# Gravitee Documentation ## Home - [Gravitee Documentation](https://documentation.gravitee.io/gravitee-documentation.md): Welcome to Gravitee! ## Gravitee Gamma - [Gravitee Gamma](https://documentation.gravitee.io/gravitee-gamma/readme.md): Gravitee Gamma unifies API Management, Event Stream Management, and Agent Management on one platform. Learn what Gamma offers and get started. - [Overview](https://documentation.gravitee.io/gravitee-gamma/platform-management/overview.md): Gravitee Gamma governs API, event stream, and AI agent traffic from one platform. Learn how its modules, gateways, and shared catalog fit together. - [Release Notes](https://documentation.gravitee.io/gravitee-gamma/platform-management/gamma-release-notes.md): Everything in the first Gravitee Gamma release, across Agent, API, Authorization, Edge, and Event Stream Management. Browse the highlights. - [Get started](https://documentation.gravitee.io/gravitee-gamma/platform-management/get-started.md): Choose the Gamma getting-started path that fits you, whether you are new to Gravitee or activating Gamma on an existing installation. Start here. - [Get started for new users](https://documentation.gravitee.io/gravitee-gamma/platform-management/get-started/get-started-for-new-users.md): New to Gravitee and want to run Gamma? Choose between Gravitee Next-Gen Cloud and installing it yourself. Compare the two paths and pick one. - [Fully self-hosted installation with Vanilla Kubernetes](https://documentation.gravitee.io/gravitee-gamma/platform-management/get-started/get-started-for-new-users/fully-self-hosted-with-vanilla-kubernetes.md): Run a full Gamma platform yourself on Kubernetes with the Gravitee Helm chart. Choose the guide for your cluster and the ingress it needs. - [Fully self-hosted installation with Docker](https://documentation.gravitee.io/gravitee-gamma/platform-management/get-started/get-started-for-new-users/fully-self-hosted-with-docker.md): Run a full Gamma platform yourself with Docker, bringing up the consoles, Gateway, and datastores on one host. Choose the Docker guide that fits. - [Get started for existing users](https://documentation.gravitee.io/gravitee-gamma/platform-management/get-started/get-started-for-existing-users.md): Already running Gravitee? Activate Gamma on your existing installation instead of installing from scratch. Choose the path for how you run it. - [Activate Gamma with Docker Compose](https://documentation.gravitee.io/gravitee-gamma/platform-management/get-started/get-started-for-existing-users/activate-gamma-with-docker-compose.md): Activate Gamma on an existing Docker Compose installation of Gravitee by moving to the Gamma build. Follow the steps to enable and verify it. - [Activate Gamma with Kubernetes (Helm)](https://documentation.gravitee.io/gravitee-gamma/platform-management/get-started/get-started-for-existing-users/activate-gamma-with-kubernetes-helm.md): Activate Gamma on an existing Kubernetes deployment of Gravitee with the Helm chart. Follow the steps to move to the Gamma build and enable it. - [Install](https://documentation.gravitee.io/gravitee-gamma/platform-management/install.md): Choose between a self-hosted Gamma installation, where you run everything, and a hybrid one, where Gravitee hosts the control plane. Pick your model. - [Self-hosted installation guides](https://documentation.gravitee.io/gravitee-gamma/platform-management/install/self-hosted-installation-guides.md): A self-hosted Gamma installation runs every component in your own infrastructure. Choose a Docker or Kubernetes deployment method to begin. - [Docker](https://documentation.gravitee.io/gravitee-gamma/platform-management/install/self-hosted-installation-guides/docker.md): Every Gamma component on one host, from MongoDB and Elasticsearch to the consoles. Compare the Docker Compose and Docker CLI methods before you start. - [Docker Compose](https://documentation.gravitee.io/gravitee-gamma/platform-management/install/self-hosted-installation-guides/docker/docker-compose.md): Install a fully self-hosted Gamma platform on one host with Docker Compose. Follow the steps to write the compose file and add a license key. - [Docker CLI](https://documentation.gravitee.io/gravitee-gamma/platform-management/install/self-hosted-installation-guides/docker/docker-cli.md): Install a fully self-hosted Gamma platform on one host with the Docker CLI. Follow the steps to run the datastores, Gateway, and consoles. - [Kubernetes](https://documentation.gravitee.io/gravitee-gamma/platform-management/install/self-hosted-installation-guides/kubernetes.md): Run the full Gamma stack on Kubernetes with the Gravitee Helm chart, datastores included. Pick the guide that matches the cluster you operate. - [Vanilla Kubernetes](https://documentation.gravitee.io/gravitee-gamma/platform-management/install/self-hosted-installation-guides/kubernetes/vanilla-kubernetes.md): Install a fully self-hosted Gamma platform on a vanilla Kubernetes cluster. Follow the steps to deploy every component with the Helm chart. - [AWS EKS](https://documentation.gravitee.io/gravitee-gamma/platform-management/install/self-hosted-installation-guides/kubernetes/aws-eks.md): Run the full Gamma stack on AWS EKS, with the load balancer controller plus the MongoDB and Elasticsearch datastores. Follow the steps to deploy it. - [Azure AKS](https://documentation.gravitee.io/gravitee-gamma/platform-management/install/self-hosted-installation-guides/kubernetes/azure-aks.md): Run the full Gamma stack on Azure AKS behind an NGINX ingress controller. Follow the steps to create the namespace and install every component. - [OpenShift](https://documentation.gravitee.io/gravitee-gamma/platform-management/install/self-hosted-installation-guides/kubernetes/openshift.md): Install a fully self-hosted Gamma platform on OpenShift, with MongoDB and Elasticsearch. Follow the steps to deploy it with the Helm chart. - [Hybrid installation guides](https://documentation.gravitee.io/gravitee-gamma/platform-management/install/hybrid-installation-guides.md): In a hybrid Gamma deployment, Gravitee hosts the control plane and you run the Gateway. Choose a Docker or Kubernetes deployment method. - [Docker](https://documentation.gravitee.io/gravitee-gamma/platform-management/install/hybrid-installation-guides/docker.md): A hybrid Gateway on one host talks to a Gravitee Cloud control plane. Compare the Docker Compose and Docker CLI methods and what each one runs. - [Docker Compose](https://documentation.gravitee.io/gravitee-gamma/platform-management/install/hybrid-installation-guides/docker/docker-compose.md): Define a hybrid Gamma Gateway in a compose file and an env file, then bring it up in one command. Follow the steps to write and run them. - [Docker CLI](https://documentation.gravitee.io/gravitee-gamma/platform-management/install/hybrid-installation-guides/docker/docker-cli.md): Start a hybrid Gamma Gateway container by container with the Docker CLI, creating the network and Redis first. Follow the steps to run it. - [Kubernetes](https://documentation.gravitee.io/gravitee-gamma/platform-management/install/hybrid-installation-guides/kubernetes.md): Deploy a hybrid Gamma Gateway with the Gravitee Helm chart on EKS, AKS, OpenShift, or vanilla Kubernetes. Choose the guide for your cluster. - [Vanilla Kubernetes](https://documentation.gravitee.io/gravitee-gamma/platform-management/install/hybrid-installation-guides/kubernetes/vanilla-kubernetes.md): Install a hybrid Gamma Gateway on a vanilla Kubernetes cluster with the Gravitee Helm chart. Follow the steps to deploy the Gateway and Redis. - [AWS EKS](https://documentation.gravitee.io/gravitee-gamma/platform-management/install/hybrid-installation-guides/kubernetes/aws-eks.md): Install a hybrid Gamma Gateway on AWS EKS, configuring the load balancer controller for Auto Mode or standard clusters. Follow the steps to deploy. - [Azure AKS](https://documentation.gravitee.io/gravitee-gamma/platform-management/install/hybrid-installation-guides/kubernetes/azure-aks.md): Install a hybrid Gamma Gateway on Azure AKS behind an NGINX ingress controller. Follow the steps to create the namespace and deploy the chart. - [OpenShift](https://documentation.gravitee.io/gravitee-gamma/platform-management/install/hybrid-installation-guides/kubernetes/openshift.md): Install a hybrid Gamma Gateway on OpenShift, from creating the project to running Redis. Follow the steps to deploy it with the Helm chart. - [Overview](https://documentation.gravitee.io/gravitee-gamma/platform-management/applications.md): The Overview group of the Platform Management sidebar holds the environment's Applications. Open it to work with the consumer applications. - [Manage applications](https://documentation.gravitee.io/gravitee-gamma/platform-management/applications/manage-applications.md): View, create, and manage the consumer applications that subscribe to your API plans. Follow the steps to work with them on the Applications page. - [APIs & Assets](https://documentation.gravitee.io/gravitee-gamma/platform-management/apis-and-assets.md): The APIs & Assets group of the Platform Management sidebar holds the environment's Metadata and Dictionaries. Choose the one you want to manage. - [Manage environment metadata](https://documentation.gravitee.io/gravitee-gamma/platform-management/apis-and-assets/manage-environment-metadata.md): The Metadata page in the Gamma console holds the key-value entries that every API in the selected environment inherits. Add, edit, search, and delete them. - [Manage dictionaries](https://documentation.gravitee.io/gravitee-gamma/platform-management/apis-and-assets/manage-dictionaries.md): Create, deploy, and manage the dictionaries that provide environment-scoped lookup data to API policies from the Dictionaries page in the Gamma console. - [System & Security](https://documentation.gravitee.io/gravitee-gamma/platform-management/system-and-security.md): The System & Security group of the Platform Management sidebar holds the environment's Access Management connection. Open it to configure the connection. - [Configure Access Management](https://documentation.gravitee.io/gravitee-gamma/platform-management/system-and-security/configure-access-management.md): Connect the Gamma console to a Gravitee Access Management instance so you can sync its domains. Follow the steps to configure the connection. - [Configure OpenTelemetry tracing and logs](https://documentation.gravitee.io/gravitee-gamma/platform-management/system-and-security/configure-opentelemetry-tracing-and-logs.md): The Gamma Trace Explorer reads from an OpenTelemetry pipeline you run alongside Gravitee. Follow the steps to export, read, and collect traces. - [Configure OpenAPI viewer](https://documentation.gravitee.io/gravitee-gamma/platform-management/system-and-security/configure-openapi-viewer.md): Choose which viewer the Gamma console and Developer Portal use to render OpenAPI specifications. Follow the steps to change the default viewer. - [Get started](https://documentation.gravitee.io/gravitee-gamma/api-management/get-started.md): API Management in Gamma, from the overview of its key concepts to the quickstart that builds your first API proxy. Start with the page you need. - [API Management overview](https://documentation.gravitee.io/gravitee-gamma/api-management/get-started/api-management-overview.md): API Management governs REST, GraphQL, gRPC, and WebSocket traffic through API proxies. Learn what it does and how it fits the Gamma platform. - [Create your first API](https://documentation.gravitee.io/gravitee-gamma/api-management/get-started/create-your-first-api.md): Create a keyless API proxy in the Gamma console, deploy it to the API Gateway, and verify it with a test request. Follow the quickstart to build one. - [Migrate](https://documentation.gravitee.io/gravitee-gamma/api-management/migrate.md): Migrate an API estate to Gravitee API Management from Kong, Apigee, MuleSoft, Azure, or another gateway. Start by planning the migration. - [Plan a gateway migration](https://documentation.gravitee.io/gravitee-gamma/api-management/migrate/plan-a-gateway-migration.md): Plan a gateway migration to Gravitee API Management from Kong, Apigee, MuleSoft, or Azure. Learn how the method works and what it refuses to convert. - [Migrate an API estate to Gravitee](https://documentation.gravitee.io/gravitee-gamma/api-management/migrate/migrate-an-api-estate-to-gravitee.md): Migrate an API estate from a legacy gateway to Gravitee API Management with the migration agent skill. Follow the steps to convert and reconcile it. - [Source gateway reference](https://documentation.gravitee.io/gravitee-gamma/api-management/migrate/source-gateway-reference.md): Source gateway migration reference for Gravitee API Management, covering Management API paths, Expression Language syntax, and credential export. - [Deploy](https://documentation.gravitee.io/gravitee-gamma/api-management/deploy.md): What to expect from the API Management Gateway under load before you run APIs on it. - [Gateway benchmarks](https://documentation.gravitee.io/gravitee-gamma/api-management/deploy/gateway-benchmarks.md): Release-over-release performance results for the API Management Gateway on sync proxy APIs, with the scenarios and controlled environment used to produce them. - [Manage](https://documentation.gravitee.io/gravitee-gamma/api-management/manage.md): Open the Manage group of the API Management sidebar and choose API Proxies or API Products. - [API Proxies](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies.md): Create an API proxy, then configure it from the groups of its own sidebar. Choose the group that holds the setting you need. - [Create an API proxy](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/create-an-api-proxy.md): Create an API proxy in the Gamma console with the from-scratch wizard or a quick-start template. Follow the steps through each wizard option. - [Configure your API proxy](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/configure-your-api-proxy.md): Refine an API proxy from the detail workspace, which groups configuration into seven sidebar sections. Start with the setting you need to change. - [General](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/general.md): The General group of an API proxy's sidebar holds the Overview, General, API Properties, Resources, Notifications, API Score, Response Templates, and CORS pages. Choose the page you need. - [Manage general settings](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/general/manage-general-settings.md): Edit the name, version, metadata, and images of an API proxy, and start, stop, or delete it. Follow the steps on the General page to update them. - [Configure API properties](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/general/configure-api-properties.md): Define static or dynamic key/value properties that policies read at runtime through the Expression Language. Follow the steps to add and encrypt them. - [Configure API resources](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/general/configure-api-resources.md): Create API-level resources such as caches and OAuth providers that this API's policies reference at runtime. Follow the steps to add and manage them. - [Configure notifications](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/general/configure-notifications.md): Send console, email, or webhook alerts when API events occur, such as a deployment or a subscription change. Follow the steps to add a notification. - [Configure CORS](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/general/configure-cors.md): Let browsers on other origins call your API by enabling cross-origin resource sharing and setting the allowed origins. Follow the steps to configure it. - [Gateway](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/gateway.md): The Gateway group of an API proxy's sidebar holds the Entrypoints, Endpoints, Failover, Health Check Dashboard, and Reporter Settings pages. Choose the page you need. - [Configure entrypoints](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/gateway/configure-entrypoints.md): Change the context paths consumers use to reach an API proxy, or switch to virtual hosts. Follow the steps on the Entrypoints page to update them. - [Configure endpoints](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/gateway/configure-backend-security.md): Endpoint groups define where the API Gateway routes requests, with load balancing, timeouts, and TLS. Follow the steps to create a group and add endpoints. - [Configure failover](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/gateway/configure-failover.md): Turn on automatic retries with a circuit breaker so a slow or failing backend doesn't take your API down. Follow the steps to tune the thresholds. - [Monitor endpoint health](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/gateway/monitor-endpoint-health.md): Track backend endpoint availability, response times, and failed health checks for an API. Follow the steps to open the Health Check Dashboard. - [Configure logging and tracing](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/gateway/configure-logging-and-tracing.md): Control which request and response data an API proxy reports to logs and analytics, and turn on OpenTelemetry tracing. Follow the steps to configure it. - [Design](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/design.md): The Design group of an API proxy's sidebar holds the Policy Studio pages. Choose the page you need. - [Apply security policies](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/design/apply-security-policies.md): Policies are rules the API Gateway evaluates on every request and response, on top of security plans. Learn how the policy chain runs and how to apply one. - [Control how policy flows are matched to requests](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/design/configure-flow-execution.md): Choose whether the API Gateway runs every matching policy flow or only the closest match. Follow the steps to set the flow execution mode. - [Reuse policies with shared policy groups](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/design/shared-policy-groups.md): A shared policy group configures a set of policies once and reuses them across APIs and flows. Follow the steps to attach one in the Policy Studio. - [Consumer