Skip to main content
The Admin API is the open-source control plane for TrustGate. Everything the console does, you can do over REST — create gateways, register upstreams, mint consumer keys, attach policies. The endpoint pages in this section are generated directly from the TrustGate OpenAPI spec and include a live request builder.

​
Base URL & authentication

The Admin plane listens on :8080. All /v1/... routes require a bearer admin JWT (HS256), signed with the deployment’s SERVER_SECRET_KEY:
See Server security for how to mint one, and the Quickstart for an end-to-end walk through.

​
Resources

​
The proxy is separate

This reference covers the Admin API. Runtime traffic goes to the Proxy plane (:8081) on the format-specific routes — POST /{consumer_slug}/v1/chat/completions, /v1/messages, /v1/responses, and the Gemini /v1beta/models/{model}:generateContent — authenticated with the consumer’s X-AG-API-Key (or an OAuth2/OIDC token), not the admin JWT. See Architecture and the Quickstart.