Best API Gateway Software in 2026

In short: Gravitee API Gateway is ranked #1 of 27 as of 4 October 2026, ahead of Kong Gateway and KrakenD API Gateway. The best-ranked option with a free plan is Kong Gateway. The lowest first paid tier on this page is Google Cloud Endpoints at $1.50/mo.

API gateway software gives you a set of options to compare for handling API access and requests. Look at authentication methods, supported protocols, rate limiting, and request transformation across the entries. Deployment model and free-plan availability can also help distinguish the choices, while monthly request limits and paid-from pricing provide further cost and capacity details. Kong Gateway, Apache APISIX, and Tyk Gateway are among the first entries, followed by KrakenD API Gateway. The 22 products are ranked; use that order together with the stated comparison fields to identify which capabilities and deployment considerations matter for your APIs.

27 API gateway software ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.

27ranked
8free plans on this page
$1.50/molowest paid tier
4 Oct 2026last checked
#1 Gravitee API Gateway Top pick · 7.2 Free plan · $2,500/mo #2 Kong Gateway Runner-up · 7.1 Free plan · Free #3 KrakenD API Gateway Also great · 7.1 Free plan · Free
  1. Free plan apiLinuxself-hostedWebWindows
    Free plan
    Yes
    Paid from
    2,500 /mo
    Deployment model
    hybrid
    Supported protocols
    REST, GraphQL, gRPC, SOAP, WebSocket, Server-sent Events, Webhook
    Authentication methods
    Keyless, API Key, Basic Authentication, OAuth2, JWT, Push, mutual TLS (mTLS), OIDC, SAML
    Rate limiting
    Yes
    RecognisedDocumentedFree planPlatforms
    $2,500/mofirst paid tier About Gravitee API GatewayVisit site
  2. Free planFree trial apiLinuxself-hostedWeb
    Free plan
    Yes
    Deployment model
    hybrid
    Supported protocols
    REST, HTTP, Kafka, WebSockets, gRPC, GraphQL, UDP, TCP, TLS
    Authentication methods
    Basic Auth, HMAC, JWT, Key Auth, LDAP, mutual TLS, OAuth 2.0, OpenID Connect, SAML, Vault
    Rate limiting
    Yes
    RecognisedDocumentedFree planPlatforms
  3. Free plan LinuxmacOSself-hostedWindows
    Free plan
    Yes
    Deployment model
    hybrid
    Supported protocols
    REST, HTTP, WebSockets, SOAP, gRPC, GraphQL, AMQP, Kafka, NATS
    Authentication methods
    JWT, client credentials, OAuth2, OpenID Connect, API keys, Basic Authentication, mTLS
    Rate limiting
    Yes
    RecognisedDocumentedFree planPlatforms
  4. 4 7.0
    Free planFree trial apiLinuxself-hostedWeb
    Free plan
    Yes
    Deployment model
    hybrid
    Supported protocols
    REST, SOAP, GraphQL, gRPC, TCP, HTTP/HTTPS, WebSockets, Server-Sent Events (SSE)
    Authentication methods
    API keys, bearer tokens, JWT, OIDC, Basic Auth, client certificates, mTLS, custom plugins
    Rate limiting
    Yes
    RecognisedDocumentedFree planPlatforms
  5. Free plan Linuxself-hosted
    Free plan
    Yes
    Deployment model
    self-hosted
    Supported protocols
    HTTP, HTTPS, HTTPPROXY, HTTPSPROXY, TCP, TLS, gRPC, HTTP/3
    Authentication methods
    Basic authentication, external HTTP or gRPC authentication service, client certificate validation, mutual TLS
    Rate limiting
    Yes
    RecognisedDocumentedFree planPlatforms
  6. Free plan apiself-hosted
    Free plan
    Yes
    Deployment model
    self-hosted
    Supported protocols
    HTTP, HTTPS, gRPC, TLS, TCP, UDP
    Authentication methods
    mTLS, JWT, API key, Basic Auth, OIDC, external authorization
    Rate limiting
    Yes
    RecognisedDocumentedFree planPlatforms
  7. Free plan self-hosted
    Free plan
    Yes
    Deployment model
    self-hosted
    Supported protocols
    HTTP, HTTPS, WebSocket, gRPC
    Authentication methods
    Spring Security, OAuth 2.0, JWT, opaque tokens
    Rate limiting
    Yes
    RecognisedDocumentedFree planPlatforms
  8. Free plan LinuxmacOS
    Free plan
    Yes
    Deployment model
    hybrid
    RecognisedDocumentedFree planPlatforms
  9. apiLinuxself-hosted
    Free plan
    Yes
    Deployment model
    self-hosted
    Supported protocols
    HTTP, HTTPS, TCP, UDP, WebSocket, gRPC, MQTT, HTTP/3, Dubbo
    Authentication methods
    API key, JWT, Basic Authentication, OAuth 2.0/OpenID Connect, HMAC, LDAP, CAS, Keycloak, Casdoor, forward authentication, multi-auth
    Rate limiting
    Yes
    RecognisedDocumentedFree planPlatforms
  10. Free trial apiLinuxself-hostedWeb
    Free plan
    No
    Deployment model
    hybrid
    RecognisedDocumentedFree planPlatforms
  11. apiWeb
    Free plan
    Yes
    Deployment model
    cloud
    Supported protocols
    HTTP/REST, HTTP/JSON, gRPC
    Authentication methods
    API keys, service accounts/JWT, Google authentication, Google ID tokens