Access](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/consumer-access.md): The Consumer Access group of an API proxy's sidebar holds the Plans, Consumers, and Broadcasts pages. Choose the page you need. - [Secure your API proxy](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/consumer-access/secure-your-api-proxy.md): Attach a Keyless, API Key, JWT, OAuth2, or mTLS plan to control how consumers authenticate to an API proxy. Follow the steps to add one and deploy it. - [Establish consumer access](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/consumer-access/establish-consumer-access.md): Applications, subscriptions, and API keys control how consumers discover and authenticate with your API. Learn how to review and approve a request. - [Broadcast messages to consumers](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/consumer-access/broadcast-messages-to-consumers.md): Send a one-way announcement to the consumers of an API proxy about a change, an update, or a maintenance window. Follow the steps to compose one. - [Security](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/security.md): The Security group of an API proxy's sidebar holds the Authorization and User Permissions pages. Choose the page you need. - [Manage user permissions](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/security/manage-user-permissions.md): Add direct members, attach groups, and transfer primary ownership of an API proxy. Follow the steps on the User Permissions page to manage access. - [Monitor](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/monitoring.md): The Monitoring group of an API proxy's sidebar holds the Alerts and Audit Logs pages. Choose the page you need. - [Review audit logs](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/monitoring/review-audit-logs.md): Trace who changed what, and when, on an API proxy with its audit trail. Follow the steps to read and filter the events on the Audit Logs page. - [Operate](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/operations.md): The Operations group of an API proxy's sidebar holds the Deployment pages. Choose the page you need. - [Configure deployment](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/operations/configure-deployment.md): Choose which API Gateway instances load an API definition by assigning sharding tags. Follow the steps on the Deployment Configuration page. - [Review deployment history](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-proxies/operations/review-deployment-history.md): Compare two deployed versions of an API definition and roll back to an earlier one. Follow the steps to inspect the history and restore a version. - [API Products](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-products.md): Create an API Product, then configure it from the groups of its own sidebar. Choose the group that holds the setting you need. - [Create API Products](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-products/api-products.md): API Products bundle multiple API proxies into one consumer-facing product with shared plans. Learn when to use them and how to create one. - [Configure API products](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-products/configure-your-api-product.md): Attach APIs, create plans, manage consumers and team access, and choose where an API Product deploys. Start with the area you need to configure. - [General](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-products/general.md): The General group of an API Product's sidebar holds the Overview, General, and APIs pages. Choose the page you need. - [Manage product APIs](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-products/general/manage-product-apis.md): Attach and detach API proxies from an API Product so subscribers reach every API it bundles. Follow the steps to manage them on the APIs tab. - [Security](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-products/security.md): The Security group of an API Product's sidebar holds the User Permissions pages. Choose the page you need. - [Manage members and ownership](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-products/security/manage-members-and-ownership.md): Add members, attach groups, change roles, and transfer ownership of an API product. Follow the steps to manage access from the User Permissions tab. - [Operate](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-products/operations.md): The Operations group of an API Product's sidebar holds the Deployment pages. Choose the page you need. - [Configure product deployment](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-products/operations/configure-product-deployment.md): Assign sharding tags to an API Product so only the API Gateway instances that advertise a matching tag load it. Follow the steps on the Deployment tab. - [Manage API products with the Management API](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-products/manage-api-products-with-the-management-api.md): Create an API product, attach APIs, add and publish plans, and deploy it over the v2 Management API. Follow the full lifecycle with request examples. - [API product configuration reference](https://documentation.gravitee.io/gravitee-gamma/api-management/manage/api-products/api-product-configuration-reference.md): Every API product property, the flag that decides which APIs can be bundled, and the plan types a product supports. Browse the full reference. - [Observe](https://documentation.gravitee.io/gravitee-gamma/api-management/observability.md): The Observability group of the API Management sidebar holds the Dashboards, Logs, and Tracing pages. Open the view you need. - [Dashboard and metrics](https://documentation.gravitee.io/gravitee-gamma/api-management/observability/api-dashboard.md): The Gamma homepage dashboard shows per-module metrics, quick actions, and guidance for empty states. Learn what each metric and quick action does. - [Monitor API usage](https://documentation.gravitee.io/gravitee-gamma/api-management/observability/monitor-api-usage.md): Track request volume, latency distribution, error rates, and top consumers for an API proxy. Follow the steps to open the observability dashboard. - [View API logs](https://documentation.gravitee.io/gravitee-gamma/api-management/observability/view-api-logs.md): Inspect individual request logs and full request traces for an API proxy in the Trace Explorer. Follow the steps to open logs and traces. - [Get started](https://documentation.gravitee.io/gravitee-gamma/event-stream-management/get-started.md): Event Stream Management in Gamma, from the product overview to the quickstarts for clusters, Kafka Services, and Virtual Clusters. Start where you need. - [Event Stream Management overview](https://documentation.gravitee.io/gravitee-gamma/event-stream-management/get-started/event-stream-management-overview.md): Event Stream Management governs Kafka clusters, event-driven data flows, and streaming infrastructure. Learn what it does and how it fits Gamma. - [Register your first cluster](https://documentation.gravitee.io/gravitee-gamma/event-stream-management/get-started/register-your-first-cluster.md): Register your first Kafka cluster in the Gamma console and add its first connection. Follow the quickstart to create and deploy the cluster. - [Create your first Kafka service](https://documentation.gravitee.io/gravitee-gamma/event-stream-management/get-started/create-your-first-kafka-service.md): Create a governed Kafka Service in the Gamma console with a standalone endpoint and a keyless plan. Follow the quickstart to get one running. - [Create your first Virtual Cluster](https://documentation.gravitee.io/gravitee-gamma/event-stream-management/get-started/create-your-first-virtual-cluster.md): Federate two Registered Clusters into a single unified endpoint with a Virtual Cluster. Follow the quickstart to compose and create one. - [Manage](https://documentation.gravitee.io/gravitee-gamma/event-stream-management/manage.md): The Manage group of the Event Stream Management sidebar holds your registered clusters. Choose the page you need. - [Register your Kafka clusters](https://documentation.gravitee.io/gravitee-gamma/event-stream-management/manage/register-your-kafka-clusters.md): Register an existing Kafka cluster with Gamma so Kafka Services and Virtual Clusters can be built on it. Follow the steps to register and deploy one. - [Build](https://documentation.gravitee.io/gravitee-gamma/event-stream-management/build.md): Create and configure governed Kafka Services and Virtual Clusters on top of your registered Kafka infrastructure. Start with the service you need. - [Create a Kafka service with a registered cluster](https://documentation.gravitee.io/gravitee-gamma/event-stream-management/build/create-a-kafka-service-with-a-registered-cluster.md): Create a Kafka Service bound to a connection on a registered Kafka cluster, with security plans and policies. Follow the steps in the creation wizard. - [Create a Kafka service with a Virtual Cluster](https://documentation.gravitee.io/gravitee-gamma/event-stream-management/build/create-a-kafka-service-with-a-virtual-cluster.md): Create a Kafka Service backed by a Virtual Cluster to govern a federated multi-cluster Kafka environment. Follow the steps to build it in the wizard. - [Establish a Virtual Cluster](https://documentation.gravitee.io/gravitee-gamma/event-stream-management/build/establish-a-virtual-cluster.md): Federate multiple Kafka backends into one endpoint by establishing a Virtual Cluster. Follow the steps to choose a topology and compose the backends. - [Virtual Clusters overview](https://documentation.gravitee.io/gravitee-gamma/event-stream-management/build/kafka-virtual-clusters-overview.md): A Virtual Cluster presents several Kafka backends to clients as one endpoint. Learn the key concepts, Mesh mode, and the limitations that apply. - [Virtual Cluster runtime behavior reference](https://documentation.gravitee.io/gravitee-gamma/event-stream-management/build/kafka-virtual-cluster-runtime-behavior-reference.md): What a deployed Virtual Cluster does on the Event Gateway, from lifecycle states to topic routing and consumer groups. Browse the full reference. - [Overview](https://documentation.gravitee.io/gravitee-gamma/agent-management/overview.md): Agent Management governs LLM, MCP, and agent-to-agent traffic from one control plane. Find the use case you need and the guide that covers it. - [LLM Proxy provider support](https://documentation.gravitee.io/gravitee-gamma/agent-management/overview/llm-proxy-provider-support.md): Which OpenAI features each LLM Proxy provider supports, how requests map to each native API, and the limits that apply. Browse the full reference. - [AI resources](https://documentation.gravitee.io/gravitee-gamma/agent-management/overview/ai-resources.md): AI resources supply the models and vector stores that Guard Rails, PII Filtering, and Semantic Caching policies call. Compare the resource types. - [Get started](https://documentation.gravitee.io/gravitee-gamma/agent-management/get-started.md): Agent Management in Gamma, from the overview and the roles reference to the MCP Proxy and LLM Proxy quickstarts. Start with the page that fits your task. - [Roles and permissions](https://documentation.gravitee.io/gravitee-gamma/agent-management/get-started/roles-and-permissions.md): The environment-scoped permissions that govern who can view, create, edit, and delete Agent Management resources. Find the permission you need. - [Create your first MCP server](https://documentation.gravitee.io/gravitee-gamma/agent-management/get-started/create-your-first-mcp-server.md): Create your first MCP Proxy in front of an upstream MCP server, using Proxy mode with API key security. Follow the quickstart to get it running. - [Create your first LLM Proxy](https://documentation.gravitee.io/gravitee-gamma/agent-management/get-started/create-your-llm-proxy.md): Create an LLM Proxy, connect it to a model provider, and send a test prompt through the AI Gateway. Follow the quickstart to get one running. - [Configure your Access Management instance](https://documentation.gravitee.io/gravitee-gamma/agent-management/get-started/configure-your-access-management-instance.md): Connect the Agent Management module to a Gravitee Access Management instance and select a domain. Follow the steps to configure the connection. - [Catalog](https://documentation.gravitee.io/gravitee-gamma/agent-management/import.md): The Catalog group of the Agent Management sidebar holds the models, servers, tools, prompts, resources, skills, agents, and identities your agents use. - [Add an AI model](https://documentation.gravitee.io/gravitee-gamma/agent-management/import/add-an-ai-model.md): Add an AI model to the Catalog so an LLM Proxy can route to it. Follow the steps to import models from a provider and edit their details. - [Add an MCP Registry](https://documentation.gravitee.io/gravitee-gamma/agent-management/import/add-an-mcp-registry.md): Importing MCP servers in bulk from an external registry is planned for a future release. Register a server by URL to add one to the Catalog today. - [Register an MCP server](https://documentation.gravitee.io/gravitee-gamma/agent-management/import/register-an-mcp-server.md): Register an MCP server to add it to the Catalog with its tools, resources, and prompts. Follow the steps to verify the URL and import its capabilities. - [Import prompts](https://documentation.gravitee.io/gravitee-gamma/agent-management/import/import-prompts.md): Prompts are reusable, parameterized templates discovered from registered MCP servers and cataloged for governance. Review your imported prompts. - [Add MCP resources](https://documentation.gravitee.io/gravitee-gamma/agent-management/import/add-mcp-resources.md): MCP resources are read-only data items agents use as context, discovered from registered MCP servers. Review the resources cataloged for your servers. - [Create API tools](https://documentation.gravitee.io/gravitee-gamma/agent-management/import/create-api-tools.md): Expose REST APIs governed in API Management as agent-accessible tools in the Catalog. Follow the steps to create an API tool from your endpoints. - [Add a knowledge source](https://documentation.gravitee.io/gravitee-gamma/agent-management/import/add-knowledge-source.md): Add a knowledge source so agents can read documentation and reference material as context. Follow the steps to add inline or remote documents. - [Upload skills](https://documentation.gravitee.io/gravitee-gamma/agent-management/import/upload-skills.md): Upload a skill package so agents can consume it as an MCP resource and you can govern it. Follow the steps to structure the zip file and add it. - [Integrations](https://documentation.gravitee.io/gravitee-gamma/agent-management/import/integrations.md): Integrations bring models and agents from outside Gamma into the Catalog. Learn how to connect a model provider, connect an agent platform, and register an agent by hand. - [Connect integrations](https://documentation.gravitee.io/gravitee-gamma/agent-management/import/integrations/connect-integrations.md): An integration connects Gamma to an upstream AI platform so its models import into the AI Models catalog. Follow the steps to connect one. - [Connect an agent platform](https://documentation.gravitee.io/gravitee-gamma/agent-management/import/integrations/connect-an-agent-platform.md): Connect an Azure AI Foundry project or a Gemini Enterprise Agent Platform project as an integration, then sync its agents into the Catalog. Follow the steps to connect a platform, sync its agents, and - [Register an agent](https://documentation.gravitee.io/gravitee-gamma/agent-management/import/integrations/import-an-agent.md): Register an external agent in the Catalog by fetching its A2A agent card from an endpoint. Follow the steps to fetch the card and review the fields. - [Discover shadow AI agents from Edge Management](https://documentation.gravitee.io/gravitee-gamma/agent-management/import/integrations/discover-shadow-ai-agents-from-edge-management.md): Turn the AI provider domains Edge Management detects into shadow AI agents in the Agent Management Catalog. Learn how the synchronization runs and what a shadow AI agent's page shows. - [Manage a registered agent](https://documentation.gravitee.io/gravitee-gamma/agent-management/import/integrations/manage-a-registered-agent.md): A registered agent's page in the Catalog is the hub for everything Gamma holds and controls for it. Learn what its Overview, sidebar, and actions bar offer. - [Give an agent an identity](https://documentation.gravitee.io/gravitee-gamma/agent-management/import/integrations/manage-a-registered-agent/give-an-agent-an-identity.md): The Identity page of an agent creates the gateway application that acts for it and gives that application an OAuth identity from Gravitee Access Management. Follow the steps to set both up. - [Route an agent through an A2A Proxy](https://documentation.gravitee.io/gravitee-gamma/agent-management/import/integrations/manage-a-registered-agent/route-an-agent-through-an-a2a-proxy.md): Put an A2A Proxy in front of a registered agent from its Proxies page, or link an existing proxy to it. Learn what the link enforces and how to detach it. - [Subscribe an agent to an LLM Proxy](https://documentation.gravitee.io/gravitee-gamma/agent-management/import/integrations/manage-a-registered-agent/subscribe-an-agent-to-an-llm-proxy.md): The Models page of an agent lists the models it calls and the LLM Proxies that route them. Follow the steps to subscribe the agent's application to a proxy. - [Subscribe an agent to an MCP Proxy](https://documentation.gravitee.io/gravitee-gamma/agent-management/import/integrations/manage-a-registered-agent/subscribe-an-agent-to-an-mcp-proxy.md): The Tools page of an agent lists what it calls in Azure AI Foundry and whether those calls go through the gateway. Follow the steps to subscribe the agent's application to the MCP Proxy that fronts a - [Create an agent identity](https://documentation.gravitee.io/gravitee-gamma/agent-management/import/create-an-agent-identity.md): Register an agent as an OAuth client in Gravitee Access Management with a persona that fits how it runs. Follow the steps in the registration wizard. - [Secure](https://documentation.gravitee.io/gravitee-gamma/agent-management/build.md): The