Zero secret leak — verified in CI
CIGateway responses are checked so upstream URLs, auth headers and provider tokens stay out of client traffic.
oanor is a marketplace gateway for your APIs. Customers call your endpoints through us — and your upstream URL, keys and tokens never reach the browser.
No platform fees. We only earn when a provider does.
$ curl https://api.oanor.com/fx-rates/v1/latest \
-H "x-oanor-key: oanor_live_9s7...k2" \
-H "x-oanor-signature: t=1777904,v1=..." \
-G --data-urlencode "base=EUR"
→ HTTP/2 200 OK 73ms
→ x-oanor-cache: HIT
→ x-ratelimit-remaining: 9942
{
"base": "EUR",
"rates": { "USD": 1.0817, "GBP": 0.8562 },
"served_by": "oanor-fra-edge-01"
}
gateway guard
Upstream secrets stripped
Headers, base URL and provider tokens stay server-side.
developer flow
observable by default
73ms
latency
99.9
uptime
0
leaks
Gateway responses are checked so upstream URLs, auth headers and provider tokens stay out of client traffic.
Built for EU infrastructure, audit logs, consent-aware flows and metadata-only usage logging.
Publish once, ship localized API pages and SEO metadata without slowing provider onboarding.
Developers and providers get scoped keys, quota signals and Prometheus-ready platform metrics.
Features
From a clean gateway to per-customer keys, quotas and a SEO-ready public landing per API.
api.oanor.com fronts your upstream. Header allow-list, no DB access, 503 on Redis outage. Designed against accidental leakage.
Issue, revoke, rotate. Plaintext shown once. SHA-256 stored. RPS quota enforced atomically.
Provider-defined tiers — free, paid, trial, pay-as-you-go. RPS + monthly + daily quotas enforced in Redis.
Hero image, SEO copy, translations generated on publish. EN + DE today, ten more on the way.
Prometheus /metrics endpoint, Redis stream of every call, Postgres audit log of every admin action.
Modular monolith. Strict Public/Internal split enforced via Deptrac. PHPStan level 8. PHP-CS-Fixer.
Marketplace preview
Political-bias and factual-reporting ratings for 1,350+ news sources, sourced from AllSides and Media Bias/Fact Check. Look up any outlet by domain or name to get its left/center/right political lean (5-point scale) and high/mixed/low factual reliability — ideal for news aggregators, media-literacy tools and content moderation.
api.oanor.com/mediabias-api
Reference genome assemblies as an API — powered by NCBI Assembly, the registry of genome builds for organisms across the tree of life. Search assemblies by organism (or free text) and look up any assembly's metadata: its accession (GCF_… RefSeq or GCA_… GenBank), name (e.g. GRCh38.p14), organism and taxon id, assembly level (complete genome, chromosome, scaffold or contig), contiguity statistics (contig and scaffold N50), sequencing coverage, RefSeq category, UCSC and Ensembl names, the submitting organization, release date and FTP download paths. From the human reference genome to any sequenced microbe, plant or animal, it turns the genome-assembly registry into a clean search-and-fetch API. A genome-assembly registry — distinct from sequence (ENA), genome annotation (Ensembl), variant (ClinVar, dbVar) and gene-expression (GEO) databases. Open data from NCBI Assembly (public domain).
api.oanor.com/genomes-api
A fast, fully-local cron-expression toolkit (UTC): validate 5-field cron expressions with ranges, lists, steps, month and weekday names and the common @aliases (@yearly, @monthly, @weekly, @daily, @hourly); compute the next N run times for a schedule from now or any start date; and describe a schedule in plain English. Every endpoint accepts input via the query string or the request body. Pure server-side compute, no third-party upstream, so responses are instant and always available. Ideal for schedulers and job runners, devops and CI tooling, and dashboards that show the next run time of a task.
api.oanor.com/cron-api
The European Parliament as an API, powered by the official European Parliament Open Data portal (data.europarl.europa.eu). Track the EU's directly-elected legislature: list the Members of the European Parliament (MEPs) for any parliamentary term — term 10 is the current 2024-2029 Parliament — with pagination; read an individual MEP's profile including their full name, country of representation, gender, contact email, official photo and place of birth, together with their committee, political-group and delegation memberships split into current and past, each with the role held (member, chair, vice-chair, …) and start/end dates; and browse the Parliament's corporate bodies — its standing and special committees (such as ECON, ENVI, LIBE), political groups and inter-parliamentary delegations — with their id, acronym, label and type. The organization id that appears in an MEP's memberships matches a corporate body, so you can resolve exactly which committee or group a member sits on. Ideal for civic-tech and transparency tools, political research and journalism, lobbying and public-affairs monitoring, and EU-policy analytics. MEP ids come from the MEPs endpoint. Data from the European Parliament (CC-BY 4.0).
api.oanor.com/europarl-api
A universal database of sports leagues, teams and players as an API, powered by TheSportsDB. Covering every major sport — soccer, basketball, American football, baseball, ice hockey, motorsport, cricket, rugby and more — this is a sports reference and metadata database, distinct from single-league live-score feeds. /v1/leagues browses the world's sports leagues (filter with sport=Soccer, Basketball, …) returning each league's id, name and sport. /v1/teams?league=English Premier League lists the teams in a league, each with its id, sport, country, home stadium and capacity, founding year, crest/badge and logo image URLs and a description. /v1/team?id=133604 returns a team's full profile by id. /v1/squad?id=133604 returns the players in a team. /v1/players?name=Lionel Messi searches players by name across all sports, returning their team, sport, position, nationality, date and place of birth, height and weight and photo (thumbnail and cutout) URLs. With official team crests and player photos, it is ideal for sports apps, fantasy and prediction tools, team and player directories, quiz and trivia games, and Discord/Slack sports bots. Data from TheSportsDB's free public tier, which returns up to about 10 results per league or squad; higher limits and advanced endpoints require TheSportsDB's paid tier. Team ids look like 133604 (Arsenal).
api.oanor.com/sportsdb-api
A clean, family-friendly jokes API. Fetch a random joke — or several at once — as a single-line one-liner or a two-part setup-and-delivery, filtered by category (Programming, Misc, Pun, Spooky, Christmas); search for jokes containing a specific word; and list the available categories. Safe-mode is always enforced and the offensive "Dark" category is excluded, so every joke is workplace- and family-safe. Ideal for chat and Discord bots, websites and apps that want a touch of humour, loading screens, and developer tools. Built on JokeAPI.
api.oanor.com/jokes-api
Pricing
No platform plans. Each provider sets their own price; oanor takes 15% of paid traffic, that's it.
Free, paid, trial, pay-as-you-go — pick the plan that fits, no extra platform fee on top.
List your API in minutes. Define free / paid / trial tiers; oanor takes 15% of paid revenue.
Example: customer pays 100 €
Need the full breakdown? Read the pricing page
Quick answers about pricing, quotas, and integration.
Sign up, register your upstream, hit Publish — your customers get a key in 60 seconds.
Create your account