Power AI-driven innovation with unified API management
- Secure your APIs against the Open Worldwide Application Security Project (OWASP) API Security Top 10 and other threats with built-in authentication, authorization, rate limiting, schema validation, private networking, and more. Strengthen and enable governance at scale by federating API management using workspaces. Unify API inventory and monitor API design compliance in Azure API Center. Enhance security with AI-powered threat detection and security posture analysis in Microsoft Defender for Cloud.
- Get a handle on and accelerate AI adoption in your organization with APIs ready to be consumed by AI agents. Easily secure, monitor, and control usage of popular LLMs with token quotas, token tracking, semantic caching, and smart load-balancing.
- Take advantage of a rich set of policies to shape API traffic for your most demanding workloads. Use fine-grained, comprehensive, and customizable logs and metrics to obtain insights, get ahead of issues, and maintain peak performance.
- Reduce friction across the entire API lifecycle by empowering your development teams to work faster and more efficiently with an integrated developer portal, automated documentation, and versioning tools that streamline API workflows. Manage and unify your API inventory to enhance discoverability and governance. Strengthen compliance and ensure high-quality API design with features like linting in Visual Studio Code, API design rules, and real-time reports.
Simplify API security, performance, and governance
Flexible API gateway
AI-powered API design and policy authoring
Comprehensive AI gateway
Fine-grained monitoring and analytics
API compliance, consistency, and unified inventory
Out-of-the-box developer portal and API documentation
Seamless connectivity with Azure services
Automated API operations
Flexible API management across Hybrid and multi-cloud environments
Embedded security and compliance
Full-time equivalent engineers dedicated to security initiatives at Microsoft.
Partners with specialized security expertise.
Â
Compliance certifications, including over 50 specific to global regions and countries.
Â
Flexible consumption, tier-based pricing to meet your varied API workload needs
- Select Developer for evaluation, experimentation, and development.Â
- Select Standard to add API management to your workload.Â
- Select Premium to run enterprise-wide API program.
Azure products work better together
Scale with confidence on an enterprise-grade platform with 10+ years of API innovation
Customers are innovating with Azure API Management across industries worldwide
Get started with Azure API Management
Frequently asked questions
- API management is the process of securing, monitoring, and optimizing APIs to ensure they are scalable, reliable, and easy to find and use. It includes capabilities such as authentication, rate limiting, analytics, lifecycle management, and onboarding that enable organizations to govern and reuse APIs efficiently.
- Azure API Management is a fully managed service that helps organizations publish, secure, monitor, and scale APIs across cloud and hybrid environments. It provides capabilities like request authentication, traffic management, developer engagement, and analytics that work seamlessly with many Azure services.
- API Management policies are rules that evaluate or modify API requests and responses at the gateway without changing client apps or back-end services. Policies are used to, for example, enforce security, transform payloads, control traffic, log requests and enable fine-grained API governance through a declarative configuration.
- API Management offers over 50 declarative policies, including rate limiting, quotas, authentication, content validation, caching, transformation, and others. Policies can be applied at varying scopes (such as apply to all APIs or to a single API) and can be dynamically customized and conditionally evaluated using policy expressions.
- API Management performs authentication, authorization, and validation at the gateway, preventing unauthorized or malformed requests from reaching the backend services. It supports a variety of authentication and authorization options, including IP filtering, mutual TLS, keys, OAuth 2.0, and certificates, as well as fine-grained request validation capabilities.
- With the self-hosted gateway, API Management enables API governance across on-premises and multi-cloud environments while maintaining a centralized control plane, reducing latency and ensuring compliance across distributed systems.
- For app developers, API Management offers a customizable developer portal for self-service API onboarding, complete with automated documentation and an interactive console. API developers can use flexible API revisioning and versioning functionality to safely manage APIs.
- API Management supports various API styles, including REST, GraphQL, gRPC, SOAP, WebSocket, and Webhook. This flexibility allows organizations to manage a wide range of APIs within a single platform.

Formed in 2009, the Archive Team (not to be confused with the archive.org Archive-It Team) is a rogue archivist collective dedicated to saving copies of rapidly dying or deleted websites for the sake of history and digital heritage. The group is 100% composed of volunteers and interested parties, and has expanded into a large amount of related projects for saving online and digital history.
