Open Source API Management
An API gateway sits in front of everything you publish, so it sees every request, holds your auth, and becomes the single point that can take all your services down at once - which makes understanding exactly what it does to traffic non-negotiable. The open source gateways below let you read the routing, rate-limit, and auth logic instead of trusting a black box, and run on your own infrastructure so the layer that fronts your APIs isn't itself a third-party dependency you can't inspect.
Strapi
Model content visually and Strapi generates REST and GraphQL APIs with a self-hosted admin
Kong
Cloud-native API, LLM, and MCP gateway with plugin-based traffic control
Ory Hydra
OpenID Certified OAuth 2.0 and OpenID Connect server for SSO, API access, and machine-to-machine authorization
Windmill
Code-first platform for turning scripts into internal APIs, jobs, workflows, webhooks, and UIs
Apache APISIX
Dynamic, real-time API gateway with AI proxying, load balancing, and traffic control
Ory Kratos
API-first identity and user management for login, registration, recovery, verification, and profile flows
Unleash
Open-source feature management platform for targeted rollouts, feature flags, and self-hosted control
Tyk
Open source API gateway for REST, GraphQL, TCP, and gRPC with rate limiting, auth, and analytics
KeystoneJS
Define a content schema in code and get a GraphQL API plus an admin UI for Node.js