
          - 'null'
          example: []
        cache_timeout:
          example: 60
          format: int64
          type: integer
        enable_cache:
          example: true
          type: boolean
        enable_upstream_cache_control:
          example: false
          type: boolean
      type: object
    SignatureConfig:
      properties:
        algorithm:
          type: string
          example: example_value
        allowed_clock_skew:
          type: integer
          example: 10
        error_code:
          type: integer
          example: 10
        error_message:
          type: string
          example: example_value
        header:
          type: string
          example: example_value
        param_name:
          type: string
          example: example_value
        secret:
          type: string
          example: example_value
        use_param:
          type: boolean
          example: true
      type: object
    Provider:
      properties:
        introspection:
          $ref: '#/components/schemas/Introspection'
        jwt:
          $ref: '#/components/schemas/JWTValidation'
      type: object
    MockResponseMeta:
      properties:
        body:
          type: string
          example: example_value
        code:
          type: integer
          example: 10
        disabled:
          type: boolean
          example: true
        headers:
          additionalProperties:
            type: string
          type:
          - object
          - 'null'
          example: example_value
        ignore_case:
          type: boolean
          example: true
        method:
          type: string
          example: example_value
        path:
          type: string
          example: example_value
      type: object
    ProxyConfig:
      properties:
        check_host_against_uptime_tests:
          type: boolean
          example: true
        disable_strip_slash:
          type: boolean
          example: true
        enable_load_balancing:
          type: boolean
          example: true
        listen_path:
          example: /relative-path-examples/
          type: string
        preserve_host_header:
          type: boolean
          example: true
        service_discovery:
          $ref: '#/components/schemas/ServiceDiscoveryConfiguration'
        strip_listen_path:
          example: true
          type: boolean
        target_list:
          items:
            type: string
          type:
          - array
          - 'null'
          example: []
        target_url:
          example: https://httpbin.org/
          type: string
        transport:
          properties:
            proxy_url:
              type: string
            ssl_ciphers:
              items:
                type: string
              type:
              - array
              - 'null'
            ssl_force_common_name_check:
              type: boolean
            ssl_insecure_skip_verify:
              type: boolean
            ssl_max_version:
              minimum: 0
              type: integer
            ssl_min_version:
              minimum: 0
              type: integer
          type: object
          example: example_value
      type: object
    VersionData:
      properties:
        default_version:
          type: string
          example: example_value
        not_versioned:
          type: boolean
          example: true
        versions:
          additionalProperties:
            $ref: '#/components/schemas/VersionInfo'
          type:
          - object
          - 'null'
          example: example_value
      type: object
    CacheMeta:
      properties:
        cache_key_regex:
          type: string
          example: example_value
        cache_response_codes:
          items:
            type: integer
          type:
          - array
          - 'null'
          example: []
        disabled:
          type: boolean
          example: true
        method:
          type: string
          example: example_value
        path:
          type: string
          example: example_value
        timeout:
          format: int64
          type: integer
          example: 10
      type: object
    ValidatePathMeta:
      properties:
        disabled:
          type: boolean
          example: true
        error_response_code:
          type: integer
          example: 10
        method:
          type: string
          example: example_value
        path:
          type: string
          example: example_value
        schema:
          additionalProperties: {}
          type:
          - object
          - 'null'
          example: example_value
        schema_b64:
          type: string
          example: 

# --- truncated at 32 KB (65 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/tyk/refs/heads/main/openapi/tyk-tyk-api-openapi.yml