> ## Documentation Index
> Fetch the complete documentation index at: https://developers.authlete.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Service Management

> Managing services — authorization server instances — with the Management API: service CRUD operations, configuration retrieval, and the management console.

A **service** represents one authorization server instance. All settings that define your authorization server's behavior — supported grant types, token expiration, signing keys, endpoint configuration, and so on — belong to a service. Clients and tokens always live inside a service.

## Service Management APIs

Service retrieval, listing, and updates are served on the Authlete API host:

| API                                                                  | Purpose                        |
| -------------------------------------------------------------------- | ------------------------------ |
| [/service/get](/api-reference/service-management/get-service)        | Retrieve a service's settings. |
| [/service/get/list](/api-reference/service-management/list-services) | List services you can access.  |
| [/service/update](/api-reference/service-management/update-service)  | Update a service's settings.   |

Day-to-day configuration is usually done in the [Authlete Management Console](https://console.authlete.com); the APIs are useful for automation such as infrastructure-as-code pipelines and environment replication.

<Warning>
  [/service/update](/api-reference/service-management/update-service) replaces the whole service configuration with the request body. Retrieve the current settings with [/service/get](/api-reference/service-management/get-service) first, modify only the fields you need, and send the complete object back.
</Warning>

### Creating and deleting services (IdP Endpoint)

Service creation and deletion live on a **separate host — the IdP Endpoint** — and require an **Organization Token**. On Shared Cloud the IdP host is `login.authlete.com`.

| Operation        | Endpoint (Shared Cloud)                              |
| ---------------- | ---------------------------------------------------- |
| Create a service | `POST https://login.authlete.com/api/service`        |
| Delete a service | `POST https://login.authlete.com/api/service/remove` |

On Dedicated Cloud and Self-Managed (on-premises) deployments, replace `login.authlete.com` with the IdP host of your environment.

Calling service creation directly against the Authlete API host creates the service but does not link it to your organization — the service will not appear in the Console and cannot be operated with Organization Tokens. Always use the IdP Endpoint for creation and deletion.

## What a Service Defines

Service settings cover, among others:

* Supported grant types, response types, and scopes
* Token settings — formats and expiration of access tokens, refresh tokens, and ID tokens
* Endpoint URLs published in the discovery document
* Keys for signing and encryption (JWK Set)

For a walk-through of the individual settings, see [Service Management Guide](/configuration-reference/service-settings/service-management).

## Next Steps

* [Client Management](/get-started/concepts/client-management) — registering clients in your service
* [Token Management](/get-started/concepts/token-management) — operating on tokens issued by your service