> For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://docs.merge.dev/merge-gateway/management-api/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.merge.dev/_mcp/server. # Management API > Reference for the Management API: API keys with spend limits, projects with routing, budgets, controls, and guardrail overrides, organization routing policies, provider credentials, export destinations, organization settings, security rules, usage rollups, and lookups. The Management API administers your organization's API keys, projects, routing policies, provider credentials, export destinations, settings, security rules, and usage from code, such as Pulumi, Terraform, or one-off scripts. The endpoint reference in this section has the full schemas. ## Base URL and authentication ```text https://api-gateway.merge.dev ``` Authenticate with a management key from **API keys → Management keys** in the [dashboard](https://gateway.merge.dev/api-keys), shown once. It acts only on its own organization and can't call model endpoints. ```http Authorization: Bearer mgmt_... ``` ## Scopes A management key's scopes are dashboard permission names. A new key gets the permissions its creator holds, so it can do through the API what that person can do in the dashboard. A call without the scope it needs returns `403`. A key keeps the scopes it was minted with, so mint a new one to pick up permissions granted later. | Area | Endpoints | Writes need | Reads also accept | | ------------------- | -------------------------------------------------------------------------- | -------------------------------------------- | ----------------------------------------------------------------------------------------- | | API keys | `/v1/keys` | `manage_api_keys` | `view_api_keys`, `view_billing` | | Projects | `/v1/projects`, `/controls`, `/models` | `manage_projects` | | | Routing policies | `/v1/routing-policies` | `manage_routing` | Any active `mg_` API key of the organization, except in Merge for Workforce organizations | | Credentials | `/v1/credentials` | `manage_credentials` | `view_credentials` | | Export destinations | `/v1/export-destinations` | `manage_telemetry_export` | `view_telemetry_export` | | Organization | `/v1/organization` | `manage_org_settings` | `view_org_settings` | | Security rules | `/v1/dlp-rules`, `/v1/blocklist-rules` | `manage_org_settings` | `view_org_settings` | | Security rules | `/v1/organization/pi-settings` | `manage_security_rules` | `view_security_rules` | | Security rules | `/v1/projects/{project_id}/pi-settings`, `/dlp-settings` | `manage_security_rules` or `manage_projects` | `view_security_rules` | | Usage | `/v1/organization/usage` | | `view_billing` | | Usage | `/v1/projects/{project_id}/usage` | | `view_billing`, `manage_projects` | | Lookups | `/v1/organization/models`, `/v1/organization/vendors`, `/v1/model-aliases` | | `view_routing`, `manage_routing` | | Lookups | `/v1/guardrails` | | `view_security_rules`, `manage_security_rules` | | Lookups | `/v1/credits` | | `view_billing`, `manage_billing` | | Lookups | `/v1/members` | | `view_users`, `manage_users` | Keys minted before scopes became permission names hold `manage_keys` and `read_usage`, which work as `manage_api_keys` and `view_billing`. Walkthroughs: [Management API keys](/merge-gateway/automation/api-keys) and [Projects API](/merge-gateway/automation/projects-api). Creating an API key needs a payment method on file, except on the Free plan. There's no rotate endpoint: create the new key, then delete or disable the old one. ## Errors An error response has a `detail` field. It's either a string or an object with a `code` to branch on and a `message`; some objects add fields, such as `count`. ```json {"detail": {"code": "payment_method_required", "message": "Add a payment method before creating API keys."}} ``` A request body or query that fails validation returns `422` with `detail` as a list, one entry per problem, each with `loc` (where), `msg`, and `type`. A missing or invalid key returns `401`. See the [codes worth branching on](/merge-gateway/errors#management-and-platform-apis). ## Next steps #### [Management API keys](/merge-gateway/automation/api-keys) Create and manage API keys programmatically #### [Projects API](/merge-gateway/automation/projects-api) Manage project routing, budgets, and usage > Build once. Connect to every API, tool, and LLM. Ship products and agents to production without owning the integration stack. ## API Docs - Management API > API Keys [List