Gravitee.io - OpenSource API Management https://www.gravitee.io/products/api-management
  • Java 66.4%
  • TypeScript 26.7%
  • HTML 4.1%
  • SCSS 1.2%
  • Fluent 0.6%
  • Other 0.8%
Find a file
Andres Osorio 5caade5ba4 chore: reject null pathOperator in V4 HTTP flow selector validation
Why: checkForInvalidSelectors validated path but not pathOperator; explicit null in the request bypassed validation, stored null in the database, and caused an NPE during post-creation sync
2026-05-07 15:43:59 -04:00
.agent-rules chore: add global agent rules and nested AGENTS.md. 2026-04-08 19:35:10 +02:00
.circleci ci: trigger jobs when only gamma modules are updated 2026-05-07 11:38:51 +02:00
.claude chore(claude): correct path reference in CLAUDE.md 2026-04-27 13:47:08 -04:00
.gemini docs: centralize AI agent coding guidelines into AGENTS.md 2026-03-12 13:59:35 +01:00
.github docs: centralize AI agent coding guidelines into AGENTS.md 2026-03-12 13:59:35 +01:00
.run feat(api): allow multi JWT/OAuth2 subscriptions per application (V4 APIs) 2026-03-31 10:56:33 +02:00
assets chore(readme): Changed readme with new branding and improved ux 2025-07-16 17:17:59 +02:00
docker chore(quick-setup): add keys to docker mount 2026-03-25 08:39:37 +01:00
gravitee-apim-bom feat(ratelimit): add Hazelcast rate-limit repository with K8s helm chart 2026-04-29 20:50:46 +02:00
gravitee-apim-common refactor: move based exceptions in apim-common 2026-04-22 10:46:24 +02:00
gravitee-apim-console-webui feat: new filter picker for env logs 2026-05-07 14:02:09 -05:00
gravitee-apim-definition feat: add span attribute redaction for APIs 2026-05-07 10:19:00 +05:30
gravitee-apim-distribution fix: include the scopes when returning the protected resource metadata from the oauth2 policy 2026-04-30 16:20:52 +02:00
gravitee-apim-e2e fix(e2e): fixed e2e / portal SDK generation issues caused by two recent portal-openapi.yaml changes 2026-04-29 15:23:15 +05:30
gravitee-apim-gateway feat: add span attribute redaction for APIs 2026-05-07 10:19:00 +05:30
gravitee-apim-integration-tests test(jwt): add missing edge-case and regression tests for nested claim resolution 2026-04-30 08:49:48 -04:00
gravitee-apim-parent chore: add dependencies for common-configurations 2025-12-01 15:52:58 +01:00
gravitee-apim-perf chore: enforce exact version for Yarn dependencies 2025-12-05 11:33:12 +01:00
gravitee-apim-plugin fix(http-proxy): use HC target host in setServer instead of endpoint defaultHost (#16721) 2026-05-06 10:11:13 +02:00
gravitee-apim-portal-webui fix(portal): add worker-src blob: directive to CSP for Redoc worker support 2026-04-27 14:10:03 +01:00
gravitee-apim-portal-webui-next feat(portal): truncate analytics card labels with overflow counter 2026-05-06 09:27:25 +01:00
gravitee-apim-reporter test(reporter): wire null and non-null security token scenarios into CsvFormatterTest 2026-05-01 09:57:53 -04:00
gravitee-apim-repository fix: members ordering and missing fields in group state 2026-05-07 11:56:30 +02:00
gravitee-apim-rest-api chore: reject null pathOperator in V4 HTTP flow selector validation 2026-05-07 15:43:59 -04:00
gravitee-apim-webui-libs fix(dashboard): allow null bound for number value input 2026-05-06 09:27:25 +01:00
gravitee-gamma fix: remove unused @Path annotation 2026-05-07 14:17:08 +02:00
helm fix(helm): null-safe gateway.cluster.type access in $hzActive 2026-04-30 09:47:17 +02:00
release ci: add a maven release workflow 2026-04-08 12:28:29 +02:00
scripts fix(ci): rewrite paths in lcov.info for sonar ci analysis 2026-03-11 11:35:54 +01:00
.editorconfig style: 🎨 import order constitent with prettier 2024-11-04 13:38:04 +01:00
.gitignore chore: add graphene rules to gitignore 2026-04-08 17:42:48 +02:00
.mergify.yml chore: remove mergify config for 4.7 [skip ci] 2026-04-21 08:19:19 +02:00
.nvmrc chore: update node to 22.12.0 2026-01-21 04:53:08 -05:00
.prettierignore fix: members ordering and missing fields in group state 2026-05-07 11:56:30 +02:00
.prettierrc chore: update ESLint and Prettier configurations for improved linting with nx 2026-02-23 09:54:56 +01:00
.sdkmanrc chore: add .sdkmanrc to configure java 2026-04-22 13:04:39 +02:00
.snyk ci: add a one-step release workflow 2023-06-08 08:21:05 +02:00
.yarnrc.yml feat: migrate to Nx workspace - Step 1 2026-02-16 11:28:54 +01:00
AGENT.md docs: add agent prerequisites skill 2026-01-13 11:47:50 -05:00
AGENTS.md docs: initialize AGENTS.md for Gamma module 2026-04-22 10:46:24 +02:00
CONTRIBUTING.adoc docs(gamma): improve gamma docs for developer experience 2026-04-20 12:27:16 +02:00
jest.config.js chore: initialize gravitee-gamma-control-plane-webui 2026-03-30 10:27:15 +02:00
LICENSE.txt chore: add doc and license file 2021-07-08 11:11:11 +02:00
lombok.config chore: configure lombok to inject new NodeAwareLogger when using @CustomLog annotation 2026-01-08 15:12:43 +01:00
nx.json chore(gamma): add @gravitee/gamma-modules-sdk workspace package 2026-04-17 11:08:01 +02:00
package.json build(gamma): add published @gravitee/gamma-modules-sdk dependency 2026-05-05 18:23:41 +02:00
pom.xml chore(deps): bump gravitee-reactor-native-kafka to 7.0.0-alpha.14 2026-05-07 14:18:29 +02:00
README.md chore(readme): Changed the k8s tool, added images for target, added default credentials 2025-07-17 16:16:36 +02:00
SECURITY.md docs: update the security policy to point to a central doc 2024-03-05 14:51:05 +01:00
Taskfile.dist.yml chore: initialize gravitee-gamma-control-plane-webui 2026-03-30 10:27:15 +02:00
tsconfig.base.json chore(gamma): remove local gamma-modules-sdk package 2026-05-05 18:23:41 +02:00
yarn.lock build(gamma): add published @gravitee/gamma-modules-sdk dependency 2026-05-05 18:23:41 +02:00