Secure group of the Agent Management sidebar holds the proxies that govern LLM, MCP, and agent-to-agent traffic. Start with the proxy you need. - [LLM Proxies](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/llm-proxies.md): Create, design, and publish an LLM Proxy that routes model traffic through the AI Gateway. Choose the LLM Proxy task you want to start with. - [Create an LLM Proxy](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/llm-proxies/create-an-llm-proxy.md): Create an LLM Proxy that routes traffic to upstream model providers through the AI Gateway. Follow the steps in the wizard to configure and deploy it. - [Configure an LLM Proxy](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/llm-proxies/configure-an-llm-proxy.md): Configure guardrails, PII filtering, rate limiting, security plans, and structured output on an LLM Proxy. Follow the steps to add each policy. - [Configure LLM Proxy CORS](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/llm-proxies/configure-an-llm-proxy/configure-llm-proxy-cors.md): Enable cross-origin access for a Gamma LLM Proxy so the gateway adds the Access-Control headers. Follow the steps to set origins and methods. - [Design](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/llm-proxies/configure-an-llm-proxy/design.md): Design an LLM Proxy with guardrails, token rate limiting, text classification, and runtime model overrides. Pick the setting you want to configure. - [Add the Token Rate Limit policy](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/llm-proxies/configure-an-llm-proxy/design/add-the-token-rate-limit-policy.md): Add the Token Rate Limit policy to an LLM Proxy to cap the tokens a consumer spends over a rolling period. Follow the steps to configure it. - [Select a text classification model](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/llm-proxies/configure-an-llm-proxy/design/select-a-text-classification-model.md): Compare the text classification models behind the AI - Prompt Guard Rails policy on accuracy, languages, and labels. Choose the one that fits your traffic. - [Configure text classification](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/llm-proxies/configure-an-llm-proxy/design/configure-text-classification.md): Configure the AI - Prompt Guard Rails policy settings, set the sensitivity threshold, and choose whether to block or log. Follow the steps to tune it. - [Consumer access](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/llm-proxies/configure-an-llm-proxy/consumer-access.md): Publish an LLM Proxy and manage the subscriptions that grant consumers access to it. Follow the guides to open a proxy to the consumers you choose. - [Publish your LLM Proxy](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/llm-proxies/publish-your-llm-proxy.md): Publish an LLM Proxy so consumers can send prompts to its context path through the AI Gateway. Follow the steps to deploy it and check consumer access. - [Connect and consume third-party AI tools](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/llm-proxies/third-party-ai-tools.md): Route a third-party AI tool or framework through an LLM Proxy so it never holds a provider credential. Pick the client you want to connect. - [Connect Claude Code through an LLM Proxy](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/llm-proxies/third-party-ai-tools/connect-claude-code-through-an-llm-proxy.md): Configure Claude Code to reach Anthropic through an LLM Proxy while users keep their own OAuth login. Follow the steps to set up the plan and headers. - [Consume your LLM Proxy with LangChain](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/llm-proxies/third-party-ai-tools/consume-your-llm-proxy-with-langchain.md): Route a LangChain chain through an LLM Proxy so the chain never holds a provider credential. Follow the steps to point ChatOpenAI at your proxy. - [Accepted request formats](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/llm-proxies/accepted-request-formats.md): An LLM Proxy accepts requests in the OpenAI, Anthropic Messages, and Gemini generateContent formats. Find the endpoints and limits for each one. - [Override the model at runtime](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/llm-proxies/override-the-model-at-runtime.md): Route a request to a different model than the client asked for by setting a context attribute on an LLM Proxy flow. Follow the steps to override it. - [MCP Proxies](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/mcp-proxies.md): Create and govern an MCP Proxy that fronts an upstream MCP server with authentication, policies, and observability. Choose the MCP task you need. - [Create an MCP proxy](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/mcp-proxies/create-an-mcp-proxy.md): Create an MCP Proxy that governs an upstream MCP server with authentication, authorization, and observability. Follow the steps in the wizard. - [Configure your MCP proxy](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/mcp-proxies/configure-your-mcp.md): Configure upstream authentication on an MCP Proxy so the Gateway injects the credentials a third-party MCP server needs. Follow the steps to set it up. - [Design](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/mcp-proxies/configure-your-mcp/design.md): Design an MCP Proxy with policies applied at the server, method, and tool level, and edit an MCP Studio composition. Pick the guide for your task. - [Add policies to your MCP server](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/mcp-proxies/configure-your-mcp/design/add-policies-to-mcp-server.md): Control which consumers can invoke which tools on an MCP Proxy with fine-grained authorization policies. Follow the steps to create and deploy one. - [Apply policies to specific MCP methods](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/mcp-proxies/configure-your-mcp/design/add-policies-to-mcp-server/apply-policies-to-mcp-methods.md): Apply policies to specific MCP methods such as resources/list, tools/call, or prompts/get with a flow selector. Follow the steps in the Policy Studio. - [Apply policies to individual tool invocations](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/mcp-proxies/configure-your-mcp/design/add-policies-to-mcp-server/apply-policies-to-tool-invocations.md): Apply policies to a single high-value tool invocation on an MCP Proxy and leave other tools unconstrained. Follow the steps to target it in a flow. - [Layered governance for MCP tools](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/mcp-proxies/configure-your-mcp/design/add-policies-to-mcp-server/govern-mcp-tool-access.md): Authorization, rate limits, and response redaction govern what a caller can do through a Composite MCP Server. Learn how the three controls combine. - [Create an MCP Studio](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/mcp-proxies/create-an-mcp-studio.md): Compose tools, resources, and prompts from multiple sources into a governed Composite MCP Server. Follow the steps to create one in MCP Studio. - [Edit MCP Studio composition](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/mcp-proxies/edit-mcp-studio-composition.md): Change which tools an MCP Studio exposes, alias colliding tool names, and set upstream credentials. Follow the steps to edit your composition. - [Connect and secure third-party MCPs](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/mcp-proxies/third-party-mcp-servers.md): Put a third-party MCP server behind an MCP Proxy, authenticate upstream, and curate the tools it exposes. Pick the vendor you want to connect and secure. - [Connect and secure the GitHub MCP server](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/mcp-proxies/third-party-mcp-servers/connect-and-secure-github-mcp-server.md): A GitHub MCP server token carries every permission its owner holds. Follow the steps to connect and secure it behind a Gamma MCP Proxy. secure them with authentication, fine-grained authorization, rat - [Connect and secure the Atlassian MCP server](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/mcp-proxies/third-party-mcp-servers/connect-and-secure-atlassian-mcp-server.md): An Atlassian MCP server token carries every permission its owner holds. Follow the steps to connect and secure it behind a Gamma MCP Proxy. and authorize every call per caller identity. Follow the ste - [Connect and secure the Stripe MCP server](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/mcp-proxies/third-party-mcp-servers/connect-and-secure-stripe-mcp-server.md): The Stripe MCP server exposes a tool that can write through any Stripe API operation. Follow the steps to secure it behind a Gamma MCP Proxy. every write, and deny refunds per caller. Follow the steps - [A2A Proxies](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/a2a-proxies.md): Expose an upstream agent behind the AI Gateway with an A2A Proxy, then configure and secure it. Choose the A2A Proxy guide you want to start with. - [Expose your agent with the A2A Proxy](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/a2a-proxies/expose-agent-with-a2a-proxy.md): Expose an upstream agent behind the AI Gateway with an A2A Proxy so other agents can discover and call it. Follow the steps to create the proxy. - [Let consumers subscribe to your agent](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/a2a-proxies/let-consumers-subscribe-to-your-agent.md): Consumers reach your agent by subscribing an application to a plan on its A2A Proxy. Follow the steps to create and publish a plan in the Gamma console, show your terms in the Developer Portal, and ap - [Manage the consumers of your A2A Proxy](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/a2a-proxies/manage-the-consumers-of-your-a2a-proxy.md): The Consumers page of an A2A Proxy lists the applications subscribed to its plans. Follow the steps to create a subscription, approve a request, read the credentials, pause, transfer, or close a subsc - [Configure your A2A Proxy](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/a2a-proxies/configure-your-a2a-proxy.md): Configure an A2A Proxy's behavior, security, and observability from the Gamma console. Follow the steps to apply policies in the Policy Studio. - [General](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/a2a-proxies/configure-your-a2a-proxy/general.md): Manage the general settings of an A2A Proxy, including its behavior, security, and notifications. Choose the setting you want to change. - [Configure A2A Proxy notifications](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/a2a-proxies/configure-your-a2a-proxy/general/configure-a2a-proxy-notifications.md): Choose which API events send notifications for an A2A Proxy and where they are delivered. Follow the steps to add, edit, or delete a notification. - [Design](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/a2a-proxies/configure-your-a2a-proxy/design.md): Add policies in the Policy Studio to secure agent-to-agent traffic and control how it behaves. Follow the guide to design the flows of an A2A Proxy. - [Add policies to your A2A Proxy](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/a2a-proxies/configure-your-a2a-proxy/design/add-policies-to-a2a-proxy.md): Add policies to an A2A Proxy in Policy Studio to secure agent-to-agent traffic and control its behavior. Follow the steps to build and deploy a flow. - [Gateway](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/a2a-proxies/configure-your-a2a-proxy/gateway.md): Control which request and response data an A2A Proxy reports to logs and analytics, and turn on tracing. Follow the guide to set its reporter behavior. - [Configure logging and tracing](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/a2a-proxies/configure-your-a2a-proxy/gateway/configure-logging-and-tracing.md): Control which request and response data an A2A Proxy reports to logs and analytics, and turn on OpenTelemetry tracing. Follow the steps to configure it. - [Operations](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/a2a-proxies/configure-your-a2a-proxy/operations.md): Deploy an A2A Proxy to the gateway instances you choose, and review every version it has run. Follow the guides to configure and track a deployment. - [Configure A2A Proxy deployment](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/a2a-proxies/configure-your-a2a-proxy/operations/configure-a2a-proxy-deployment.md): Choose which gateway instances load an A2A Proxy by assigning sharding tags. Follow the steps on the Deployment Configuration page. - [Review A2A Proxy deployment history](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/a2a-proxies/configure-your-a2a-proxy/operations/review-a2a-proxy-deployment-history.md): The Deployment History page lists every deployment of a Gamma A2A Proxy, newest first. Follow the steps to compare versions and roll back. - [Publish your agent to the Developer Portal](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/a2a-proxies/publish-your-agent-to-the-developer-portal.md): List an agent exposed through a Gamma A2A Proxy in the Developer Portal catalog. Follow the steps to publish it and assign categories. - [Manage subscriptions](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/manage-subscriptions.md): A subscription binds one application to one plan on a Gamma LLM or MCP Proxy. Follow the steps to create, approve, and close subscriptions. - [Agent kill switch](https://documentation.gravitee.io/gravitee-gamma/agent-management/build/agent-killswitch.md): Stop an agent in one move from its page in the Catalog, which stops the A2A Proxy in front of it, pauses its gateway subscriptions, and disables it on Azure AI Foundry, or stop a proxy on its own. Fol - [Observe](https://documentation.gravitee.io/gravitee-gamma/agent-management/observe.md): The Observability group of the Agent Management sidebar holds the Dashboards, Logs, and Tracing pages. Open the view you need. - [Dashboards](https://documentation.gravitee.io/gravitee-gamma/agent-management/observe/dashboards.md): Read the dashboards that report AI traffic, cost, and tool usage across proxies and employee devices. Pick the dashboard you want to read. - [Monitor your LLM proxy](https://documentation.gravitee.io/gravitee-gamma/agent-management/observe/dashboards/monitor-your-llm-proxy.md): Monitor token usage, cost, and model and provider mix for your LLM Proxies on the LLM Overview dashboard. Learn what each widget and metric shows. - [Monitor your MCP servers](https://documentation.gravitee.io/gravitee-gamma/agent-management/observe/dashboards/monitor-your-mcp-servers.md): Monitor tool invocations, error rates, and latency for your MCP Proxies through the AI Gateway. Follow the steps to view metrics in the console. - [Monitor AI Gateway usage from employee systems](https://documentation.gravitee.io/gravitee-gamma/agent-management/observe/dashboards/monitor-ai-gateway-from-devices.md): View per-device and per-team AI traffic, shadow AI detection, and system health in the Edge Management dashboard. Learn what each view shows you. - [Logs](https://documentation.gravitee.io/gravitee-gamma/agent-management/observe/logs.md): Trace an individual invocation through the AI Gateway from its log entry. Follow the guide to read what a single call carried and how it was handled. - [Inspect your agent log](https://documentation.gravitee.io/gravitee-gamma/agent-management/observe/logs/inspect-your-agent-log.md): Trace every agent invocation through the AI Gateway with spans that record identity, inputs, latency, and cost. Learn how to read the agent log. - [Monitor agents, spend, and compliance on the Overview page](https://documentation.gravitee.io/gravitee-gamma/agent-management/observe/monitor-agents-spend-and-compliance.md): The Overview page is the Agent Management landing page. Read what its Agents, Spend through the gateway, and Compliance sections report across the environment. - [Monitor proxy and agent activity](https://documentation.gravitee.io/gravitee-gamma/agent-management/observe/monitor-proxy-activity.md): Read the 24-hour activity snapshot on the Overview page of an LLM Proxy or MCP Proxy, and the Activity page of an agent. Learn what each card reports. - [Performance targets](https://documentation.gravitee.io/gravitee-gamma/agent-management/observe/performance-targets.md): A performance target declares what acceptable looks like for Gamma proxies and agents. Learn how rules are built, scoped, and evaluated. - [Govern](https://documentation.gravitee.io/gravitee-gamma/agent-management/govern.md): Score every agent in your Gamma estate against the built-in EU AI Act framework and rulesets of your own, rate each agent's risk, and hold agent actions to your rules. Learn what each page covers. - [Score agent compliance with the EU AI Act framework](https://documentation.gravitee.io/gravitee-gamma/agent-management/govern/score-agent-compliance-with-the-eu-ai-act.md): Activate the built-in EU AI Act framework, read the verdict it computes for every agent, close the gaps it lists on an agent, and export the evidence for an auditor. Follow the steps to activate the f - [Rate an agent's risk level](https://documentation.gravitee.io/gravitee-gamma/agent-management/govern/rate-an-agents-risk-level.md): Rate an agent on Gravitee's four-step risk scale from its Overview page, so compliance frameworks, the Agents list, and the estate tables can read the rating. Follow the steps to set or change it. - [Create a custom compliance ruleset](https://documentation.gravitee.io/gravitee-gamma/agent-management/govern/create-a-custom-compliance-ruleset.md): Check every agent's metadata or the policies on its proxies against rules of your own, run the ruleset on demand, and read the verdict per agent. Follow the steps to create, run, edit, and delete a cu - [View the lineage of an agent or a proxy](https://documentation.gravitee.io/gravitee-gamma/agent-management/govern/view-agent-lineage.md): The Lineage page of Agent Management reconstructs what an agent or a proxy depended on from gateway traffic. Follow the steps to walk a lineage and read its nodes. - [Screen prompts and answers with Guardian Agents](https://documentation.gravitee.io/gravitee-gamma/agent-management/govern/guard-agent-actions-with-guardian-agents.md): Bind a Guardian Agent to an LLM Proxy so an agent screens every prompt and answer before it