Keys](https://docs.merge.dev/merge-gateway/management-api/api-keys/list-keys.md) - Management API > API Keys [Create Key](https://docs.merge.dev/merge-gateway/management-api/api-keys/create-key.md) - Management API > API Keys [Get Key](https://docs.merge.dev/merge-gateway/management-api/api-keys/get-key.md) - Management API > API Keys [Delete Key](https://docs.merge.dev/merge-gateway/management-api/api-keys/delete-key.md) - Management API > API Keys [Update Key](https://docs.merge.dev/merge-gateway/management-api/api-keys/update-key.md) - Management API > Projects [List Projects](https://docs.merge.dev/merge-gateway/management-api/projects/list-projects.md) - Management API > Projects [Create Project](https://docs.merge.dev/merge-gateway/management-api/projects/create-project.md) - Management API > Projects [Get Project](https://docs.merge.dev/merge-gateway/management-api/projects/get-project.md) - Management API > Projects [Delete Project](https://docs.merge.dev/merge-gateway/management-api/projects/delete-project.md) - Management API > Projects [Update Project](https://docs.merge.dev/merge-gateway/management-api/projects/update-project.md) - Management API > Projects [Get Project Controls](https://docs.merge.dev/merge-gateway/management-api/projects/get-project-controls.md) - Management API > Projects [Update Project Controls](https://docs.merge.dev/merge-gateway/management-api/projects/update-project-controls.md) - Management API > Projects [Delete Project Controls](https://docs.merge.dev/merge-gateway/management-api/projects/delete-project-controls.md) - Management API > Routing Policies [List Routing Policies](https://docs.merge.dev/merge-gateway/management-api/routing-policies/list-routing-policies.md) - Management API > Routing Policies [Create Routing Policy](https://docs.merge.dev/merge-gateway/management-api/routing-policies/create-routing-policy.md) - Management API > Routing Policies [Get Routing Policy](https://docs.merge.dev/merge-gateway/management-api/routing-policies/get-routing-policy.md) - Management API > Routing Policies [Delete Routing Policy](https://docs.merge.dev/merge-gateway/management-api/routing-policies/delete-routing-policy.md) - Management API > Routing Policies [Update Routing Policy](https://docs.merge.dev/merge-gateway/management-api/routing-policies/update-routing-policy.md) - Management API > Routing Policies [Set Default Routing Policy](https://docs.merge.dev/merge-gateway/management-api/routing-policies/set-default-routing-policy.md) - Management API > Credentials [List Credentials](https://docs.merge.dev/merge-gateway/management-api/credentials/list-credentials.md) - Management API > Credentials [Create Credential](https://docs.merge.dev/merge-gateway/management-api/credentials/create-credential.md) - Management API > Credentials [Get Credential](https://docs.merge.dev/merge-gateway/management-api/credentials/get-credential.md) - Management API > Credentials [Delete Credential](https://docs.merge.dev/merge-gateway/management-api/credentials/delete-credential.md) - Management API > Credentials [Update Credential](https://docs.merge.dev/merge-gateway/management-api/credentials/update-credential.md) - Management API > Export Destinations [List Export Destinations](https://docs.merge.dev/merge-gateway/management-api/export-destinations/list-export-destinations.md) - Management API > Export Destinations [Create Export Destination](https://docs.merge.dev/merge-gateway/management-api/export-destinations/create-export-destination.md) - Management API > Export Destinations [Get Export Destination](https://docs.merge.dev/merge-gateway/management-api/export-destinations/get-export-destination.md) - Management API > Export Destinations [Delete Export Destination](https://docs.merge.dev/merge-gateway/management-api/export-destinations/delete-export-destination.md) - Management API > Export Destinations [Update Export Destination](https://docs.merge.dev/merge-gateway/management-api/export-destinations/update-export-destination.md) - Management API > Organization [Get Organization Settings](https://docs.merge.dev/merge-gateway/management-api/organization/get-organization-settings.md) - Management API > Organization [Update Organization Settings](https://docs.merge.dev/merge-gateway/management-api/organization/update-organization-settings.md) - Management API > Security Rules [List Blocklist Rules](https://docs.merge.dev/merge-gateway/management-api/security-rules/list-blocklist-rules.md) - Management API > Security Rules [Create Blocklist