API Manager



The #1 open source hybrid API management platform

WSO2 API Microgateway   

A cloud-native, developer-centric, decentralized API gateway for microservices.

Find out more >
WSO2 Named a Leader
in The Forrester WaveTM:
API Management Solutions, Q3 2020
The solution particularly well suits buyers with strategies that combine integration, APIs, and microservices…
Download Report
Forrester WaveTM: API Management Solutions, Q3 2020
At a glance

WSO2 API Manager

WSO2 API Manager is a fully open-source full lifecycle API Management solution that can be run anywhere. It can be deployed on-prem, on a private cloud, is available as a service on cloud or deployed in a hybrid fashion where its components can be distributed and deployed across multiple cloud and on-prem infrastructures.

It comprises of a cloud native API gateway and provides a Kubernetes operator for easily converting raw microservices into managed APIs. API Manager integrates with service meshes and provides a full fledged management plane and control plane for managing, monitoring and monetizing APIs and API products.

Features >Solutions >Road Map >
What's New
API Manager now integrates with Istio
Find out more >


Reduce technology risk

Reduce technology risk with extensible open source platform, rich documentation and community contributions.

Fit into multiple Architectures

Designed to fit into Monolithic and Microservice Architectures with gateway and microgateway capabilities.

Data-driven decisions

Make data-driven decisions through API usage, analytics and insights.

API Security

Granular access control provides security down to the API level.

On-premise and Cloud or both

The flexibility to deploy on-premise, use the public cloud, or both. Easily migrate in between these environments.

Reduce future investments

Full Lifecycle API Management reduces need for future investments.

Increase Team efficiency

Integrated platform increases team capabilities and efficiency.


WSO2 API Manager

WSO2 API Manager is an open source enterprise-class solution that supports API publishing, lifecycle management, application development, access control, rate limiting and analytics in one cleanly integrated system.

WSO2 API Management Architecture


API Gateway and Microgateway

Secure, low-latency access to microservices via WSO2 API Microgateway eliminates the need for a central gateway by enabling enterprises to apply API management policies in a decentralized fashion.

Hybrid API Management

Hybrid SaaS API management solutions enable you to get the best of both worlds, by delivering the benefits of on-premise, with minimal infrastructure overhead of cloud.

Integration with Istio

Integrates out-of-the-box with Istio to allow APIs from the service mesh to be securely exposed and managed.

API Security

Authenticate and authorize API requests from any client or device type making requests to resource servers operating on traditional and microservice architectures.

API Store (Developer Portal)

An API marketplace incorporates business and human aspects that encourage API developers by providing tools, documentation, incentives such as monetization and supporting activities like evangelism, workshops, and hackathons.

Collaborative API and Application Lifecycle Management

Enables the design, implementation and documentation of APIs with business planning. Facilitates the management of the API Lifecycle across environments, data centers, and regions.

Business Insights and Anomaly Detection

Monitors system behavior, as well as API and application usage at operations and business levels.

API operator for Kubernetes

Allows deploying APIs in Kubernetes for individual microservices and composes groups of multicroservices into individual APIs. The API Microgateway gets deployed in Kubernetes through this operator for Kubernetes.

More Info >

GraphQL services as APIs

GraphQL services can be exposed as managed APIs through the WSO2 platform, allowing authentication, operational level authorization, rate limits and analytics for queries, mutations and subscriptions.

API Products

Productize and monetize APIs by selectively choosing operations of one or more APIs to create API products. Provides greater flexibility and better options for API product managers to maximize the value of APIs.

API Controller

A command-line tool which interconnects WSO2 API Manager, WSO2 Microgateway, and WSO2 API Operator for Kubernetes providing greater flexibility to create CI/CD pipelines for APIs.


API Gateway/Microgateway

Supports both forms of centralized and decentralized Gateway capabilities with high scalability characteristics to cater traditional and modern enterprise architectures.



Enables developers to discover APIs, test them before consumption, calculate monetization, get feedback and make feature requests.


Key Manager

The Key Manager is the STS (Security Token Service) that issues tokens that can be used by resource servers for authentication and authorization of requests. It supports a wide range of OAuth grant types and is capable of issuing both opaque and signed self contained tokens.



A structured GUI designed for API creators to develop, document, scale and version APIs, while also facilitating more API management-related tasks such as publishing APIs, monetization and analyzing statistics.


Traffic Manager

Helps users to regulate API traffic, make APIs and applications available to consumers at different service levels, and secure APIs against security attacks. The Traffic Manager features a dynamic throttling engine to process throttling policies in real-time, including rate limiting of API requests.



An Eclipse-based SOA development environment. Developer Studio allows developers to define a project representing a complete Composite Application (C-App) spanning multiple products and features.



API Manager integrates with the WSO2 Analytics platform to provide reports, statistics and graphs on the APIs deployed in WSO2 API Manager. Enable Alerts to monitor APIs and react on anomalies. Gain insights by geography, user categories and more.


WSO2 API Manager Success Stories


West uses WSO2 to facilitate nearly 300 million unique interactions every month, creating complex, context-aware interactive voice response systems for customer support.


After launching WSO2 API Management platform, Qantas increased the number of APIs published by its teams by tenfold, saw a 500% increase in the volume of managed API traffic.


ZeOmega uses WSO2 to handle the complete API management lifecycle and push out secure APIs for their real-time web services for their health management solutions.