travels on, and find the guardian agents of your environment in the Catalog. Follow the steps to add, edit, - [Require human approval for MCP tool calls](https://documentation.gravitee.io/gravitee-gamma/agent-management/govern/require-human-approval-for-mcp-tool-calls.md): Declare approval rules against MCP tools so that matching tool calls wait at the AI Gateway for a human decision. Follow the steps to write rules, decide on held calls, and price decisions. - [Agent activity](https://documentation.gravitee.io/gravitee-gamma/agent-management/govern/agent-activity-logs.md): Read the record of one request an agent handled, with the calls it made through the AI Gateway and every decision a rule, a Guardian, or a person took on it. Learn where the record lives and what it c - [Cost and value](https://documentation.gravitee.io/gravitee-gamma/agent-management/cost-and-value.md): Price the resources Gamma agents consume and turn every run into a cost record you can attribute. Learn how cost and value fit together. - [Agent FinOps](https://documentation.gravitee.io/gravitee-gamma/agent-management/cost-and-value/agent-finops.md): Attach prices to the catalog models and MCP tools agents consume, price human decisions, and read what a proxy or an agent cost at the AI Gateway. - [Read what an agent cost](https://documentation.gravitee.io/gravitee-gamma/agent-management/cost-and-value/read-what-an-agent-cost.md): The Cost page of an agent adds up its model spend, tool spend, and human decisions over a period, and the Agent Overview dashboard charts them. Follow the steps to read both. - [Attribute business value to agent runs](https://documentation.gravitee.io/gravitee-gamma/agent-management/cost-and-value/attribute-business-value-to-agent-runs.md): Declare the business value an MCP tool delivers per successful call, and read the value an agent's tool calls delivered against what they cost. Follow the steps to set and read it. - [Get started](https://documentation.gravitee.io/gravitee-gamma/authorization-management/get-started.md): Authorization Management in Gamma, from the product overview to your first user, first imported resource, and first policy. Start with the overview. - [Authorization Management overview](https://documentation.gravitee.io/gravitee-gamma/authorization-management/get-started/authorization-management-overview.md): Authorization Management enforces fine-grained, catalog-aware access control across API, MCP, AI model, and agent traffic. Learn how the pieces connect. - [Create your first user](https://documentation.gravitee.io/gravitee-gamma/authorization-management/get-started/create-your-first-user.md): Create a local principal in Authorization Management so the policy engine has an identity to evaluate. Follow the steps to add your first one. - [Import your first resource from Agent catalog](https://documentation.gravitee.io/gravitee-gamma/authorization-management/get-started/import-your-first-resource-from-agent-catalog.md): Import a resource from the AI Catalog so every policy refers to one canonical Entity ID. Follow the quickstart to import your first item. - [Create your first policy](https://documentation.gravitee.io/gravitee-gamma/authorization-management/get-started/create-your-first-policy.md): Create and deploy your first authorization policy in the visual editor to get a permit rule enforced at runtime. Follow the steps to build one. - [Policy Structure](https://documentation.gravitee.io/gravitee-gamma/authorization-management/manage.md): The Policy Structure group of the Authorization Management sidebar holds the entities, actions, and schemas your policies are written against. - [Manage principals](https://documentation.gravitee.io/gravitee-gamma/authorization-management/manage/principals.md): Sync principals from Access Management, create local ones, and give them attributes and relationships. Start with how your identities arrive. - [Sync principals from Access Management](https://documentation.gravitee.io/gravitee-gamma/authorization-management/manage/principals/sync-principals-from-access-management.md): Synchronize users and groups from Gravitee Access Management so policies can reference your identity directory. Follow the steps to run a sync. - [Create a local principal](https://documentation.gravitee.io/gravitee-gamma/authorization-management/manage/principals/create-a-local-principal.md): Create a principal directly in Authorization Management when the identity is not synced or imported. Follow the steps on the Entities page. - [Add attributes to principals](https://documentation.gravitee.io/gravitee-gamma/authorization-management/manage/principals/add-attributes-to-principals.md): Attach custom metadata to a principal, such as department or device trust, so policies test more than identity. Follow the steps to add attributes. - [Build principal relationships](https://documentation.gravitee.io/gravitee-gamma/authorization-management/manage/principals/build-principal-relationships.md): Link principals into parent-child hierarchies so that one policy can match every user in a group. Follow the steps to set and edit parents. - [Manage resources](https://documentation.gravitee.io/gravitee-gamma/authorization-management/manage/resources.md): Import resources from the Catalog, create local ones, and give them attributes and relationships. Start with where your resources come from. - [Import resources from Catalog](https://documentation.gravitee.io/gravitee-gamma/authorization-management/manage/resources/import-resources-from-catalog.md): Import resource entities from the AI Catalog into Authorization Management across all three categories. Follow the steps to browse and select them. - [Create a local resource](https://documentation.gravitee.io/gravitee-gamma/authorization-management/manage/resources/create-a-local-resource.md): Create a resource entity for the internal applications, data assets, and custom tools the AI Catalog does not hold. Follow the steps to add one. - [Add attributes to resources](https://documentation.gravitee.io/gravitee-gamma/authorization-management/manage/resources/add-attributes-to-resources.md): Attach custom metadata to a resource, such as sensitivity or ownership, so policy conditions can test it. Follow the steps to add attributes. - [Build resource relationships](https://documentation.gravitee.io/gravitee-gamma/authorization-management/manage/resources/build-resource-relationships.md): Establish parent-child hierarchies between resources so one policy covers a server and all of its tools. Follow the steps to set parents. - [Manage actions](https://documentation.gravitee.io/gravitee-gamma/authorization-management/manage/actions.md): Actions are the verbs your policies grant or forbid. Create one, and see how action Entity IDs are named and scoped. Start by creating an action. - [Create an action](https://documentation.gravitee.io/gravitee-gamma/authorization-management/manage/actions/create-an-action.md): Define the verbs your policies grant or forbid by creating an action entity that statements reference. Follow the steps on the Actions page. - [Action naming and scope](https://documentation.gravitee.io/gravitee-gamma/authorization-management/manage/actions/action-naming-and-scope.md): How action Entity IDs are structured and how the policy engine resolves them against policy types and resource scopes. Browse the naming reference. - [Manage schemas](https://documentation.gravitee.io/gravitee-gamma/authorization-management/manage/schemas.md): The schema declares the entity types, relationships, and actions your policies are written against. Start with how a schema is generated. - [Schema generation](https://documentation.gravitee.io/gravitee-gamma/authorization-management/manage/schemas/schema-generation.md): The schema is the contract your policies are written against, declaring entity types, relationships, and actions. Learn how it is generated and read. - [Edit your schema](https://documentation.gravitee.io/gravitee-gamma/authorization-management/manage/schemas/edit-your-schema.md): Modify an existing schema to add entity types, attributes, relationships, or actions. Follow the steps to edit, validate, and save your changes. - [Validate schema changes](https://documentation.gravitee.io/gravitee-gamma/authorization-management/manage/schemas/validate-schema-changes.md): How the console validates a schema change before saving, and the errors to expect. Learn the validation pipeline and how to fix a failure. - [Manage policies](https://documentation.gravitee.io/gravitee-gamma/authorization-management/configure.md): The Policy Management group of the Authorization Management sidebar holds the policies for MCPs, AI models, APIs, A2A agents, and custom resources. - [Create, update, and delete policies](https://documentation.gravitee.io/gravitee-gamma/authorization-management/configure/create-update-delete-policies.md): Reference for the Authorization Management policy editor, covering how to create, name, build, deploy, and delete a policy. Browse the full reference. - [MCP policy examples](https://documentation.gravitee.io/gravitee-gamma/authorization-management/configure/mcp-policy-examples.md): Govern MCP servers, tools, and prompts with policy examples for group access, time windows, and device trust. Adapt an example to your own servers. - [AI policy example](https://documentation.gravitee.io/gravitee-gamma/authorization-management/configure/ai-policy-example.md): Control which teams reach which AI models with policy examples for token budgets, cost ceilings, and guardrails. Adapt an example to your own models. - [API policy examples](https://documentation.gravitee.io/gravitee-gamma/authorization-management/configure/api-policy-examples.md): Govern API proxies, endpoints, and data fields with policy examples for scopes, rate limits, and tenant isolation. Adapt an example to your own APIs. - [Custom policies](https://documentation.gravitee.io/gravitee-gamma/authorization-management/configure/custom-policies.md): Custom policies govern resources outside the MCP, API, Agent, AI Model, and Event categories. Start with the overview, then create your first one. - [Custom policies overview](https://documentation.gravitee.io/gravitee-gamma/authorization-management/configure/custom-policies/custom-policies-overview.md): Custom policies protect internal applications, data assets, and bespoke resources. Learn how they differ from service policies and when to use them. - [Create a custom policy](https://documentation.gravitee.io/gravitee-gamma/authorization-management/configure/custom-policies/create-a-custom-policy.md): Create an authorization policy for resources not routed through the MCP, API, Agent, AI Model, or Event categories. Follow the steps to build one. - [PDP Gateways](https://documentation.gravitee.io/gravitee-gamma/authorization-management/evaluate.md): The PDP Gateways group of the Authorization Management sidebar holds the gateways that evaluate your policies and how policies reach them. - [Configure the Gravitee Gateway as a runtime](https://documentation.gravitee.io/gravitee-gamma/authorization-management/evaluate/configure-gravitee-gateway-as-runtime.md): Register a Gravitee Gateway as a Policy Decision Point so authorization decisions are evaluated at the wire level. Follow the steps to register one. - [Configure a sidecar as runtime](https://documentation.gravitee.io/gravitee-gamma/authorization-management/evaluate/configure-sidecar-as-runtime.md): Deploy the Policy Decision Point as a sidecar beside your application for latency-sensitive or air-gapped environments. Follow the steps to deploy it. - [Policy syncs](https://documentation.gravitee.io/gravitee-gamma/authorization-management/evaluate/policy-syncs.md): How authorization policies travel from the control plane to your runtime gateways, and how long it takes. Learn to read and monitor sync status. - [Analytics sent to the control plane](https://documentation.gravitee.io/gravitee-gamma/authorization-management/evaluate/analytics-sent-to-control-plane.md): The observability data that Policy Decision Point gateways send back to the Gravitee control plane. Learn what is collected and where it appears. - [Authorization policy synchronization](https://documentation.gravitee.io/gravitee-gamma/authorization-management/evaluate/authz-gateway-sync.md): Gamma Authorization Management evaluates policies locally inside the API Gateway. Learn how a change in the console becomes enforceable. - [Get started](https://documentation.gravitee.io/gravitee-gamma/edge-management/get-started.md): Edge Management in Gamma, starting with what the Edge Daemon does on employee devices and how it fits the platform. Start with the overview. - [Edge Management overview](https://documentation.gravitee.io/gravitee-gamma/edge-management/get-started/edge-management-overview.md): The Edge Daemon observes AI traffic on employee devices, enforces local policy, and forwards it to the AI Gateway. Learn how it routes traffic. - [Connect](https://documentation.gravitee.io/gravitee-gamma/edge-management/connect.md): Connect your edge environments and tools to the Gamma Edge Daemon, from the proxy APIs to fleet deployment. Start with the task you need. - [Proxy API reference](https://documentation.gravitee.io/gravitee-gamma/edge-management/connect/proxy-api-reference.md): The LLM Proxy and HTTP proxy APIs that receive the traffic an Edge Daemon forwards, and the plan they must expose. Browse the full reference. - [Configure Edge Management](https://documentation.gravitee.io/gravitee-gamma/edge-management/connect/configure-edge-management.md): Set the Gateway URLs, proxy routes, and shadow AI monitoring for Edge Management in one place. Follow the steps to create and save a configuration. - [Configure Edge Ingress](https://documentation.gravitee.io/gravitee-gamma/edge-management/connect/configure-edge-ingress.md): Expose the Edge Reactor port on Kubernetes so Edge Daemons on employee devices reach the AI Gateway. Follow the steps to enable ingress in Helm. - [Configure Kandji to deploy the Edge Daemon](https://documentation.gravitee.io/gravitee-gamma/edge-management/connect/configure-kandji-daemon.md): Deploy the Edge Daemon across your macOS fleet with Kandji, using the script the console generates. Follow the steps to create the Custom App. ## Platform Management - [Overview](https://documentation.gravitee.io/platform-management/overview.md): Gravitee Gamma governs API, event stream, and AI agent traffic from one platform. Learn how its modules, gateways, and shared catalog fit together. - [Release Notes](https://documentation.gravitee.io/platform-management/gamma-release-notes.md): Everything in the first Gravitee Gamma release, across Agent, API, Authorization, Edge, and Event Stream Management. Browse the highlights. - [Get started](https://documentation.gravitee.io/platform-management/get-started.md): Choose the Gamma getting-started path that fits you, whether you are new to Gravitee or activating Gamma on an existing installation. Start here. - [Get started for new users](https://documentation.gravitee.io/platform-management/get-started/get-started-for-new-users.md): New to Gravitee and want to run Gamma? Choose between Gravitee Next-Gen Cloud and installing it yourself. Compare the two paths and pick one. - [Fully self-hosted installation with Vanilla Kubernetes](https://documentation.gravitee.io/platform-management/get-started/get-started-for-new-users/fully-self-hosted-with-vanilla-kubernetes.md): Run a full Gamma platform yourself on Kubernetes with the Gravitee Helm chart. Choose the guide for your cluster and the ingress it needs. - [Fully self-hosted installation with Docker](https://documentation.gravitee.io/platform-management/get-started/get-started-for-new-users/fully-self-hosted-with-docker.md): Run a full Gamma platform yourself with Docker, bringing up the consoles, Gateway, and datastores on one host. Choose the Docker guide that fits. - [Get started for existing users](https://documentation.gravitee.io/platform-management/get-started/get-started-for-existing-users.md): Already running Gravitee? Activate Gamma on your existing installation instead of installing from scratch. Choose the path for how you run it. - [Activate Gamma with Docker Compose](https://documentation.gravitee.io/platform-management/get-started/get-started-for-existing-users/activate-gamma-with-docker-compose.md): Activate Gamma on an existing Docker Compose installation of Gravitee by moving to the Gamma build. Follow the steps to enable and verify it. - [Activate Gamma with Kubernetes (Helm)](https://documentation.gravitee.io/platform-management/get-started/get-started-for-existing-users/activate-gamma-with-kubernetes-helm.md): Activate Gamma on an existing Kubernetes deployment of Gravitee with the Helm chart. Follow the steps to move to the Gamma build and enable it. - [Install](https://documentation.gravitee.io/platform-management/install.md): Choose between a self-hosted Gamma installation, where you run everything, and a hybrid one, where Gravitee hosts the control plane. Pick your model. - [Self-hosted installation guides](https://documentation.gravitee.io/platform-management/install/self-hosted-installation-guides.md): A self-hosted Gamma installation runs every component in your own infrastructure. Choose a Docker or Kubernetes deployment method to begin. - [Docker](https://documentation.gravitee.io/platform-management/install/self-hosted-installation-guides/docker.md): Every Gamma component on one host, from MongoDB and Elasticsearch to the consoles. Compare the Docker Compose and Docker CLI methods before you start. - [Docker Compose](https://documentation.gravitee.io/platform-management/install/self-hosted-installation-guides/docker/docker-compose.md): Install a fully self-hosted Gamma platform on one host with Docker Compose. Follow the steps to write the compose file and add a license key. - [Docker CLI](https://documentation.gravitee.io/platform-management/install/self-hosted-installation-guides/docker/docker-cli.md): Install a fully self-hosted Gamma platform on one host with the Docker CLI. Follow the steps to run the datastores, Gateway, and consoles. - [Kubernetes](https://documentation.gravitee.io/platform-management/install/self-hosted-installation-guides/kubernetes.md): Run the full Gamma stack on Kubernetes with