Rule](https://docs.merge.dev/merge-gateway/management-api/security-rules/create-blocklist-rule.md) - Management API > Security Rules [Get Blocklist Rule](https://docs.merge.dev/merge-gateway/management-api/security-rules/get-blocklist-rule.md) - Management API > Security Rules [Delete Blocklist Rule](https://docs.merge.dev/merge-gateway/management-api/security-rules/delete-blocklist-rule.md) - Management API > Security Rules [Update Blocklist Rule](https://docs.merge.dev/merge-gateway/management-api/security-rules/update-blocklist-rule.md) - Management API > Security Rules [List DLP Rules](https://docs.merge.dev/merge-gateway/management-api/security-rules/list-dlp-rules.md) - Management API > Security Rules [Create DLP Rule](https://docs.merge.dev/merge-gateway/management-api/security-rules/create-dlp-rule.md) - Management API > Security Rules [Get DLP Rule](https://docs.merge.dev/merge-gateway/management-api/security-rules/get-dlp-rule.md) - Management API > Security Rules [Delete DLP Rule](https://docs.merge.dev/merge-gateway/management-api/security-rules/delete-dlp-rule.md) - Management API > Security Rules [Update DLP Rule](https://docs.merge.dev/merge-gateway/management-api/security-rules/update-dlp-rule.md) - Management API > Security Rules [Get Organization PI Settings](https://docs.merge.dev/merge-gateway/management-api/security-rules/get-organization-pi-settings.md) - Management API > Security Rules [Update Organization PI Settings](https://docs.merge.dev/merge-gateway/management-api/security-rules/update-organization-pi-settings.md) - Management API > Security Rules [Reset Organization PI Settings](https://docs.merge.dev/merge-gateway/management-api/security-rules/reset-organization-pi-settings.md) - Management API > Security Rules [Get Project DLP Settings](https://docs.merge.dev/merge-gateway/management-api/security-rules/get-project-dlp-settings.md) - Management API > Security Rules [Update Project DLP Settings](https://docs.merge.dev/merge-gateway/management-api/security-rules/update-project-dlp-settings.md) - Management API > Security Rules [Delete Project DLP Settings](https://docs.merge.dev/merge-gateway/management-api/security-rules/delete-project-dlp-settings.md) - Management API > Security Rules [Get Project PI Settings](https://docs.merge.dev/merge-gateway/management-api/security-rules/get-project-pi-settings.md) - Management API > Security Rules [Update Project PI Settings](https://docs.merge.dev/merge-gateway/management-api/security-rules/update-project-pi-settings.md) - Management API > Security Rules [Delete Project PI Settings](https://docs.merge.dev/merge-gateway/management-api/security-rules/delete-project-pi-settings.md) - Management API > Usage [Get Organization Usage](https://docs.merge.dev/merge-gateway/management-api/usage/get-organization-usage.md) - Management API > Usage [Get Project Usage](https://docs.merge.dev/merge-gateway/management-api/usage/get-project-usage.md) - Management API > Lookups [Get Credits](https://docs.merge.dev/merge-gateway/management-api/lookups/get-credits.md) - Management API > Lookups [List Guardrails](https://docs.merge.dev/merge-gateway/management-api/lookups/list-guardrails.md) - Management API > Lookups [Get Guardrail](https://docs.merge.dev/merge-gateway/management-api/lookups/get-guardrail.md) - Management API > Lookups [List Members](https://docs.merge.dev/merge-gateway/management-api/lookups/list-members.md) - Management API > Lookups [Get Member](https://docs.merge.dev/merge-gateway/management-api/lookups/get-member.md) - Management API > Lookups [List Model Aliases](https://docs.merge.dev/merge-gateway/management-api/lookups/list-model-aliases.md) - Management API > Lookups [Get Model Alias](https://docs.merge.dev/merge-gateway/management-api/lookups/get-model-alias.md) - Management API > Lookups [List Models](https://docs.merge.dev/merge-gateway/management-api/lookups/list-models.md) - Management API > Lookups [Get Model](https://docs.merge.dev/merge-gateway/management-api/lookups/get-model.md) - Management API > Lookups [List Vendors](https://docs.merge.dev/merge-gateway/management-api/lookups/list-vendors.md) - Management API > Lookups [Get Vendor](https://docs.merge.dev/merge-gateway/management-api/lookups/get-vendor.md) - Management API > Lookups [List Project Models](https://docs.merge.dev/merge-gateway/management-api/lookups/list-project-models.md) ## OpenAPI Specification The raw OpenAPI 3.1 specification for this API is available at: - [OpenAPI JSON](https://docs.merge.dev/openapi.json) - [OpenAPI YAML](https://docs.merge.dev/openapi.yaml)