Base URL
The Management API base URL is constructed by appending/apiops to your Apinizer Manager application URL:
Example
- Manager URL:
https://demo.apinizer.com - API Base URL:
https://demo.apinizer.com/apiops/
Authentication
All endpoints (except the test endpoint) require authentication using a Personal API Access Token. The token must be included in theAuthorization header:
API Versioning
The current API version is v1. All endpoints are under the/apiops/ path.
Response Format
Success Response
Most endpoints return a standard success response:Error Response
Error responses follow this format:HTTP Methods
The API uses standard HTTP methods:GET- Retrieve resourcesPOST- Create resourcesPUT- Update resources (full update)PATCH- Partial update (where supported)DELETE- Delete resources
Content Types
- Request:
application/json(for POST/PUT requests) - Response:
application/json
Common Headers
Request Headers
| Header | Required | Description |
|---|---|---|
| Authorization | Yes | Bearer token for authentication |
| Content-Type | Yes (POST/PUT) | application/json |
Response Headers
| Header | Description |
|---|---|
| Content-Type | application/json;charset=UTF-8 |
Path Parameters
Path parameters are used in URL paths:{projectName} and {apiProxyName} are path parameters.
Query Parameters
Query parameters are optional and used for filtering, pagination, etc.:Permissions
The Management API uses project-based permission system. All endpoints require authentication and appropriate permissions:Permission Model
- GET Operations: User must have any permission in the project (read access)
- POST/PUT/DELETE/PATCH Operations: User must have specific category and action permissions:
- API Management (
API_MANAGEMENT+MANAGE): Required for API Proxy and Policy operations - Connections (
CONNECTIONS+MANAGE): Required for Connection operations - Identity (
IDENTITY+MANAGE): Required for Credential operations
- API Management (
- Deployment Operations: Requires additional
DEPLOY_UNDEPLOYpermission in addition to the base permission
Permission Categories
| Category | Description | Used For |
|---|---|---|
API_MANAGEMENT | API Proxy and Policy management | Creating, updating, deleting API Proxies, Policies, API Proxy Groups, Endpoints |
CONNECTIONS | Connection management | Creating, updating, deleting Connections |
IDENTITY | Identity and credential management | Creating, updating, deleting Credentials, RLCL |
SECRETS | Secrets and environment variables | Creating, updating, deleting Environment Variables, Certificates, Keys, Keystores, JWKs |
GLOBAL_SETTINGS | Global settings management | Creating, updating, deleting IP Groups |
Permission Actions
| Action | Description |
|---|---|
MANAGE | Full management access (create, update, delete) |
DEPLOY_UNDEPLOY | Deploy and undeploy operations |
EXPORT_IMPORT | Export and import operations (API Proxy, Certificate) |
Special Permissions
- System Admin (
sysAdmin): Required for certain administrative operations:- List all environments (system-wide)
- Reports generation
- Admin project access
- Project Admin: For some operations, having project admin role is sufficient instead of specific category permissions
Error Responses
If a user lacks required permissions, the API returns:Next Steps
1
Get your API token
See Authentication for details.
2
Learn about base URLs
See Base URL for details.
3
Understand error handling
See Error Handling for details.
4
Explore the API reference
See API Reference for complete endpoint documentation.