the Gravitee Helm chart, datastores included. Pick the guide that matches the cluster you operate. - [Vanilla Kubernetes](https://documentation.gravitee.io/platform-management/install/self-hosted-installation-guides/kubernetes/vanilla-kubernetes.md): Install a fully self-hosted Gamma platform on a vanilla Kubernetes cluster. Follow the steps to deploy every component with the Helm chart. - [AWS EKS](https://documentation.gravitee.io/platform-management/install/self-hosted-installation-guides/kubernetes/aws-eks.md): Run the full Gamma stack on AWS EKS, with the load balancer controller plus the MongoDB and Elasticsearch datastores. Follow the steps to deploy it. - [Azure AKS](https://documentation.gravitee.io/platform-management/install/self-hosted-installation-guides/kubernetes/azure-aks.md): Run the full Gamma stack on Azure AKS behind an NGINX ingress controller. Follow the steps to create the namespace and install every component. - [OpenShift](https://documentation.gravitee.io/platform-management/install/self-hosted-installation-guides/kubernetes/openshift.md): Install a fully self-hosted Gamma platform on OpenShift, with MongoDB and Elasticsearch. Follow the steps to deploy it with the Helm chart. - [Hybrid installation guides](https://documentation.gravitee.io/platform-management/install/hybrid-installation-guides.md): In a hybrid Gamma deployment, Gravitee hosts the control plane and you run the Gateway. Choose a Docker or Kubernetes deployment method. - [Docker](https://documentation.gravitee.io/platform-management/install/hybrid-installation-guides/docker.md): A hybrid Gateway on one host talks to a Gravitee Cloud control plane. Compare the Docker Compose and Docker CLI methods and what each one runs. - [Docker Compose](https://documentation.gravitee.io/platform-management/install/hybrid-installation-guides/docker/docker-compose.md): Define a hybrid Gamma Gateway in a compose file and an env file, then bring it up in one command. Follow the steps to write and run them. - [Docker CLI](https://documentation.gravitee.io/platform-management/install/hybrid-installation-guides/docker/docker-cli.md): Start a hybrid Gamma Gateway container by container with the Docker CLI, creating the network and Redis first. Follow the steps to run it. - [Kubernetes](https://documentation.gravitee.io/platform-management/install/hybrid-installation-guides/kubernetes.md): Deploy a hybrid Gamma Gateway with the Gravitee Helm chart on EKS, AKS, OpenShift, or vanilla Kubernetes. Choose the guide for your cluster. - [Vanilla Kubernetes](https://documentation.gravitee.io/platform-management/install/hybrid-installation-guides/kubernetes/vanilla-kubernetes.md): Install a hybrid Gamma Gateway on a vanilla Kubernetes cluster with the Gravitee Helm chart. Follow the steps to deploy the Gateway and Redis. - [AWS EKS](https://documentation.gravitee.io/platform-management/install/hybrid-installation-guides/kubernetes/aws-eks.md): Install a hybrid Gamma Gateway on AWS EKS, configuring the load balancer controller for Auto Mode or standard clusters. Follow the steps to deploy. - [Azure AKS](https://documentation.gravitee.io/platform-management/install/hybrid-installation-guides/kubernetes/azure-aks.md): Install a hybrid Gamma Gateway on Azure AKS behind an NGINX ingress controller. Follow the steps to create the namespace and deploy the chart. - [OpenShift](https://documentation.gravitee.io/platform-management/install/hybrid-installation-guides/kubernetes/openshift.md): Install a hybrid Gamma Gateway on OpenShift, from creating the project to running Redis. Follow the steps to deploy it with the Helm chart. - [Overview](https://documentation.gravitee.io/platform-management/applications.md): The Overview group of the Platform Management sidebar holds the environment's Applications. Open it to work with the consumer applications. - [Manage applications](https://documentation.gravitee.io/platform-management/applications/manage-applications.md): View, create, and manage the consumer applications that subscribe to your API plans. Follow the steps to work with them on the Applications page. - [APIs & Assets](https://documentation.gravitee.io/platform-management/apis-and-assets.md): The APIs & Assets group of the Platform Management sidebar holds the environment's Metadata and Dictionaries. Choose the one you want to manage. - [Manage environment metadata](https://documentation.gravitee.io/platform-management/apis-and-assets/manage-environment-metadata.md): The Metadata page in the Gamma console holds the key-value entries that every API in the selected environment inherits. Add, edit, search, and delete them. - [Manage dictionaries](https://documentation.gravitee.io/platform-management/apis-and-assets/manage-dictionaries.md): Create, deploy, and manage the dictionaries that provide environment-scoped lookup data to API policies from the Dictionaries page in the Gamma console. - [System & Security](https://documentation.gravitee.io/platform-management/system-and-security.md): The System & Security group of the Platform Management sidebar holds the environment's Access Management connection. Open it to configure the connection. - [Configure Access Management](https://documentation.gravitee.io/platform-management/system-and-security/configure-access-management.md): Connect the Gamma console to a Gravitee Access Management instance so you can sync its domains. Follow the steps to configure the connection. - [Configure OpenTelemetry tracing and logs](https://documentation.gravitee.io/platform-management/system-and-security/configure-opentelemetry-tracing-and-logs.md): The Gamma Trace Explorer reads from an OpenTelemetry pipeline you run alongside Gravitee. Follow the steps to export, read, and collect traces. - [Configure OpenAPI viewer](https://documentation.gravitee.io/platform-management/system-and-security/configure-openapi-viewer.md): Choose which viewer the Gamma console and Developer Portal use to render OpenAPI specifications. Follow the steps to change the default viewer. ## Agent Management - [Overview](https://documentation.gravitee.io/agent-management/overview.md): Agent Management governs LLM, MCP, and agent-to-agent traffic from one control plane. Find the use case you need and the guide that covers it. - [LLM Proxy provider support](https://documentation.gravitee.io/agent-management/overview/llm-proxy-provider-support.md): Which OpenAI features each LLM Proxy provider supports, how requests map to each native API, and the limits that apply. Browse the full reference. - [AI resources](https://documentation.gravitee.io/agent-management/overview/ai-resources.md): AI resources supply the models and vector stores that Guard Rails, PII Filtering, and Semantic Caching policies call. Compare the resource types. - [Get started](https://documentation.gravitee.io/agent-management/get-started.md): Agent Management in Gamma, from the overview and the roles reference to the MCP Proxy and LLM Proxy quickstarts. Start with the page that fits your task. - [Roles and permissions](https://documentation.gravitee.io/agent-management/get-started/roles-and-permissions.md): The environment-scoped permissions that govern who can view, create, edit, and delete Agent Management resources. Find the permission you need. - [Create your first MCP server](https://documentation.gravitee.io/agent-management/get-started/create-your-first-mcp-server.md): Create your first MCP Proxy in front of an upstream MCP server, using Proxy mode with API key security. Follow the quickstart to get it running. - [Create your first LLM Proxy](https://documentation.gravitee.io/agent-management/get-started/create-your-llm-proxy.md): Create an LLM Proxy, connect it to a model provider, and send a test prompt through the AI Gateway. Follow the quickstart to get one running. - [Configure your Access Management instance](https://documentation.gravitee.io/agent-management/get-started/configure-your-access-management-instance.md): Connect the Agent Management module to a Gravitee Access Management instance and select a domain. Follow the steps to configure the connection. - [Catalog](https://documentation.gravitee.io/agent-management/import.md): The Catalog group of the Agent Management sidebar holds the models, servers, tools, prompts, resources, skills, agents, and identities your agents use. - [Add an AI model](https://documentation.gravitee.io/agent-management/import/add-an-ai-model.md): Add an AI model to the Catalog so an LLM Proxy can route to it. Follow the steps to import models from a provider and edit their details. - [Add an MCP Registry](https://documentation.gravitee.io/agent-management/import/add-an-mcp-registry.md): Importing MCP servers in bulk from an external registry is planned for a future release. Register a server by URL to add one to the Catalog today. - [Register an MCP server](https://documentation.gravitee.io/agent-management/import/register-an-mcp-server.md): Register an MCP server to add it to the Catalog with its tools, resources, and prompts. Follow the steps to verify the URL and import its capabilities. - [Import prompts](https://documentation.gravitee.io/agent-management/import/import-prompts.md): Prompts are reusable, parameterized templates discovered from registered MCP servers and cataloged for governance. Review your imported prompts. - [Add MCP resources](https://documentation.gravitee.io/agent-management/import/add-mcp-resources.md): MCP resources are read-only data items agents use as context, discovered from registered MCP servers. Review the resources cataloged for your servers. - [Create API tools](https://documentation.gravitee.io/agent-management/import/create-api-tools.md): Expose REST APIs governed in API Management as agent-accessible tools in the Catalog. Follow the steps to create an API tool from your endpoints. - [Add a knowledge source](https://documentation.gravitee.io/agent-management/import/add-knowledge-source.md): Add a knowledge source so agents can read documentation and reference material as context. Follow the steps to add inline or remote documents. - [Upload skills](https://documentation.gravitee.io/agent-management/import/upload-skills.md): Upload a skill package so agents can consume it as an MCP resource and you can govern it. Follow the steps to structure the zip file and add it. - [Integrations](https://documentation.gravitee.io/agent-management/import/integrations.md): Integrations bring models and agents from outside Gamma into the Catalog. Learn how to connect a model provider, connect an agent platform, and register an agent by hand. - [Connect integrations](https://documentation.gravitee.io/agent-management/import/integrations/connect-integrations.md): An integration connects Gamma to an upstream AI platform so its models import into the AI Models catalog. Follow the steps to connect one. - [Connect an agent platform](https://documentation.gravitee.io/agent-management/import/integrations/connect-an-agent-platform.md): Connect an Azure AI Foundry project or a Gemini Enterprise Agent Platform project as an integration, then sync its agents into the Catalog. Follow the steps to connect a platform, sync its agents, and - [Register an agent](https://documentation.gravitee.io/agent-management/import/integrations/import-an-agent.md): Register an external agent in the Catalog by fetching its A2A agent card from an endpoint. Follow the steps to fetch the card and review the fields. - [Discover shadow AI agents from Edge Management](https://documentation.gravitee.io/agent-management/import/integrations/discover-shadow-ai-agents-from-edge-management.md): Turn the AI provider domains Edge Management detects into shadow AI agents in the Agent Management Catalog. Learn how the synchronization runs and what a shadow AI agent's page shows. - [Manage a registered agent](https://documentation.gravitee.io/agent-management/import/integrations/manage-a-registered-agent.md): A registered agent's page in the Catalog is the hub for everything Gamma holds and controls for it. Learn what its Overview, sidebar, and actions bar offer. - [Give an agent an identity](https://documentation.gravitee.io/agent-management/import/integrations/manage-a-registered-agent/give-an-agent-an-identity.md): The Identity page of an agent creates the gateway application that acts for it and gives that application an OAuth identity from Gravitee Access Management. Follow the steps to set both up. - [Route an agent through an A2A Proxy](https://documentation.gravitee.io/agent-management/import/integrations/manage-a-registered-agent/route-an-agent-through-an-a2a-proxy.md): Put an A2A Proxy in front of a registered agent from its Proxies page, or link an existing proxy to it. Learn what the link enforces and how to detach it. - [Subscribe an agent to an LLM Proxy](https://documentation.gravitee.io/agent-management/import/integrations/manage-a-registered-agent/subscribe-an-agent-to-an-llm-proxy.md): The Models page of an agent lists the models it calls and the LLM Proxies that route them. Follow the steps to subscribe the agent's application to a proxy. - [Subscribe an agent to an MCP Proxy](https://documentation.gravitee.io/agent-management/import/integrations/manage-a-registered-agent/subscribe-an-agent-to-an-mcp-proxy.md): The Tools page of an agent lists what it calls in Azure AI Foundry and whether those calls go through the gateway. Follow the steps to subscribe the agent's application to the MCP Proxy that fronts a - [Create an agent identity](https://documentation.gravitee.io/agent-management/import/create-an-agent-identity.md): Register an agent as an OAuth client in Gravitee Access Management with a persona that fits how it runs. Follow the steps in the registration wizard. - [Secure](https://documentation.gravitee.io/agent-management/build.md): The Secure group of the Agent Management sidebar holds the proxies that govern LLM, MCP, and agent-to-agent traffic. Start with the proxy you need. - [LLM Proxies](https://documentation.gravitee.io/agent-management/build/llm-proxies.md): Create, design, and publish an LLM Proxy that routes model traffic through the AI Gateway. Choose the LLM Proxy task you want to start with. - [Create an LLM Proxy](https://documentation.gravitee.io/agent-management/build/llm-proxies/create-an-llm-proxy.md): Create an LLM Proxy that routes traffic to upstream model providers through the AI Gateway. Follow the steps in the wizard to configure and deploy it. - [Configure an LLM Proxy](https://documentation.gravitee.io/agent-management/build/llm-proxies/configure-an-llm-proxy.md): Configure guardrails, PII filtering, rate limiting, security plans, and structured output on an LLM Proxy. Follow the steps to add each policy. - [Configure LLM Proxy CORS](https://documentation.gravitee.io/agent-management/build/llm-proxies/configure-an-llm-proxy/configure-llm-proxy-cors.md): Enable cross-origin access for a Gamma LLM Proxy so the gateway adds the Access-Control headers. Follow the steps to set origins and methods. - [Design](https://documentation.gravitee.io/agent-management/build/llm-proxies/configure-an-llm-proxy/design.md): Design an LLM Proxy with guardrails, token rate limiting, text classification, and runtime model overrides. Pick the setting you want to configure. - [Add the Token Rate Limit policy](https://documentation.gravitee.io/agent-management/build/llm-proxies/configure-an-llm-proxy/design/add-the-token-rate-limit-policy.md): Add the Token Rate Limit policy to an LLM Proxy to cap the tokens a consumer spends over a rolling period. Follow the steps to configure it. - [Select a text classification model](https://documentation.gravitee.io/agent-management/build/llm-proxies/configure-an-llm-proxy/design/select-a-text-classification-model.md): Compare the text classification models behind the AI - Prompt Guard Rails policy on accuracy, languages, and labels. Choose the one that fits your traffic. - [Configure text classification](https://documentation.gravitee.io/agent-management/build/llm-proxies/configure-an-llm-proxy/design/configure-text-classification.md): Configure the AI - Prompt Guard Rails policy settings, set the sensitivity threshold, and choose whether to block or log. Follow the steps to tune it. - [Consumer access](https://documentation.gravitee.io/agent-management/build/llm-proxies/configure-an-llm-proxy/consumer-access.md): Publish an LLM Proxy and manage the subscriptions that grant consumers access to it. Follow the guides to open a proxy to the consumers you choose. - [Publish your LLM Proxy](https://documentation.gravitee.io/agent-management/build/llm-proxies/publish-your-llm-proxy.md): Publish an LLM Proxy so consumers can send prompts to its context path through the AI Gateway. Follow the steps to deploy it and check consumer access. - [Connect and consume third-party AI tools](https://documentation.gravitee.io/agent-management/build/llm-proxies/third-party-ai-tools.md): Route a third-party AI tool or framework through an LLM Proxy so it never holds a provider credential. Pick the client you want to connect. - [Connect Claude Code through an LLM Proxy](https://documentation.gravitee.io/agent-management/build/llm-proxies/third-party-ai-tools/connect-claude-code-through-an-llm-proxy.md): Configure Claude Code to reach Anthropic through an LLM Proxy while users keep their own OAuth login. Follow the steps to set up the plan and headers. - [Consume your LLM Proxy with LangChain](https://documentation.gravitee.io/agent-management/build/llm-proxies/third-party-ai-tools/consume-your-llm-proxy-with-langchain.md): Route a LangChain chain through an LLM Proxy so the chain never holds a provider credential. Follow the steps to point ChatOpenAI at your proxy. - [Accepted request formats](https://documentation.gravitee.io/agent-management/build/llm-proxies/accepted-request-formats.md): An LLM Proxy accepts requests in the OpenAI, Anthropic Messages, and Gemini generateContent formats. Find the endpoints and limits for each one. - [Override the model at runtime](https://documentation.gravitee.io/agent-management/build/llm-proxies/override-the-model-at-runtime.md): Route a request to a different model than the client asked for by setting a context attribute on an LLM Proxy flow. Follow the steps to override it. - [MCP Proxies](https://documentation.gravitee.io/agent-management/build/mcp-proxies.md): Create and govern an