APIEdge
An on-premise, multi-tenant API gateway with a web console for designing, securing, publishing, debugging and monitoring APIs, using no-code and low-code tools. Python and FastAPI, Apache-2.0.
Early development. APIEdge's README describes 0.1 pre-releases. As of 9 November 2026 the GitHub releases page lists no release or pre-release, and the repository has no tags, so install from source. Expect changes, and do not treat it as production-ready.
Source on GitHubReleasesIssues
Available now
As listed in the project README:
- Gateway runtime: per-tenant routing, weighted load balancing, timeouts and retries, verified TLS to upstreams, SSRF guard at connect time, lifecycle enforcement, hot reload.
- Products, APIs, routes and policies, with lifecycle management and no-code form editors.
- Policies: API key, JWT validation, rate limits and quotas, transforms, CORS, IP allow and deny, response cache, mock responses.
- Packet inspector: opt-in captures, policy-by-policy traces, live view, masking, HAR export, replay.
- Analytics: traffic, latency and error dashboards, CSV export, Prometheus metrics.
- Security: role-based access control on every admin route, tenant isolation in the data layer, TOTP multi-factor sign-in, audit log. The project says it is designed against the OWASP Top 10, the OWASP API Security Top 10 and ASVS level 2; that is a design goal, not a certification.
- Runs on Windows, Linux and macOS, with one-click installers, pip, Docker or Compose, and Helm.
Upcoming Not available yet
- Drag-and-drop policy flow builder
- Sandboxed Python script policies
- OpenAPI import and export
- Plans and consumers
- Developer portal
- Enterprise capabilities listed in the feature parity matrix
Quick start
You need Python 3.11, 3.12 or 3.13. The installer downloads other packages from PyPI and checks each file against pinned sha256 hashes. Node.js is not needed.
git clone https://github.com/OpenEdge-Labs/APIEdge.git
cd APIEdge
| Windows | macOS | Linux |
|---|---|---|
double-click install.bat | double-click install.command | run ./install.sh |
The installer creates a virtual environment and the database, asks for the first admin password (or generates one and shows it once), then starts APIEdge and opens the console at http://localhost:8080/. Run it again to upgrade or repair.
Other ways to run it
- pip wheel: shipped with releases as
apiedge-<version>-py3-none-any.whl. No release exists yet. - Docker and Compose: multi-arch image definition in the repository. The installation guide states that no image is published to a registry yet, so build it from source.
- Helm: chart in
packaging/helm/apiedgeof the repository.
Steps for each are in the installation guide.
Verifying releases
There is no release to verify yet. The installation guide says each release will contain SHA256SUMS (and SHA256SUMS.asc when signed) and a CycloneDX software bill of materials, apiedge-<version>.cdx.json. See section 12 of the installation guide.
Documentation and source
- Documentation home, installation guide
- Security and OWASP mapping
- Changelog, feature parity matrix
- Source code, releases, issues
Licence: Apache License 2.0.