API Reference

The Endpointwise management API lets you create gateways, manage keys, configure routes, and inspect traffic programmatically.

Base URL

https://api.endpointwise.com/v1

All management API requests require an account-level API key passed in the Authorization header:

Authorization: Bearer sk_live_your_management_key

GET /v1/gateways

Returns all gateways in your account.

Parameter	Type	Required	Description
`limit`	integer	optional	Results per page. Default: 25. Max: 100.
`cursor`	string	optional	Pagination cursor from previous response.

POST /v1/gateways

Body field	Type	Required	Description
`name`	string	required	Display name for this gateway.
`upstream_url`	string	required	Base URL of the upstream service.
`spec`	string (YAML/JSON)	optional	OpenAPI 3.x spec content. If omitted, configure routes separately.

GET /v1/keys

Returns all API keys. Key values are never returned — only metadata and truncated prefix.

POST /v1/keys

Body field	Type	Required	Description
`name`	string	required	Display name (e.g. "Partner: Acme Corp").
`scope`	string	required	`read`, `write`, `admin`, or path-specific.
`expires_at`	date	optional	ISO 8601 date. No expiry if omitted.
`gateway_id`	string	optional	Restrict key to a specific gateway. Defaults to all gateways.

DELETE /v1/keys/{key_id}

Revokes a key immediately. All subsequent requests using this key return 401.

GET /v1/gateways/{gateway_id}/routes

POST /v1/gateways/{gateway_id}/routes/{route_id}

Update rate limit config for a single route without re-pushing the full spec.

All errors follow a consistent schema:

{
  "error": "validation_failed",
  "message": "The field 'scope' is required.",
  "field": "scope",
  "request_id": "req_01abc"
}