MCP Proxy that fronts an upstream MCP server with authentication, policies, and observability. Choose the MCP task you need. - [Create an MCP proxy](https://documentation.gravitee.io/agent-management/build/mcp-proxies/create-an-mcp-proxy.md): Create an MCP Proxy that governs an upstream MCP server with authentication, authorization, and observability. Follow the steps in the wizard. - [Configure your MCP proxy](https://documentation.gravitee.io/agent-management/build/mcp-proxies/configure-your-mcp.md): Configure upstream authentication on an MCP Proxy so the Gateway injects the credentials a third-party MCP server needs. Follow the steps to set it up. - [Design](https://documentation.gravitee.io/agent-management/build/mcp-proxies/configure-your-mcp/design.md): Design an MCP Proxy with policies applied at the server, method, and tool level, and edit an MCP Studio composition. Pick the guide for your task. - [Add policies to your MCP server](https://documentation.gravitee.io/agent-management/build/mcp-proxies/configure-your-mcp/design/add-policies-to-mcp-server.md): Control which consumers can invoke which tools on an MCP Proxy with fine-grained authorization policies. Follow the steps to create and deploy one. - [Apply policies to specific MCP methods](https://documentation.gravitee.io/agent-management/build/mcp-proxies/configure-your-mcp/design/add-policies-to-mcp-server/apply-policies-to-mcp-methods.md): Apply policies to specific MCP methods such as resources/list, tools/call, or prompts/get with a flow selector. Follow the steps in the Policy Studio. - [Apply policies to individual tool invocations](https://documentation.gravitee.io/agent-management/build/mcp-proxies/configure-your-mcp/design/add-policies-to-mcp-server/apply-policies-to-tool-invocations.md): Apply policies to a single high-value tool invocation on an MCP Proxy and leave other tools unconstrained. Follow the steps to target it in a flow. - [Layered governance for MCP tools](https://documentation.gravitee.io/agent-management/build/mcp-proxies/configure-your-mcp/design/add-policies-to-mcp-server/govern-mcp-tool-access.md): Authorization, rate limits, and response redaction govern what a caller can do through a Composite MCP Server. Learn how the three controls combine. - [Create an MCP Studio](https://documentation.gravitee.io/agent-management/build/mcp-proxies/create-an-mcp-studio.md): Compose tools, resources, and prompts from multiple sources into a governed Composite MCP Server. Follow the steps to create one in MCP Studio. - [Edit MCP Studio composition](https://documentation.gravitee.io/agent-management/build/mcp-proxies/edit-mcp-studio-composition.md): Change which tools an MCP Studio exposes, alias colliding tool names, and set upstream credentials. Follow the steps to edit your composition. - [Connect and secure third-party MCPs](https://documentation.gravitee.io/agent-management/build/mcp-proxies/third-party-mcp-servers.md): Put a third-party MCP server behind an MCP Proxy, authenticate upstream, and curate the tools it exposes. Pick the vendor you want to connect and secure. - [Connect and secure the GitHub MCP server](https://documentation.gravitee.io/agent-management/build/mcp-proxies/third-party-mcp-servers/connect-and-secure-github-mcp-server.md): A GitHub MCP server token carries every permission its owner holds. Follow the steps to connect and secure it behind a Gamma MCP Proxy. secure them with authentication, fine-grained authorization, rat - [Connect and secure the Atlassian MCP server](https://documentation.gravitee.io/agent-management/build/mcp-proxies/third-party-mcp-servers/connect-and-secure-atlassian-mcp-server.md): An Atlassian MCP server token carries every permission its owner holds. Follow the steps to connect and secure it behind a Gamma MCP Proxy. and authorize every call per caller identity. Follow the ste - [Connect and secure the Stripe MCP server](https://documentation.gravitee.io/agent-management/build/mcp-proxies/third-party-mcp-servers/connect-and-secure-stripe-mcp-server.md): The Stripe MCP server exposes a tool that can write through any Stripe API operation. Follow the steps to secure it behind a Gamma MCP Proxy. every write, and deny refunds per caller. Follow the steps - [A2A Proxies](https://documentation.gravitee.io/agent-management/build/a2a-proxies.md): Expose an upstream agent behind the AI Gateway with an A2A Proxy, then configure and secure it. Choose the A2A Proxy guide you want to start with. - [Expose your agent with the A2A Proxy](https://documentation.gravitee.io/agent-management/build/a2a-proxies/expose-agent-with-a2a-proxy.md): Expose an upstream agent behind the AI Gateway with an A2A Proxy so other agents can discover and call it. Follow the steps to create the proxy. - [Let consumers subscribe to your agent](https://documentation.gravitee.io/agent-management/build/a2a-proxies/let-consumers-subscribe-to-your-agent.md): Consumers reach your agent by subscribing an application to a plan on its A2A Proxy. Follow the steps to create and publish a plan in the Gamma console, show your terms in the Developer Portal, and ap - [Manage the consumers of your A2A Proxy](https://documentation.gravitee.io/agent-management/build/a2a-proxies/manage-the-consumers-of-your-a2a-proxy.md): The Consumers page of an A2A Proxy lists the applications subscribed to its plans. Follow the steps to create a subscription, approve a request, read the credentials, pause, transfer, or close a subsc - [Configure your A2A Proxy](https://documentation.gravitee.io/agent-management/build/a2a-proxies/configure-your-a2a-proxy.md): Configure an A2A Proxy's behavior, security, and observability from the Gamma console. Follow the steps to apply policies in the Policy Studio. - [General](https://documentation.gravitee.io/agent-management/build/a2a-proxies/configure-your-a2a-proxy/general.md): Manage the general settings of an A2A Proxy, including its behavior, security, and notifications. Choose the setting you want to change. - [Configure A2A Proxy notifications](https://documentation.gravitee.io/agent-management/build/a2a-proxies/configure-your-a2a-proxy/general/configure-a2a-proxy-notifications.md): Choose which API events send notifications for an A2A Proxy and where they are delivered. Follow the steps to add, edit, or delete a notification. - [Design](https://documentation.gravitee.io/agent-management/build/a2a-proxies/configure-your-a2a-proxy/design.md): Add policies in the Policy Studio to secure agent-to-agent traffic and control how it behaves. Follow the guide to design the flows of an A2A Proxy. - [Add policies to your A2A Proxy](https://documentation.gravitee.io/agent-management/build/a2a-proxies/configure-your-a2a-proxy/design/add-policies-to-a2a-proxy.md): Add policies to an A2A Proxy in Policy Studio to secure agent-to-agent traffic and control its behavior. Follow the steps to build and deploy a flow. - [Gateway](https://documentation.gravitee.io/agent-management/build/a2a-proxies/configure-your-a2a-proxy/gateway.md): Control which request and response data an A2A Proxy reports to logs and analytics, and turn on tracing. Follow the guide to set its reporter behavior. - [Configure logging and tracing](https://documentation.gravitee.io/agent-management/build/a2a-proxies/configure-your-a2a-proxy/gateway/configure-logging-and-tracing.md): Control which request and response data an A2A Proxy reports to logs and analytics, and turn on OpenTelemetry tracing. Follow the steps to configure it. - [Operations](https://documentation.gravitee.io/agent-management/build/a2a-proxies/configure-your-a2a-proxy/operations.md): Deploy an A2A Proxy to the gateway instances you choose, and review every version it has run. Follow the guides to configure and track a deployment. - [Configure A2A Proxy deployment](https://documentation.gravitee.io/agent-management/build/a2a-proxies/configure-your-a2a-proxy/operations/configure-a2a-proxy-deployment.md): Choose which gateway instances load an A2A Proxy by assigning sharding tags. Follow the steps on the Deployment Configuration page. - [Review A2A Proxy deployment history](https://documentation.gravitee.io/agent-management/build/a2a-proxies/configure-your-a2a-proxy/operations/review-a2a-proxy-deployment-history.md): The Deployment History page lists every deployment of a Gamma A2A Proxy, newest first. Follow the steps to compare versions and roll back. - [Publish your agent to the Developer Portal](https://documentation.gravitee.io/agent-management/build/a2a-proxies/publish-your-agent-to-the-developer-portal.md): List an agent exposed through a Gamma A2A Proxy in the Developer Portal catalog. Follow the steps to publish it and assign categories. - [Manage subscriptions](https://documentation.gravitee.io/agent-management/build/manage-subscriptions.md): A subscription binds one application to one plan on a Gamma LLM or MCP Proxy. Follow the steps to create, approve, and close subscriptions. - [Agent kill switch](https://documentation.gravitee.io/agent-management/build/agent-killswitch.md): Stop an agent in one move from its page in the Catalog, which stops the A2A Proxy in front of it, pauses its gateway subscriptions, and disables it on Azure AI Foundry, or stop a proxy on its own. Fol - [Observe](https://documentation.gravitee.io/agent-management/observe.md): The Observability group of the Agent Management sidebar holds the Dashboards, Logs, and Tracing pages. Open the view you need. - [Dashboards](https://documentation.gravitee.io/agent-management/observe/dashboards.md): Read the dashboards that report AI traffic, cost, and tool usage across proxies and employee devices. Pick the dashboard you want to read. - [Monitor your LLM proxy](https://documentation.gravitee.io/agent-management/observe/dashboards/monitor-your-llm-proxy.md): Monitor token usage, cost, and model and provider mix for your LLM Proxies on the LLM Overview dashboard. Learn what each widget and metric shows. - [Monitor your MCP servers](https://documentation.gravitee.io/agent-management/observe/dashboards/monitor-your-mcp-servers.md): Monitor tool invocations, error rates, and latency for your MCP Proxies through the AI Gateway. Follow the steps to view metrics in the console. - [Monitor AI Gateway usage from employee systems](https://documentation.gravitee.io/agent-management/observe/dashboards/monitor-ai-gateway-from-devices.md): View per-device and per-team AI traffic, shadow AI detection, and system health in the Edge Management dashboard. Learn what each view shows you. - [Logs](https://documentation.gravitee.io/agent-management/observe/logs.md): Trace an individual invocation through the AI Gateway from its log entry. Follow the guide to read what a single call carried and how it was handled. - [Inspect your agent log](https://documentation.gravitee.io/agent-management/observe/logs/inspect-your-agent-log.md): Trace every agent invocation through the AI Gateway with spans that record identity, inputs, latency, and cost. Learn how to read the agent log. - [Monitor agents, spend, and compliance on the Overview page](https://documentation.gravitee.io/agent-management/observe/monitor-agents-spend-and-compliance.md): The Overview page is the Agent Management landing page. Read what its Agents, Spend through the gateway, and Compliance sections report across the environment. - [Monitor proxy and agent activity](https://documentation.gravitee.io/agent-management/observe/monitor-proxy-activity.md): Read the 24-hour activity snapshot on the Overview page of an LLM Proxy or MCP Proxy, and the Activity page of an agent. Learn what each card reports. - [Performance targets](https://documentation.gravitee.io/agent-management/observe/performance-targets.md): A performance target declares what acceptable looks like for Gamma proxies and agents. Learn how rules are built, scoped, and evaluated. - [Govern](https://documentation.gravitee.io/agent-management/govern.md): Score every agent in your Gamma estate against the built-in EU AI Act framework and rulesets of your own, rate each agent's risk, and hold agent actions to your rules. Learn what each page covers. - [Score agent compliance with the EU AI Act framework](https://documentation.gravitee.io/agent-management/govern/score-agent-compliance-with-the-eu-ai-act.md): Activate the built-in EU AI Act framework, read the verdict it computes for every agent, close the gaps it lists on an agent, and export the evidence for an auditor. Follow the steps to activate the f - [Rate an agent's risk level](https://documentation.gravitee.io/agent-management/govern/rate-an-agents-risk-level.md): Rate an agent on Gravitee's four-step risk scale from its Overview page, so compliance frameworks, the Agents list, and the estate tables can read the rating. Follow the steps to set or change it. - [Create a custom compliance ruleset](https://documentation.gravitee.io/agent-management/govern/create-a-custom-compliance-ruleset.md): Check every agent's metadata or the policies on its proxies against rules of your own, run the ruleset on demand, and read the verdict per agent. Follow the steps to create, run, edit, and delete a cu - [View the lineage of an agent or a proxy](https://documentation.gravitee.io/agent-management/govern/view-agent-lineage.md): The Lineage page of Agent Management reconstructs what an agent or a proxy depended on from gateway traffic. Follow the steps to walk a lineage and read its nodes. - [Screen prompts and answers with Guardian Agents](https://documentation.gravitee.io/agent-management/govern/guard-agent-actions-with-guardian-agents.md): Bind a Guardian Agent to an LLM Proxy so an agent screens every prompt and answer before it travels on, and find the guardian agents of your environment in the Catalog. Follow the steps to add, edit, - [Require human approval for MCP tool calls](https://documentation.gravitee.io/agent-management/govern/require-human-approval-for-mcp-tool-calls.md): Declare approval rules against MCP tools so that matching tool calls wait at the AI Gateway for a human decision. Follow the steps to write rules, decide on held calls, and price decisions. - [Agent activity](https://documentation.gravitee.io/agent-management/govern/agent-activity-logs.md): Read the record of one request an agent handled, with the calls it made through the AI Gateway and every decision a rule, a Guardian, or a person took on it. Learn where the record lives and what it c - [Cost and value](https://documentation.gravitee.io/agent-management/cost-and-value.md): Price the resources Gamma agents consume and turn every run into a cost record you can attribute. Learn how cost and value fit together. - [Agent FinOps](https://documentation.gravitee.io/agent-management/cost-and-value/agent-finops.md): Attach prices to the catalog models and MCP tools agents consume, price human decisions, and read what a proxy or an agent cost at the AI Gateway. - [Read what an agent cost](https://documentation.gravitee.io/agent-management/cost-and-value/read-what-an-agent-cost.md): The Cost page of an agent adds up its model spend, tool spend, and human decisions over a period, and the Agent Overview dashboard charts them. Follow the steps to read both. - [Attribute business value to agent runs](https://documentation.gravitee.io/agent-management/cost-and-value/attribute-business-value-to-agent-runs.md): Declare the business value an MCP tool delivers per successful call, and read the value an agent's tool calls delivered against what they cost. Follow the steps to set and read it. ## API Management - [Get started](https://documentation.gravitee.io/api-management/get-started.md): API Management in Gamma, from the overview of its key concepts to the quickstart that builds your first API proxy. Start with the page you need. - [API Management overview](https://documentation.gravitee.io/api-management/get-started/api-management-overview.md): API Management governs REST, GraphQL, gRPC, and WebSocket traffic through API proxies. Learn what it does and how it fits the Gamma platform. - [Create your first API](https://documentation.gravitee.io/api-management/get-started/create-your-first-api.md): Create a keyless API proxy in the Gamma console, deploy it to the API Gateway, and verify it with a test request. Follow the quickstart to build one. - [Migrate](https://documentation.gravitee.io/api-management/migrate.md): Migrate an API estate to Gravitee API Management from Kong, Apigee, MuleSoft, Azure, or another gateway. Start by planning the migration. - [Plan a gateway migration](https://documentation.gravitee.io/api-management/migrate/plan-a-gateway-migration.md): Plan a gateway migration to Gravitee API Management from Kong, Apigee, MuleSoft, or Azure. Learn how the method works and what it refuses to convert. - [Migrate an API estate to Gravitee](https://documentation.gravitee.io/api-management/migrate/migrate-an-api-estate-to-gravitee.md): Migrate an API estate from a legacy gateway to Gravitee API Management with the migration agent skill. Follow the steps to convert and reconcile it. - [Source gateway reference](https://documentation.gravitee.io/api-management/migrate/source-gateway-reference.md): Source gateway migration reference for Gravitee API Management, covering Management API paths, Expression Language syntax, and credential export. - [Deploy](https://documentation.gravitee.io/api-management/deploy.md): What to expect from the API Management Gateway under load before you run APIs on it. - [Gateway benchmarks](https://documentation.gravitee.io/api-management/deploy/gateway-benchmarks.md): Release-over-release performance results for the API Management Gateway on sync proxy APIs, with the scenarios and controlled environment used to produce them. - [Manage](https://documentation.gravitee.io/api-management/manage.md): Open the Manage group of the API Management sidebar and choose API Proxies or API Products. - [API Proxies](https://documentation.gravitee.io/api-management/manage/api-proxies.md): Create an API proxy, then configure it from the groups of its own sidebar. Choose the group that holds the setting you need. - [Create an API proxy](https://documentation.gravitee.io/api-management/manage/api-proxies/create-an-api-proxy.md): Create an API proxy in the Gamma console with the from-scratch wizard or a quick-start template. Follow the steps through each wizard option. - [Configure your API