Skip to main content
All mutating and read operations are routed through POST /manage and require both of the following:
  • projectId field in the JSON body.
  • x-project-key header containing the project access key.
  • x-service-version header set to v1.
The service verifies the credentials before running the requested action. Invalid credentials return 403 Forbidden with a JSON error payload. 
curl -X POST "https://service.usemoss.dev/manage" \
  -H "Content-Type: application/json" \
  -H "x-service-version: v1" \
  -H "x-project-key: moss_access_key_xxxxx" \
  -d '{
    "action": "listIndexes",
    "projectId": "project_123"
  }'