Product
Everything a partner integration needs. One spec push.
Gateway routing, per-endpoint rate limits, scoped API keys, and a hosted reference — all derived from the same OpenAPI spec. Not three products coordinated by hand.
Get API keyAPI Gateway
A gateway that knows your routes as well as your docs do.
Endpointwise acts as a reverse proxy and API gateway. It handles routing, middleware, request/response transforms, and rate limiting — all configured from the same OpenAPI spec that generates your reference docs.
- Per-route and per-key rate limiting with burst and sustained thresholds
- Request/response transforms (header rewrite, body schema validation)
- Upstream proxy with health checking and automatic failover
- Middleware chain: auth → rate limit → transform → upstream
Developer Documentation
Reference docs that can't drift from the gateway.
The rate limit visible in the reference page is the rate limit enforced by the gateway — because both are derived from the same spec. Partners stop asking "is this documented limit actually enforced?" because it is, by construction.
- OpenAPI 3.0 and 3.1 spec import — push via CLI or sync from GitHub on each commit
- Try-it console pre-filled with a scoped API key — partners test before writing code
- Versioned docs — serve
/v1and/v2references simultaneously during migration - Custom domain with automated TLS via Let's Encrypt (
api-docs.yourcompany.com) - Prose annotations per-endpoint — the spec describes the shape; you describe the intent
Platform overview
What Endpointwise does — and doesn't.
We are a gateway and a docs host. We are not an API design tool (use your editor for that), not a service mesh (we don't replace your internal networking), and not a full APM suite. We do one workflow well: spec in, configured gateway + live reference out.
Spec-driven reference
Reference docs generated from and kept in sync with your OpenAPI spec. No drift, no manual updates.
Per-endpoint rate limits
Set burst and sustained limits at the route level. Rate-limit config lives next to the endpoint docs it describes.
Scoped API keys
Issue keys with read/write scope, expiry dates, and per-endpoint restrictions. Rotate without downtime.
Audit trail
Every key issuance, rotation, and revocation is logged. Every rate-limit breach is visible. Export to Datadog or webhooks.
Integrations
Connects to your existing stack.
GitHub
Auto-sync spec from your repo on push. No manual imports.
Slack
Rate-limit breach alerts and key rotation events in your ops channel.
Datadog
Export p50/p95/p99 latency, request rate, and error rate metrics to your observability stack. Compatible with any StatsD-capable backend.
Webhooks
Fire events on key issuance, rate limit hits, and upstream failures. Bring your own event bus.
Unified platform
Ready to collapse gateway and docs into one?
Start free, no credit card required.