proxy](https://documentation.gravitee.io/api-management/manage/api-proxies/configure-your-api-proxy.md): Refine an API proxy from the detail workspace, which groups configuration into seven sidebar sections. Start with the setting you need to change. - [General](https://documentation.gravitee.io/api-management/manage/api-proxies/general.md): The General group of an API proxy's sidebar holds the Overview, General, API Properties, Resources, Notifications, API Score, Response Templates, and CORS pages. Choose the page you need. - [Manage general settings](https://documentation.gravitee.io/api-management/manage/api-proxies/general/manage-general-settings.md): Edit the name, version, metadata, and images of an API proxy, and start, stop, or delete it. Follow the steps on the General page to update them. - [Configure API properties](https://documentation.gravitee.io/api-management/manage/api-proxies/general/configure-api-properties.md): Define static or dynamic key/value properties that policies read at runtime through the Expression Language. Follow the steps to add and encrypt them. - [Configure API resources](https://documentation.gravitee.io/api-management/manage/api-proxies/general/configure-api-resources.md): Create API-level resources such as caches and OAuth providers that this API's policies reference at runtime. Follow the steps to add and manage them. - [Configure notifications](https://documentation.gravitee.io/api-management/manage/api-proxies/general/configure-notifications.md): Send console, email, or webhook alerts when API events occur, such as a deployment or a subscription change. Follow the steps to add a notification. - [Configure CORS](https://documentation.gravitee.io/api-management/manage/api-proxies/general/configure-cors.md): Let browsers on other origins call your API by enabling cross-origin resource sharing and setting the allowed origins. Follow the steps to configure it. - [Gateway](https://documentation.gravitee.io/api-management/manage/api-proxies/gateway.md): The Gateway group of an API proxy's sidebar holds the Entrypoints, Endpoints, Failover, Health Check Dashboard, and Reporter Settings pages. Choose the page you need. - [Configure entrypoints](https://documentation.gravitee.io/api-management/manage/api-proxies/gateway/configure-entrypoints.md): Change the context paths consumers use to reach an API proxy, or switch to virtual hosts. Follow the steps on the Entrypoints page to update them. - [Configure endpoints](https://documentation.gravitee.io/api-management/manage/api-proxies/gateway/configure-backend-security.md): Endpoint groups define where the API Gateway routes requests, with load balancing, timeouts, and TLS. Follow the steps to create a group and add endpoints. - [Configure failover](https://documentation.gravitee.io/api-management/manage/api-proxies/gateway/configure-failover.md): Turn on automatic retries with a circuit breaker so a slow or failing backend doesn't take your API down. Follow the steps to tune the thresholds. - [Monitor endpoint health](https://documentation.gravitee.io/api-management/manage/api-proxies/gateway/monitor-endpoint-health.md): Track backend endpoint availability, response times, and failed health checks for an API. Follow the steps to open the Health Check Dashboard. - [Configure logging and tracing](https://documentation.gravitee.io/api-management/manage/api-proxies/gateway/configure-logging-and-tracing.md): Control which request and response data an API proxy reports to logs and analytics, and turn on OpenTelemetry tracing. Follow the steps to configure it. - [Design](https://documentation.gravitee.io/api-management/manage/api-proxies/design.md): The Design group of an API proxy's sidebar holds the Policy Studio pages. Choose the page you need. - [Apply security policies](https://documentation.gravitee.io/api-management/manage/api-proxies/design/apply-security-policies.md): Policies are rules the API Gateway evaluates on every request and response, on top of security plans. Learn how the policy chain runs and how to apply one. - [Control how policy flows are matched to requests](https://documentation.gravitee.io/api-management/manage/api-proxies/design/configure-flow-execution.md): Choose whether the API Gateway runs every matching policy flow or only the closest match. Follow the steps to set the flow execution mode. - [Reuse policies with shared policy groups](https://documentation.gravitee.io/api-management/manage/api-proxies/design/shared-policy-groups.md): A shared policy group configures a set of policies once and reuses them across APIs and flows. Follow the steps to attach one in the Policy Studio. - [Consumer Access](https://documentation.gravitee.io/api-management/manage/api-proxies/consumer-access.md): The Consumer Access group of an API proxy's sidebar holds the Plans, Consumers, and Broadcasts pages. Choose the page you need. - [Secure your API proxy](https://documentation.gravitee.io/api-management/manage/api-proxies/consumer-access/secure-your-api-proxy.md): Attach a Keyless, API Key, JWT, OAuth2, or mTLS plan to control how consumers authenticate to an API proxy. Follow the steps to add one and deploy it. - [Establish consumer access](https://documentation.gravitee.io/api-management/manage/api-proxies/consumer-access/establish-consumer-access.md): Applications, subscriptions, and API keys control how consumers discover and authenticate with your API. Learn how to review and approve a request. - [Broadcast messages to consumers](https://documentation.gravitee.io/api-management/manage/api-proxies/consumer-access/broadcast-messages-to-consumers.md): Send a one-way announcement to the consumers of an API proxy about a change, an update, or a maintenance window. Follow the steps to compose one. - [Security](https://documentation.gravitee.io/api-management/manage/api-proxies/security.md): The Security group of an API proxy's sidebar holds the Authorization and User Permissions pages. Choose the page you need. - [Manage user permissions](https://documentation.gravitee.io/api-management/manage/api-proxies/security/manage-user-permissions.md): Add direct members, attach groups, and transfer primary ownership of an API proxy. Follow the steps on the User Permissions page to manage access. - [Monitor](https://documentation.gravitee.io/api-management/manage/api-proxies/monitoring.md): The Monitoring group of an API proxy's sidebar holds the Alerts and Audit Logs pages. Choose the page you need. - [Review audit logs](https://documentation.gravitee.io/api-management/manage/api-proxies/monitoring/review-audit-logs.md): Trace who changed what, and when, on an API proxy with its audit trail. Follow the steps to read and filter the events on the Audit Logs page. - [Operate](https://documentation.gravitee.io/api-management/manage/api-proxies/operations.md): The Operations group of an API proxy's sidebar holds the Deployment pages. Choose the page you need. - [Configure deployment](https://documentation.gravitee.io/api-management/manage/api-proxies/operations/configure-deployment.md): Choose which API Gateway instances load an API definition by assigning sharding tags. Follow the steps on the Deployment Configuration page. - [Review deployment history](https://documentation.gravitee.io/api-management/manage/api-proxies/operations/review-deployment-history.md): Compare two deployed versions of an API definition and roll back to an earlier one. Follow the steps to inspect the history and restore a version. - [API Products](https://documentation.gravitee.io/api-management/manage/api-products.md): Create an API Product, then configure it from the groups of its own sidebar. Choose the group that holds the setting you need. - [Create API Products](https://documentation.gravitee.io/api-management/manage/api-products/api-products.md): API Products bundle multiple API proxies into one consumer-facing product with shared plans. Learn when to use them and how to create one. - [Configure API products](https://documentation.gravitee.io/api-management/manage/api-products/configure-your-api-product.md): Attach APIs, create plans, manage consumers and team access, and choose where an API Product deploys. Start with the area you need to configure. - [General](https://documentation.gravitee.io/api-management/manage/api-products/general.md): The General group of an API Product's sidebar holds the Overview, General, and APIs pages. Choose the page you need. - [Manage product APIs](https://documentation.gravitee.io/api-management/manage/api-products/general/manage-product-apis.md): Attach and detach API proxies from an API Product so subscribers reach every API it bundles. Follow the steps to manage them on the APIs tab. - [Security](https://documentation.gravitee.io/api-management/manage/api-products/security.md): The Security group of an API Product's sidebar holds the User Permissions pages. Choose the page you need. - [Manage members and ownership](https://documentation.gravitee.io/api-management/manage/api-products/security/manage-members-and-ownership.md): Add members, attach groups, change roles, and transfer ownership of an API product. Follow the steps to manage access from the User Permissions tab. - [Operate](https://documentation.gravitee.io/api-management/manage/api-products/operations.md): The Operations group of an API Product's sidebar holds the Deployment pages. Choose the page you need. - [Configure product deployment](https://documentation.gravitee.io/api-management/manage/api-products/operations/configure-product-deployment.md): Assign sharding tags to an API Product so only the API Gateway instances that advertise a matching tag load it. Follow the steps on the Deployment tab. - [Manage API products with the Management API](https://documentation.gravitee.io/api-management/manage/api-products/manage-api-products-with-the-management-api.md): Create an API product, attach APIs, add and publish plans, and deploy it over the v2 Management API. Follow the full lifecycle with request examples. - [API product configuration reference](https://documentation.gravitee.io/api-management/manage/api-products/api-product-configuration-reference.md): Every API product property, the flag that decides which APIs can be bundled, and the plan types a product supports. Browse the full reference. - [Observe](https://documentation.gravitee.io/api-management/observability.md): The Observability group of the API Management sidebar holds the Dashboards, Logs, and Tracing pages. Open the view you need. - [Dashboard and metrics](https://documentation.gravitee.io/api-management/observability/api-dashboard.md): The Gamma homepage dashboard shows per-module metrics, quick actions, and guidance for empty states. Learn what each metric and quick action does. - [Monitor API usage](https://documentation.gravitee.io/api-management/observability/monitor-api-usage.md): Track request volume, latency distribution, error rates, and top consumers for an API proxy. Follow the steps to open the observability dashboard. - [View API logs](https://documentation.gravitee.io/api-management/observability/view-api-logs.md): Inspect individual request logs and full request traces for an API proxy in the Trace Explorer. Follow the steps to open logs and traces. ## Event Stream Management - [Get started](https://documentation.gravitee.io/event-stream-management/get-started.md): Event Stream Management in Gamma, from the product overview to the quickstarts for clusters, Kafka Services, and Virtual Clusters. Start where you need. - [Event Stream Management overview](https://documentation.gravitee.io/event-stream-management/get-started/event-stream-management-overview.md): Event Stream Management governs Kafka clusters, event-driven data flows, and streaming infrastructure. Learn what it does and how it fits Gamma. - [Register your first cluster](https://documentation.gravitee.io/event-stream-management/get-started/register-your-first-cluster.md): Register your first Kafka cluster in the Gamma console and add its first connection. Follow the quickstart to create and deploy the cluster. - [Create your first Kafka service](https://documentation.gravitee.io/event-stream-management/get-started/create-your-first-kafka-service.md): Create a governed Kafka Service in the Gamma console with a standalone endpoint and a keyless plan. Follow the quickstart to get one running. - [Create your first Virtual Cluster](https://documentation.gravitee.io/event-stream-management/get-started/create-your-first-virtual-cluster.md): Federate two Registered Clusters into a single unified endpoint with a Virtual Cluster. Follow the quickstart to compose and create one. - [Manage](https://documentation.gravitee.io/event-stream-management/manage.md): The Manage group of the Event Stream Management sidebar holds your registered clusters. Choose the page you need. - [Register your Kafka clusters](https://documentation.gravitee.io/event-stream-management/manage/register-your-kafka-clusters.md): Register an existing Kafka cluster with Gamma so Kafka Services and Virtual Clusters can be built on it. Follow the steps to register and deploy one. - [Build](https://documentation.gravitee.io/event-stream-management/build.md): Create and configure governed Kafka Services and Virtual Clusters on top of your registered Kafka infrastructure. Start with the service you need. - [Create a Kafka service with a registered cluster](https://documentation.gravitee.io/event-stream-management/build/create-a-kafka-service-with-a-registered-cluster.md): Create a Kafka Service bound to a connection on a registered Kafka cluster, with security plans and policies. Follow the steps in the creation wizard. - [Create a Kafka service with a Virtual Cluster](https://documentation.gravitee.io/event-stream-management/build/create-a-kafka-service-with-a-virtual-cluster.md): Create a Kafka Service backed by a Virtual Cluster to govern a federated multi-cluster Kafka environment. Follow the steps to build it in the wizard. - [Establish a Virtual Cluster](https://documentation.gravitee.io/event-stream-management/build/establish-a-virtual-cluster.md): Federate multiple Kafka backends into one endpoint by establishing a Virtual Cluster. Follow the steps to choose a topology and compose the backends. - [Virtual Clusters overview](https://documentation.gravitee.io/event-stream-management/build/kafka-virtual-clusters-overview.md): A Virtual Cluster presents several Kafka backends to clients as one endpoint. Learn the key concepts, Mesh mode, and the limitations that apply. - [Virtual Cluster runtime behavior reference](https://documentation.gravitee.io/event-stream-management/build/kafka-virtual-cluster-runtime-behavior-reference.md): What a deployed Virtual Cluster does on the Event Gateway, from lifecycle states to topic routing and consumer groups. Browse the full reference. ## Authorization Management - [Get started](https://documentation.gravitee.io/authorization-management/get-started.md): Authorization Management in Gamma, from the product overview to your first user, first imported resource, and first policy. Start with the overview. - [Authorization Management overview](https://documentation.gravitee.io/authorization-management/get-started/authorization-management-overview.md): Authorization Management enforces fine-grained, catalog-aware access control across API, MCP, AI model, and agent traffic. Learn how the pieces connect. - [Create your first user](https://documentation.gravitee.io/authorization-management/get-started/create-your-first-user.md): Create a local principal in Authorization Management so the policy engine has an identity to evaluate. Follow the steps to add your first one. - [Import your first resource from Agent catalog](https://documentation.gravitee.io/authorization-management/get-started/import-your-first-resource-from-agent-catalog.md): Import a resource from the AI Catalog so every policy refers to one canonical Entity ID. Follow the quickstart to import your first item. - [Create your first policy](https://documentation.gravitee.io/authorization-management/get-started/create-your-first-policy.md): Create and deploy your first authorization policy in the visual editor to get a permit rule enforced at runtime. Follow the steps to build one. - [Policy Structure](https://documentation.gravitee.io/authorization-management/manage.md): The Policy Structure group of the Authorization Management sidebar holds the entities, actions, and schemas your policies are written against. - [Manage principals](https://documentation.gravitee.io/authorization-management/manage/principals.md): Sync principals from Access Management, create local ones, and give them attributes and relationships. Start with how your identities arrive. - [Sync principals from Access Management](https://documentation.gravitee.io/authorization-management/manage/principals/sync-principals-from-access-management.md): Synchronize users and groups from Gravitee Access Management so policies can reference your identity directory. Follow the steps to run a sync. - [Create a local principal](https://documentation.gravitee.io/authorization-management/manage/principals/create-a-local-principal.md): Create a principal directly in Authorization Management when the identity is not synced or imported. Follow the steps on the Entities page. - [Add attributes to principals](https://documentation.gravitee.io/authorization-management/manage/principals/add-attributes-to-principals.md): Attach custom metadata to a principal, such as department or device trust, so policies test more than identity. Follow the steps to add attributes. - [Build principal relationships](https://documentation.gravitee.io/authorization-management/manage/principals/build-principal-relationships.md): Link principals into parent-child hierarchies so that one policy can match every user in a group. Follow the steps to set and edit parents. - [Manage resources](https://documentation.gravitee.io/authorization-management/manage/resources.md): Import resources from the Catalog, create local ones, and give them attributes and relationships. Start with where your resources come from. - [Import resources from Catalog](https://documentation.gravitee.io/authorization-management/manage/resources/import-resources-from-catalog.md): Import resource entities from the AI Catalog into Authorization Management across all three categories. Follow