Tenant APIs
Workspace APIs the dashboard uses for your account.
Tenant APIs are the APIs Amplify Up uses for your workspace — sites, pages, content, audiences, and settings. They require a signed-in Amplify Up session. They are not called by the Node SDK on a visitor-facing site.
Site integrations should use:
- Edge APIs — published layouts
- Event APIs — page views and custom events
- The Node SDK — the usual path for both
What they cover
Typical workspace operations:
- Sites and tracking IDs
- Composer pages (save and deploy)
- Content sources and bindings
- Audiences
- Organization members and roles
These calls stay inside the Amplify Up dashboard, or are made by an automation key created in workspace settings. They are not documented as an HTTP catalog for custom clients, and they do not use public tracking IDs.
Send Authorization: Bearer auk_… for automation. A signed-in session still works in the dashboard. Anonymous calls are rejected.
Publish, cache invalidation, and dashboard APIs are not a public integration surface. If you need to automate something the dashboard does, create an automation key — do not call these routes from a customer site.