Oracle Cloud Infrastructure API Management

Developers can choose from a wide range of tools to create API descriptions in OpenAPI format

Support for the widely recognized OpenAPI standard to describe and create APIs, enabling third-party developers to easily adopt organization APIs

API descriptions can be quickly prototyped and tested by development teams with early feedback capabilities

Validate API requests to ensure they meet specified requirements

API teams can monitor the traffic and analytics of their APIs based on the usage plan and subscriptions to analyze usage patterns and unlock new revenue streams by monetizing APIs

Highly available virtual network appliance that can receive API calls at scale and route them to OCI back-end services, such as load balancers, compute, Kubernetes, and serverless functions

API developers can restrict API access within a private network (a regional subnet) or enable API access from the internet based on application requirements

Serverless APIs using OCI API Gateway and Oracle Functions can automatically scale up and scale down resources based on demand, eliminating infrastructure operations

Edit API specifications directly within the OCI console with Git integration, automatic versioning, personalization, and built-in integration with OCI services

SDK integration for APIs on API Gateway to simplify client development

API managers can manage subscriptions and entitlements, enabling API consumers to subscribe to APIs

API managers can create usage plans within API Gateway and define API access tiers

Cache API responses to improve performance and reduce backend load

Create APIs that support cross-origin resource sharing (CORS) for web page interoperability

Secure APIs using JSON Web Tokens provided by Oracle Identity Cloud Service, Okta, Auth0, and other third-party identity providers

Used as a common enforcement point for apps and APIs as well as a means to proxy authentication for applications unable to support the OpenID Connect flows directly

Rate limiting for APIs can throttle traffic to back-end services, controlling exposure to the internet and protecting against denial-of-service attacks