API Overview
High-level API surface for operators and integrators.
Base path: /api
Auth
If you expose the API, secure it at the network layer (reverse proxy, firewall, or VPN). No public auth is provided by default.
Health
GET /health— liveness.
Middlewares
GET /middlewaresPOST /middlewaresGET /middlewares/:idPUT /middlewares/:idDELETE /middlewares/:id
Services
GET /servicesPOST /servicesGET /services/:idPUT /services/:idDELETE /services/:id
Resources
GET /resourcesGET /resources/:idDELETE /resources/:id- Assign/remove middlewares:
POST /resources/:id/middlewares,POST /resources/:id/middlewares/bulk,DELETE /resources/:id/middlewares/:middlewareId - Assign/remove service:
GET/POST/DELETE /resources/:id/service - Router config:
PUT /resources/:id/config/http|tls|tcp|headers|priority|mtls|mtlswhitelist
Data source
GET /datasource,GET /datasource/active,PUT /datasource/active,PUT /datasource/:name,POST /datasource/:name/test
Plugins
GET /plugins,GET /plugins/catalogue,GET /plugins/:name/usage- Install/remove:
POST /plugins/install,DELETE /plugins/remove - Static config path:
GET/PUT /plugins/configpath
Traefik explorer
GET /traefik/overview|version|entrypointsGET /traefik/routers|services|middlewares(type query:http|tcp|udp|all)GET /traefik/data
mTLS
GET /mtls/config,PUT /mtls/enable|disable- CA:
POST /mtls/ca,DELETE /mtls/ca - Certs:
GET/POST /mtls/clients,GET /mtls/clients/:id,GET /mtls/clients/:id/download,PUT /mtls/clients/:id/revoke,DELETE /mtls/clients/:id - Plugin check/config:
GET /mtls/plugin/check,GET/PUT /mtls/middleware/config
Config proxy (Traefik HTTP provider)
GET /traefik-configPOST /traefik-config/invalidateGET /traefik-config/status- Same endpoints under
/api/v1/*for Traefik compatibility.
Screenshot placeholder — API surface summary or Swagger link (if added).