WSO2 API Manager Documentation

WSO2 API Manager is a complete platform for building, integrating, and exposing your digital services as managed APIs in the cloud, on-premise, and hybrid architectures to drive your digital transformation strategy.

New to API Manager? Take our 15-minute quick start guide to design, deploy, and consume your first API.

Design & Manage APIs

Build, iterate, and apply policies to your APIs and API products.

API Design

Toolkit to design, document, and mock REST, GraphQL, and AsyncAPI specifications. Create AI APIs and use the AI-powered Design Assistant to generate APIs from natural language.

Discover APIs

Explore and subscribe to APIs and MCP Servers.

API Developer Portal

The hub for Application Developers. Discover a catalog of available APIs and MCP Servers, subscribe your applications, and manage your API keys and credentials.

Run APIs

Deploy and manage the runtime environment for your API traffic.

API Gateway

Secure, manage, and scale your API traffic. Learn to deploy the runtime, enforce security policies, and manage deployments.

AI Gateway

Enterprise-grade gateway for AI workloads. Secure, monitor, and control access to LLMs and AI services with cost controls, multi-provider routing, observability, and policy enforcement. Transform APIs into AI-callable tools and manage AI interactions with centralized governance.

Govern APIs

Oversee and control the security, usage, and automation of your API ecosystem.

API Security

Secure APIs with design-time audits and runtime enforcement. Manage authentication, authorization, and tokens using the Key Manager.

API Analytics & Monetization

Track usage, monitor performance, and configure billing. Gain insights and govern your API products.

APIOps

Automate your API lifecycle and governance. Use the command-line tool to script operations and enforce standards.

Administration

Configure and manage the core system, tenants, and other entities.

Administration & Governance

Configure the platform: manage users, tenants, and system-wide policies like rate limiting. Register Gateways and Key Managers.