# Management API (/docs/apis/management)

The MonoCloud Management API provides endpoints for configuring and managing identity infrastructure, including clients, protected resources, users, groups, security controls, cryptographic keys, mTLS configuration, and platform settings within the MonoCloud platform.

Version 0.0.1, OpenAPI 3.1.1. [Download the OpenAPI document](/docs/apis/management/openapi.json).

Base URL: `https://{tenant}.{region}.monocloud.com/api`, where `{tenant}`, `{region}` (one of us, eu, in) come from your tenant. Authentication: send your Management API key in the `X-API-KEY` header.

## Sections

- [Clients](/docs/apis/management/clients/GetAllApplications), 14 endpoints: Create and manage OAuth 2.0 and OpenID Connect client applications, including credentials, flows, and security settings.
- [Resources](/docs/apis/management/resources/GetAllApiResources), 34 endpoints: Manage protected resources such as APIs, scopes, and access policies.
- [Users](/docs/apis/management/users/GetAllUsers), 53 endpoints: Create, manage and maintain user identities, credentials, and profile information.
- [Groups](/docs/apis/management/groups/GetAllGroups), 5 endpoints: Organize users into groups for access control, policy enforcement, and assignments.
- [Trust Stores](/docs/apis/management/trust-stores/GetAllPkiTrustStores), 22 endpoints: Manage trusted certificate authorities and revocation policies used for mTLS authentication and secure service-to-service access.
- [Keys](/docs/apis/management/keys/GetAllKeyMaterials), 3 endpoints: Manage cryptographic key materials used for signing, encryption, and token validation.
- [Options](/docs/apis/management/options/FindAuthenticationOptions), 14 endpoints: Configure platform-level security, authentication, and behavioral settings.
- [Branding](/docs/apis/management/branding/FindPageBrandingOptions), 6 endpoints: Configure branding for hosted pages and system-generated notifications, including page appearance and email/SMS templates.
- [Logs](/docs/apis/management/logs/GetAllLogs), 2 endpoints: Query and inspect authentication, authorization, and system activity logs for auditing and troubleshooting.
- [Network Zones](/docs/apis/management/network-zones/GetAllNetworkZones), 9 endpoints: Define IP address ranges and regional zones that can be referenced by policies to allow or restrict access.