    Rate limiting
    Yes
    RecognisedDocumentedFree planPlatforms
  12. Free trial apiLinuxself-hostedWeb
    Free plan
    No
    Deployment model
    hybrid
    RecognisedDocumentedFree planPlatforms
  13. Web
    Free plan
    No
    Deployment model
    hybrid
    Supported protocols
    HTTP, WebSocket, SOAP, gRPC, GraphQL, OAS3 REST, MCP, A2A
    Authentication methods
    Client ID enforcement, HTTP Basic Authentication, JWT validation, OAuth 2.0, OpenID Connect
    Rate limiting
    Yes
    RecognisedDocumentedFree planPlatforms
    $2,000/mofirst paid tier About MuleSoft ComposerVisit site
  14. Web
    Free plan
    No
    Deployment model
    cloud
    Supported protocols
    HTTP, HTTPS, HTTP/2, HTTP/3, WebSocket, gRPC
    Authentication methods
    AppCode, digest authentication, JWT, mutual TLS, custom authentication
    Rate limiting
    Yes
    RecognisedDocumentedFree planPlatforms
  15. Web
    Deployment model
    cloud
    Supported protocols
    HTTP, HTTPS
    Authentication methods
    OCI IAM, OAuth 2.0, OpenID Connect, Remote JWKS, static keys, authorizer functions, mTLS
    Rate limiting
    Yes
    RecognisedDocumentedFree planPlatforms
  16. api
    Deployment model
    hybrid
    Supported protocols
    HTTP, HTTPS, REST, SOAP, XML, WebSockets, JMS, AMQP, MQTT, gRPC, FTP
    Authentication methods
    OAuth, JWT tokens, API key, HTTP Basic/Digest, SAML, credentials in headers or payloads
    Rate limiting
    Yes
    RecognisedDocumentedFree planPlatforms
  17. 17 5.7
    Web
    Free plan
    Yes
    Deployment model
    hybrid
    Supported protocols
    HTTP, HTTP2, HTTPS, GRPC, GRPCS, TCP, Dubbo
    Authentication methods
    Key Auth, HMAC Auth, JWT Auth, Basic Auth, OAuth2, OIDC, External Auth, OPA
    Rate limiting
    Yes
    RecognisedDocumentedFree planPlatforms
  18. LinuxWeb
    Free plan
    No
    Deployment model
    hybrid
    Supported protocols
    HTTP, WebSocket, SOAP, gRPC, GraphQL, OAS3 REST, MCP, A2A
    Authentication methods
    Client ID enforcement, HTTP Basic Authentication, JWT validation, OAuth 2.0, OpenID Connect
    Rate limiting
    Yes
    RecognisedDocumentedFree planPlatforms
  19. LinuxWindows
    Free plan
    No
    Deployment model
    hybrid
    Supported protocols
    HTTP, HTTP/2, TCP, UDP, WebSockets, gRPC
    Authentication methods
    OIDC, LDAP, JWT, API key, HMAC, OAuth2, Open Policy Agent
    Rate limiting
    Yes
    RecognisedDocumentedFree planPlatforms
  20. 20 5.7
    Linux
    Deployment model
    self-hosted
    Supported protocols
    HTTP, HTTP/2, WebSocket, Server-Sent Events (SSE)
    Authentication methods
    Filter-based authentication, mutual TLS, custom authentication handlers
    Rate limiting
    Yes
    RecognisedDocumentedFree planPlatforms
  21. Web
    Free plan
    No
    Deployment model
    cloud
    Supported protocols
    HTTP, REST, WebSocket
    Authentication methods
    IAM/SigV4, Amazon Cognito user pools, JWT/OIDC/OAuth 2.0, Lambda authorizers, API keys, mutual TLS
    Rate limiting
    Yes
    RecognisedDocumentedFree planPlatforms
  22. Free plan
    Yes
    Deployment model
    self-hosted
    Supported protocols
    HTTP, HTTPS, HTTP/2, gRPC, TCP, TLS, UDP
    Authentication methods
    Basic authentication, JWT, OpenID Connect, external authentication
    Rate limiting
    Yes
    RecognisedDocumentedFree planPlatforms
  23. Web
    Free plan
    No
    Deployment model
    cloud
    Supported protocols
    HTTP, HTTPS
    Authentication methods
    HMAC key-pair authentication
    Rate limiting
    Yes
    RecognisedDocumentedFree planPlatforms
  24. Deployment model
    hybrid
    Supported protocols
    HTTP/1.1; WebSocket
    Authentication methods
    OAuth 2.0; Publisher Internal Key; API Key; Enforcer Test Key
    Rate limiting
    Yes
    RecognisedDocumentedFree planPlatforms
  25. Deployment model
    self-hosted
    Supported protocols
    HTTP, HTTPS, gRPC, gRPC-Web, HTTP/3
    Rate limiting
    Yes
    RecognisedDocumentedFree planPlatforms

Is your app on this list?

Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.

Questions about this list

Which API gateway software is ranked first on Everything Xiaomi?

Gravitee API Gateway is ranked #1 of 27 with a score of 7.2. Kong Gateway is second and KrakenD API Gateway third.

How many of these have a free plan?

8 of the 25 on this page publish a free plan on their own pricing pages.

Which is the cheapest paid option?

On this page, Google Cloud Endpoints has the lowest first paid tier we found: $1.50/mo.

How is this list ranked?

Ranked on what each maker publishes: documentation depth, a free tier and the platforms it runs on. Paid placements never change a rank.

More in Developer Tools

All developer tools lists