Version License LinkedIn Twitter
Commit Activity Last Commit CircleCI Community Documentation

Gravitee API Management (also called Gravitee APIM) is a flexible, lightweight, and blazing-fast Open Source solution that helps your organization control who, when, and how users access your APIs.
Effortlessly manage the lifecycle of your APIs.

Download API Management to document, discover, and publish your APIs.

Different ways to start using Gravitee APIM:

Tool                        Target                        
Gravitee Cloud Azure Logo Google Cloud Logo AWS Logo
Helm Chart Kubernetes Logo AKS Logo GKS LogoEKS Logo Openshift Logo
docker-compose / make Kubernetes Logo

Installation | Documentation | Community | Contributing | License | Website


Getting Started

Do you only have a few minutes or want to try it out without installation or configuration?
Gravitee Cloud has you covered. Try our Saas offer with a free trial today!

If you prefer to use Gravitee APIM on your own infrastructure with Docker, follow the steps below.

  1. Clone the Gravitee APIM repository
   git clone --depth=1 https://github.com/gravitee-io/gravitee-api-management
   cd gravitee-api-management/docker
  1. Start the Gravitee Console, Portal and Gateway with a MongoDB database
  • Run the Make command
  make mongodb
  • Or the Docker command
   cd quick-setup/mongodb && docker compose down -v && docker compose pull && docker compose up -d
  1. Gravitee APIM is now up and running!
    Let's explore some of the subcomponents you've deployed:
  • :4100 - Portal UI ~ A catalog of your APIs, complete with documentation and more.
  • :8084 - Console UI ~ The administrative interface for managing your APIs.
  • :8082 - Gateway ~ Gravitee's powerful API gateway.
  • :8083 - APIM Backend ~ Backend for both the Portal and Console UIs.

Default credentials: admin / admin


What's next? Follow our documentation and learn how to create an API, add a Policy,... and more!

  1. 💡 Tips (Optional)

💡 Tip 1: Use your Enterprise License
If you have an Enterprise License, you can export it as a Base64-encoded environment variable or move your license file into docker/quick-setup/mongodb/.license to gain full access to Gravitee APIM features.

   export LICENSE_KEY=*****

💡 Tip 2: Issue when starting Gravitee APIM
If you're having an issue during .license folder creation (using Rancher Desktop for example), please run:

   make prepare TARGET=mongodb

Features

Hold Nothing Back!
  • Register your API: Create and register APIs in a few clicks to easily expose your secured APIs to internal and external consumers.
  • Configure policies using flows: Gravitee.io API Management provides over 50 pre-built policies to effectively shape traffic reaching the gateway according to your business requirements.
  • Developer portal: Build the portal that your developers want with a custom theme, full-text search, and API documentation.
  • Analytics dashboard: The out-of-the-box dashboards give you a 360-degree view of your API. You can also build your own dashboards from Gravitee.io or use all metrics with external tools like Grafana or Kibana.
  • Register applications: Users and administrators can register applications for consuming APIs with ease. Gravitee.io provides advanced dynamic client registration to link API Management and Access Management effectively.
  • Secured plans: Create plans to define the rate limits, quotas, and security policies that apply to your APIs.