Gravitee
Open-core API and event-stream management platform for REST, Kafka, MQTT, and AI agents.
About
Gravitee is an open-core API management platform built for both synchronous APIs (REST, GraphQL) and asynchronous, event-driven systems (Kafka, MQTT, WebSockets), plus a growing AI-gateway layer with token rate limiting, multi-provider failover, and an MCP proxy for AI agents. It ships a management console, developer portal, policy studio, and analytics over Elasticsearch, and deploys on-prem, self-hosted, or as SaaS.
Founded in Lille, France in 2015 by Rory Blundell with four developers as an open-source alternative to legacy APIM vendors, the company has raised over $125M, including a $60M Series C in May 2025 led by Sixth Street Growth. In July 2025 it acquired Ambassador Labs (Edge Stack and Blackbird) to expand its Kubernetes-native gateway footprint in North America. The core is Apache 2.0 open source; advanced features sit in the enterprise tier. Its GitHub star count looks modest because the codebase was consolidated into a single monorepo during 2025, which reset the counter.
What it can do
- Unified governance for REST, GraphQL, Kafka, and MQTT APIs
- AI gateway policies (token rate limits, multi-provider failover)
- MCP proxy and native AI-agent management
- Developer portal and policy studio
- Federated management across multiple gateways
- Alerting and analytics dashboards
Setup
docker run graviteeio/apim for the open-source stack, or start a 14-day enterprise trial; import an OpenAPI spec to publish your first API.
Prerequisites
Docker or Kubernetes for self-hosting; MongoDB/PostgreSQL and Elasticsearch for the full stack.
Use cases
Works with
Trust score — 8/10
Scored 8/10 (verified tier, metrics-v1). Evidence: founding, funding rounds, and Ambassador acquisition documented by TechCrunch and Wikipedia; Apache 2.0 license and active commits confirmed on GitHub. Strengths: rare unified sync+async governance, open core with real self-hosting, well-funded with a credible acquirer. Docked for: (1) star count understates adoption because of the 2025 monorepo consolidation; (2) advanced capabilities (federated governance, AI features) require the enterprise tier; (3) smaller community than the giant OSS gateways. License: Apache-2.0 (open core).
★ 460 GitHub stars
How the trust score is built
Full methodology →- Adoption · stars/downloads, log-scaled vs peers
- 7.0/10
- Maintenance · recency, releases, issue load
- 9.0/10
- Openness · license + docs
- 9.0/10
- Manual review · sanity read + red-flag check
- 8.0/10
- · Founded 2015 in Lille, France; $125M+ raised incl. $60M Series C May 2025 (Sixth Street Growth)
- · Acquired Ambassador Labs July 2025 (TechCrunch, acquisition press)
- · 460 GitHub stars on consolidated monorepo; 2025 restructure reset the counter
- · manual review: unified sync+async governance is distinctive; enterprise tier gates advanced features
Sources
Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.