16 open-source API Management vendors.
Open-source software for API Management that you can self-host, with auditable source code — regardless of the developer's headquarters.
- Apache APISIXNon-EU vendor
Open-source API gateway and management platform under the Apache Foundation
United States
- ApimanNon-EU vendor
Open-source API management platform with policy-driven governance and security
United States
- BrunoSelf-hosted / open source
Open-source, local-first API client (MIT) with no cloud component; stores collections as plain text files in your own Git repository.
India
- Emissary-ingressSelf-hosted / open source
CNCF Incubation project (community-governed, no single controlling company): Kubernetes-native API gateway on Envoy Proxy, originally by Ambassador Labs.
United States
- FusioSelf-hosted / open source
Open-source API management platform for building and managing REST APIs
Germany
- Gloo EdgeNon-EU vendor
Envoy-based API gateway by Solo.io (Cambridge, US) for microservice routing, traffic management and API lifecycle.
United States
- Gravitee.ioNon-EU vendor
Gravitee is a US-headquartered (Denver, CO) open-source API and event management platform, originally founded in Lille, France in 2015. It offers an API gateway, developer portal, and agentic API management capabilities. Raised $125M+ total, with a $60M Series C in May 2025 led by Sixth Street Growth.
United States
- HoppscotchNon-EU vendor
Open-source, self-hostable API development environment; commercial SaaS arm based in Thrissur, Kerala (India).
India
- InsomniaNon-EU vendor
API testing client for REST/GraphQL/gRPC; open-source core, owned by Kong Inc. (San Francisco) since 2019.
United States
- Kong GatewayNon-EU vendor
Open-source API gateway with high performance, available as cloud or self-hosted
United States
- KrakenDSelf-hosted / open source
Spanish high-performance API gateway built in Go with declarative configuration
Spain
- MicrocksSelf-hosted / open source
CNCF Incubating open-source platform (no single controlling company) for mocking and contract-testing APIs based on OpenAPI/AsyncAPI specifications.
United States
- Ory OathkeeperEU sovereign
Open-source Identity & Access Proxy (Germany) for API authentication, authorization and policy-driven request mutation; self-hosted or via Ory Network with EU data residency.
Germany
- STOASelf-hosted / open source
French open-source (Apache 2.0) API gateway by CAB Ingénierie connecting legacy/SOAP APIs and AI agents via MCP, deployable on-premise for full EU sovereignty (DORA/NIS2/GDPR).
France
- TykNon-EU vendor
British open-source API gateway and management platform with high scalability
United Kingdom
- WSO2 API ManagerNon-EU vendor
Open-source API management platform with gateway, developer portal and analytics
United States · owner in Sweden