you can run docker service commands on the master node of a swarm in order to run services on that swarm while you cant run it against a swarm mode.
You can also configure the Docker daemon (the docker daemon that is the master node of the swarm) to listen on TCP ports in order to externally expose the Docker API.