WSO2 API Manager November 2025 Release: Powering Agentic Applications Through APIs

APIs are the foundation of modern businesses. As AI reshapes how we use software systems, enterprises need innovative and intelligent ways of consuming AI APIs and for making their systems available to AI agents. The November 2025 release of WSO2 API Manager 4.6.0 addresses this by delivering an intelligent, universal API management platform built for the AI era.

This release delivers an enhanced AI Gateway (adding support for managing MCP tools), enhanced support for federated API gateways through a universal API management interface, and enhanced support for deeper API analytics and monetization capabilities.

Introducing the MCP gateway 

Businesses are now building AI agents, which require exposing their APIs as MCP tools. These tools need to be secured, controlled, and governed appropriately.

This release adds the MCP proxy feature into WSO2’s AI Gateway. Organizations can now securely expose their MCP tools to AI agents. It also introduces the ability to automatically convert any REST API into an MCP server. This enhancement makes your existing APIs instantly available to AI agent frameworks as standard tools without handwritten code.

These capabilities accelerate agent adoption and allow organizations to enforce consistent, enterprise-grade governance, including security policies and rate-limiting, on all agent-driven interactions.

This feature was added to Bijira, WSO2’s API management SaaS platform, earlier this year (and our consumers loved it) and is now being introduced in the software release.

Enhanced AI gateway and guardrails

To support diverse, multi-cloud AI strategies, we have enhanced the LLM proxy feature of our AI Gateway to have out-of-the-box support for major AI service providers. This release adds native integrations for:

• AWS Bedrock
• Azure AI Foundry
• Gemini
• Anthropic

This allows you to manage models from multiple vendors through a single unified interface, applying consistent policies across your entire AI ecosystem.

Unchecked AI inputs and outputs can introduce significant compliance and reputational risks. To ensure AI is used safely and responsibly, we’ve introduced a suite of advanced AI guardrails. They help you automate compliance and protect your brand by preventing unsafe or low-quality AI responses from reaching your customers. New additions include integrations with AWS Bedrock Guardrail and Azure Content Safety, alongside powerful built-in policies for Regex-based PII Masking, Semantic Prompt Guarding, and JSON Schema Validation.

Universal API management with federated API gateways

As organizations scale, APIs often become scattered across various gateways, creating operational silos and inconsistent governance. Our enhanced API gateway federation capabilities provide a single control plane to manage this complexity.

With this release, we are introducing automated API discovery for a wide range of third-party gateways, including:

• AWS API Gateway
• Azure API Gateway
• Kong
• Envoy Gateway

This allows you to onboard APIs from across your organization into the WSO2 API Manager Control Plane in minutes. From there, you can manage the API lifecycle and gain complete visibility across your entire API estate, ensuring global compliance with API standards, best practices, and lower operational costs. 

Enhanced API analytics and monetization with Moesif

To truly understand the value and impact of your APIs, basic monitoring is not enough. That's why we’re thrilled to announce a revolutionary step forward in our API analytics capabilities. WSO2 has acquired Moesif, a market-leading API analytics and monetization platform, which is now integrated as the new default API analytics solution for WSO2 API Manager.

This integration moves beyond simple traffic metrics to provide deep, product-focused analytics on user behavior, engagement funnels, and retention. With persona-based dashboards and unified visibility across all WSO2 and third-party gateways, you can align stakeholders and make smarter, data-driven decisions about your API products.

With the acquisition of Moesif, WSO2 API Manager now enables organizations to turn their APIs into revenue-generating assets. By embedding Moesif’s deep analytics capabilities directly into the API management lifecycle, API owners can define usage-based pricing models (such as pay-as-you-go or tiered plans) and automate billing workflows all from within their existing API gateway and portal. This empowers companies to not only operate their APIs efficiently and securely but also to package them as products, measure consumption, and unlock new business models from their API ecosystem.

Fortifying the core for enterprise scale and reliability

Alongside these major new features, we have continued to harden the core platform to meet the demands of massive scale enterprise operations. Key enhancements include: 

• High Scale Distributed Throttling: A new centralized, fault-tolerant throttling model for massive scale API traffic across distributed gateway clusters. This ensures consistent policy enforcement, protects your backend services, and helps you meet your SLAs reliably.
• Enhanced Gateway Monitoring: Gain real-time visibility into the health and deployment status of all your gateways directly from the portals. This significantly reduces troubleshooting time and provides the confidence you need to operate at scale.
• Streamlined Tenant Management: We've improved the integration with WSO2 Identity Server (7.x family) by enabling tenant sharing. This centralizes tenant administration across both products, reducing administrative overhead and improving security by minimizing the risk of misconfigurations.

The November 2025 release of WSO2 API Manager provides the comprehensive, forward-looking platform you need to succeed in the modern digital landscape. We empower you to harness the power of AI, control your entire API ecosystem, and turn data into actionable intelligence and revenue streams.

Please visit the product download page for more information about available download options and distributions.