Ship APIs without leaking your secrets.
oanor is a marketplace gateway for your APIs. Customers call your endpoints through us — and your upstream URL, keys and tokens never reach the browser.
Free tier — 10k requests/month. No credit card.
$ curl https://api.oanor.com/your-api/v1/quote \
-H "x-oanor-key: oanor_live_…"
→ 200 OK
{ "price": 42, "currency": "EUR" }
# upstream URL, header, token? never sent to the browser.
Features
Everything an API marketplace needs.
From a clean gateway to per-customer keys, quotas and a SEO-ready public landing per API.
Secret-safe gateway
api.oanor.com fronts your upstream. Header allow-list, no DB access, 503 on Redis outage. Designed against accidental leakage.
Per-customer API keys
Issue, revoke, rotate. Plaintext shown once. SHA-256 stored. RPS quota enforced atomically.
Plans & quotas
Free, Pro, Enterprise tiers out of the box. Per-second rate limit + monthly quota in Redis.
Multilingual auto-content
Hero image, SEO copy, translations generated on publish. EN + DE today, ten more on the way.
Built-in observability
Prometheus /metrics endpoint, Redis stream of every call, Postgres audit log of every admin action.
Pure PHP, no framework
Modular monolith. Strict Public/Internal split enforced via Deptrac. PHPStan level 8. PHP-CS-Fixer.
Marketplace preview
A growing catalog of secure APIs.
Pricing
Simple, predictable plans.
Start free. Upgrade when you need more throughput.
Free
For trying out oanor
0 € /month
- 2 req/sec
- 10 000 calls / month
- 1 team, unlimited APIs
- Email support
Pro
For real production traffic
29 € /month
- 50 req/sec
- 1 000 000 calls / month
- Unlimited teams + members
- Priority support, SLA on request
Enterprise
For scale & compliance
299 € /month
- 500 req/sec
- 50 000 000 calls / month
- SAML / SSO, dedicated nodes
- DPA, custom contract
Ready to publish your first API?
Sign up, register your upstream, hit Publish — your customers get a key in 60 seconds.
Create your account