Zuplo
API Management

Programmable API Management

Stop stitching together a gateway, a portal, auth, and analytics. Everything it takes to run an API in production on one platform — programmable in TypeScript when the defaults don't fit, and now running your AI and MCP traffic too.

API Gateway

Inbound Policies

API Key Auth Active
Rate Limit · 100/min Active
Request Validation Active
CORS Policy Active

Everything you need to manage APIs at scale.

Authentication, rate limiting, developer portals, MCP servers, and full programmability — in one platform.

Programmable

Never limited by your gateway's config.

Configure the standard policies without code. When defaults don't fit, TypeScript is the escape hatch — not the starting point.

Learn more
Dev Portal

Developer portals that don't suck.

Customers subscribe, manage keys, and see usage — always in sync with your API.

Learn more
MCP Server

Turn your API into an MCP server.

Your OpenAPI spec becomes MCP tools that agents can discover and call safely.

Learn more
Rate Limit

Rate limiting, your way.

Throttle by endpoint, key, user, or any condition — simple limits now, programmable logic when you need it.

Learn more
Authentication

Authentication, without the pain.

Every auth method, production-grade out of the box — and secret scanning catches leaks before they ship.

Learn more
Open API

One standard through the lifecycle.

Built on OpenAPI, shipped via git commit — governance that doesn't slow teams down.

Learn more

Programmable

When presets aren't enough, drop into code.

Every policy is just a TypeScript function — customize it, ship it via git. Here's role-based access in practice.

TypeScriptcustom-rbac-policy.ts
export default async function policy(
  request: ZuploRequest,
  context: ZuploContext,
  options: { role: string }
) {
  if (request.user.data.roles.includes(options.role)) {
    return request;
  }
  return new Response("User does not have the correct permissions", {
    status: 403,
  });
}

Need a hand writing your first policy?

Spend 30 minutes with a Zuplo architect — we'll map your APIs and sketch the policy you need, in TypeScript.

Frequently Asked Questions

Learn about API management and how Zuplo helps your team build better APIs.

Want a demo of Zuplo? Talk to an API expert

Ship API management your way.

Free to start. Production-ready on day one. Built for teams that don't want to write XML.