the steps to browse and select them. - [Create a local resource](https://documentation.gravitee.io/authorization-management/manage/resources/create-a-local-resource.md): Create a resource entity for the internal applications, data assets, and custom tools the AI Catalog does not hold. Follow the steps to add one. - [Add attributes to resources](https://documentation.gravitee.io/authorization-management/manage/resources/add-attributes-to-resources.md): Attach custom metadata to a resource, such as sensitivity or ownership, so policy conditions can test it. Follow the steps to add attributes. - [Build resource relationships](https://documentation.gravitee.io/authorization-management/manage/resources/build-resource-relationships.md): Establish parent-child hierarchies between resources so one policy covers a server and all of its tools. Follow the steps to set parents. - [Manage actions](https://documentation.gravitee.io/authorization-management/manage/actions.md): Actions are the verbs your policies grant or forbid. Create one, and see how action Entity IDs are named and scoped. Start by creating an action. - [Create an action](https://documentation.gravitee.io/authorization-management/manage/actions/create-an-action.md): Define the verbs your policies grant or forbid by creating an action entity that statements reference. Follow the steps on the Actions page. - [Action naming and scope](https://documentation.gravitee.io/authorization-management/manage/actions/action-naming-and-scope.md): How action Entity IDs are structured and how the policy engine resolves them against policy types and resource scopes. Browse the naming reference. - [Manage schemas](https://documentation.gravitee.io/authorization-management/manage/schemas.md): The schema declares the entity types, relationships, and actions your policies are written against. Start with how a schema is generated. - [Schema generation](https://documentation.gravitee.io/authorization-management/manage/schemas/schema-generation.md): The schema is the contract your policies are written against, declaring entity types, relationships, and actions. Learn how it is generated and read. - [Edit your schema](https://documentation.gravitee.io/authorization-management/manage/schemas/edit-your-schema.md): Modify an existing schema to add entity types, attributes, relationships, or actions. Follow the steps to edit, validate, and save your changes. - [Validate schema changes](https://documentation.gravitee.io/authorization-management/manage/schemas/validate-schema-changes.md): How the console validates a schema change before saving, and the errors to expect. Learn the validation pipeline and how to fix a failure. - [Manage policies](https://documentation.gravitee.io/authorization-management/configure.md): The Policy Management group of the Authorization Management sidebar holds the policies for MCPs, AI models, APIs, A2A agents, and custom resources. - [Create, update, and delete policies](https://documentation.gravitee.io/authorization-management/configure/create-update-delete-policies.md): Reference for the Authorization Management policy editor, covering how to create, name, build, deploy, and delete a policy. Browse the full reference. - [MCP policy examples](https://documentation.gravitee.io/authorization-management/configure/mcp-policy-examples.md): Govern MCP servers, tools, and prompts with policy examples for group access, time windows, and device trust. Adapt an example to your own servers. - [AI policy example](https://documentation.gravitee.io/authorization-management/configure/ai-policy-example.md): Control which teams reach which AI models with policy examples for token budgets, cost ceilings, and guardrails. Adapt an example to your own models. - [API policy examples](https://documentation.gravitee.io/authorization-management/configure/api-policy-examples.md): Govern API proxies, endpoints, and data fields with policy examples for scopes, rate limits, and tenant isolation. Adapt an example to your own APIs. - [Custom policies](https://documentation.gravitee.io/authorization-management/configure/custom-policies.md): Custom policies govern resources outside the MCP, API, Agent, AI Model, and Event categories. Start with the overview, then create your first one. - [Custom policies overview](https://documentation.gravitee.io/authorization-management/configure/custom-policies/custom-policies-overview.md): Custom policies protect internal applications, data assets, and bespoke resources. Learn how they differ from service policies and when to use them. - [Create a custom policy](https://documentation.gravitee.io/authorization-management/configure/custom-policies/create-a-custom-policy.md): Create an authorization policy for resources not routed through the MCP, API, Agent, AI Model, or Event categories. Follow the steps to build one. - [PDP Gateways](https://documentation.gravitee.io/authorization-management/evaluate.md): The PDP Gateways group of the Authorization Management sidebar holds the gateways that evaluate your policies and how policies reach them. - [Configure the Gravitee Gateway as a runtime](https://documentation.gravitee.io/authorization-management/evaluate/configure-gravitee-gateway-as-runtime.md): Register a Gravitee Gateway as a Policy Decision Point so authorization decisions are evaluated at the wire level. Follow the steps to register one. - [Configure a sidecar as runtime](https://documentation.gravitee.io/authorization-management/evaluate/configure-sidecar-as-runtime.md): Deploy the Policy Decision Point as a sidecar beside your application for latency-sensitive or air-gapped environments. Follow the steps to deploy it. - [Policy syncs](https://documentation.gravitee.io/authorization-management/evaluate/policy-syncs.md): How authorization policies travel from the control plane to your runtime gateways, and how long it takes. Learn to read and monitor sync status. - [Analytics sent to the control plane](https://documentation.gravitee.io/authorization-management/evaluate/analytics-sent-to-control-plane.md): The observability data that Policy Decision Point gateways send back to the Gravitee control plane. Learn what is collected and where it appears. - [Authorization policy synchronization](https://documentation.gravitee.io/authorization-management/evaluate/authz-gateway-sync.md): Gamma Authorization Management evaluates policies locally inside the API Gateway. Learn how a change in the console becomes enforceable. ## Edge Management - [Get started](https://documentation.gravitee.io/edge-management/get-started.md): Edge Management in Gamma, starting with what the Edge Daemon does on employee devices and how it fits the platform. Start with the overview. - [Edge Management overview](https://documentation.gravitee.io/edge-management/get-started/edge-management-overview.md): The Edge Daemon observes AI traffic on employee devices, enforces local policy, and forwards it to the AI Gateway. Learn how it routes traffic. - [Connect](https://documentation.gravitee.io/edge-management/connect.md): Connect your edge environments and tools to the Gamma Edge Daemon, from the proxy APIs to fleet deployment. Start with the task you need. - [Proxy API reference](https://documentation.gravitee.io/edge-management/connect/proxy-api-reference.md): The LLM Proxy and HTTP proxy APIs that receive the traffic an Edge Daemon forwards, and the plan they must expose. Browse the full reference. - [Configure Edge Management](https://documentation.gravitee.io/edge-management/connect/configure-edge-management.md): Set the Gateway URLs, proxy routes, and shadow AI monitoring for Edge Management in one place. Follow the steps to create and save a configuration. - [Configure Edge Ingress](https://documentation.gravitee.io/edge-management/connect/configure-edge-ingress.md): Expose the Edge Reactor port on Kubernetes so Edge Daemons on employee devices reach the AI Gateway. Follow the steps to enable ingress in Helm. - [Configure Kandji to deploy the Edge Daemon](https://documentation.gravitee.io/edge-management/connect/configure-kandji-daemon.md): Deploy the Edge Daemon across your macOS fleet with Kandji, using the script the console generates. Follow the steps to create the Custom App. ## API Management - [Introduction](https://documentation.gravitee.io/apim/introduction.md): API Management 4.12 accelerates and streamlines the governance and delivery of your APIs. Learn what the platform offers and where to start. - [Core Concepts](https://documentation.gravitee.io/apim/introduction/core-concepts.md): The core concepts behind API Management 4.12, from architecture to component configuration. Learn how the pieces fit together. - [Enterprise Edition](https://documentation.gravitee.io/apim/introduction/enterprise-edition.md): The Enterprise Edition of API Management 4.12 can include Event Management and AI Agent Management. Compare the global enterprise features. - [Enterprise Edition installation](https://documentation.gravitee.io/apim/introduction/enterprise-edition/enterprise-edition-installation.md): Gravitee ships one bundle per product covering Community and Enterprise features. Follow the steps to install API Management 4.12 as Enterprise. - [Enterprise Edition licensing](https://documentation.gravitee.io/apim/introduction/enterprise-edition/enterprise-edition-licensing.md): Request and apply an Enterprise Edition licence for API Management 4.12. Follow the steps to apply it by environment variable or by file. - [Integrations](https://documentation.gravitee.io/apim/introduction/integrations.md): The major integrations API Management 4.12 offers with event brokers, observability tools, and service discovery. Compare what is supported. - [Community Forum](https://documentation.gravitee.io/apim/introduction/community-forum.md): What to expect from the Gravitee community forum as an API Management 4.12 user. See how to ask a question others can find later. - [Contribute to APIM](https://documentation.gravitee.io/apim/introduction/contribute-to-apim.md): Set up a local environment to contribute to API Management 4.12 development. Follow the steps to clone the project and prepare the UIs. - [API Fundamentals](https://documentation.gravitee.io/apim/introduction/api-fundamentals.md): Key API terminology and concepts that make the API Management 4.12 platform easier to use. Learn the fundamentals before you start building. - [API Basics](https://documentation.gravitee.io/apim/introduction/api-fundamentals/api-basics.md): An API is a set of publicly exposed specifications defining how to integrate with a service. Learn the basics before using API Management 4.12. - [Web APIs](https://documentation.gravitee.io/apim/introduction/api-fundamentals/web-apis.md): How web APIs are structured, from protocols and transport to the shift to microservices. Learn what underpins API Management 4.12. - [Categorizing Web APIs](https://documentation.gravitee.io/apim/introduction/api-fundamentals/categorizing-web-apis.md): Web APIs are synchronous or asynchronous, stateless or stateful. Compare the categories that shape how you design for API Management 4.12. - [Glossary](https://documentation.gravitee.io/apim/introduction/glossary.md): The Gravitee glossary defines products, components, and terms in four sections, covering API Management 4.12 and Access Management. Find a term. - [Getting started](https://documentation.gravitee.io/apim/getting-started.md): Start with API Management 4.12 on Gravitee Cloud, hybrid, or fully self-hosted. Compare the deployment options before you install. - [Fully self-hosted installation with Vanilla Kubernetes](https://documentation.gravitee.io/apim/getting-started/vanilla-kubernetes.md): Install a fully self-hosted API Management 4.12 platform on Kubernetes with Helm charts. Follow the steps and review the components first. - [Fully self-hosted installation with Docker](https://documentation.gravitee.io/apim/getting-started/local-install-with-docker.md): Install a fully self-hosted API Management 4.12 with Docker Compose. Follow the steps to download the compose file and verify the stack. - [Create & Publish Your First API](https://documentation.gravitee.io/apim/getting-started/create-and-publish-your-first-api.md): Create and publish your first API Management 4.12 API, step by step. Follow the articles in order from creation through to publication. - [Create an API](https://documentation.gravitee.io/apim/getting-started/create-and-publish-your-first-api/create-an-api.md): Create your first API with API Management 4.12, using the Console. Follow the steps to build it, test it, and move to the next stage. - [Add Security](https://documentation.gravitee.io/apim/getting-started/create-and-publish-your-first-api/add-security.md): Secure your first API Management 4.12 API with an API Key plan. Follow the steps to add the plan and check it is enforced. - [Add a Policy](https://documentation.gravitee.io/apim/getting-started/create-and-publish-your-first-api/add-a-policy.md): Add the Rate Limit policy to your first API Management 4.12 API. Follow the steps to apply it and verify the limit is enforced. - [Add API Documentation](https://documentation.gravitee.io/apim/getting-started/create-and-publish-your-first-api/add-api-documentation.md): Add documentation to your first API Management 4.12 API so consumers can read it. Follow the steps to attach and verify a page. - [Publish your API](https://documentation.gravitee.io/apim/getting-started/create-and-publish-your-first-api/publish-your-api.md): Publish your first API Management 4.12 API so consumers can find it. Follow the steps to publish it and verify it is live. - [Hybrid Installation & Configuration Guides](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides.md): A hybrid Gateway architecture mixes self-hosted and cloud API Management 4.12 components. Browse the guides for your deployment stack. - [Next-Gen Cloud](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/next-gen-cloud.md): A Next-Gen Cloud hybrid API Management 4.12 deployment needs the Gateway and Redis as a minimum. Browse the installation guides. - [Docker](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/next-gen-cloud/docker.md): Run a Next-Gen Cloud hybrid API Management 4.12 deployment in Docker. Browse the guides for the CLI and Compose approaches. - [Docker CLI](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/next-gen-cloud/docker/docker-cli.md): Install the API Management 4.12 Data Plane with Docker CLI commands for a Next-Gen Cloud hybrid. Follow the steps to run it. - [Docker Compose](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/next-gen-cloud/docker/docker-compose.md): Next-Gen Cloud supports hybrid API Management 4.12 deployments through Docker Compose. Follow the steps to configure the compose file. - [Kubernetes](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/next-gen-cloud/kubernetes.md): Route hybrid API Management 4.12 Gateway traffic through a corporate proxy on Kubernetes. Browse the deployment guides you need. - [Vanilla Kubernetes](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/next-gen-cloud/kubernetes/vanilla-kubernetes.md): Install a hybrid API Management 4.12 Gateway on Kubernetes and connect it to Next-Gen Cloud. Follow the steps to deploy it. - [AWS EKS](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/next-gen-cloud/kubernetes/aws-eks.md): Install a hybrid API Management 4.12 Gateway on Amazon EKS and connect it to Gravitee Cloud. Follow the steps to deploy it. - [Azure AKS](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/next-gen-cloud/kubernetes/azure-aks.md): Install a hybrid API Management 4.12 Gateway on Azure Kubernetes Service and connect it to Gravitee Cloud. Follow the steps to deploy. - [OpenShift](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/next-gen-cloud/kubernetes/openshift.md): Install a hybrid API Management 4.12 Gateway on OpenShift and connect it to Gravitee Cloud. Follow the steps to deploy it. - [RPM](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/next-gen-cloud/rpm.md): Install a hybrid API Management 4.12 Gateway from the RPM package. Follow the steps for the Linux distribution you are running. - [.ZIP](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/next-gen-cloud/.zip.md): Install a Next-Gen Cloud hybrid API Management 4.12 deployment from the binary distribution. Follow the steps to set it up. - [Generate a New Cloud Token](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/next-gen-cloud/generate-a-new-cloud-token.md): Revoking a cloud token breaks the link between Gravitee Cloud and your hybrid API Management 4.12 Gateway. Follow the steps to replace it. - [Delete a Hybrid Gateway](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/next-gen-cloud/delete-a-hybrid-gateway.md): Delete a hybrid API Management 4.12 Gateway you no longer need to keep your environment controlled. Follow the steps to remove it. - [Link to a Hybrid Gateway](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/next-gen-cloud/link-to-a-hybrid-gateway.md): Link a new cloud token to an existing hybrid API Management 4.12 Gateway. Follow the steps to restore the Cloud connection. - [Add Next-Gen Cloud IP ranges to your firewall rules](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/next-gen-cloud/next-gen-cloud-ip-ranges.md): Gravitee is moving Next-Gen Cloud API Management 4.12 environments behind Cloudflare. Update your firewall for the new IP ranges. - [Classic Cloud](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/classic-cloud.md): The technology stacks and deployment methods for a Classic Cloud hybrid API Management 4.12 install. Compare the options available. - [Docker](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/classic-cloud/docker.md): Run a Classic Cloud hybrid API Management 4.12 deployment in Docker. Browse the guides for the CLI and Compose approaches. - [Docker Compose](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/classic-cloud/docker/docker-compose.md): A sample compose file that sets up a Classic Cloud hybrid API Management 4.12 configuration. Follow the steps to adapt it. - [Kubernetes](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/classic-cloud/kubernetes.md): Deploy a Classic Cloud hybrid API Management 4.12 Gateway on Kubernetes. Browse the guides for the cloud provider you use. - [GCP GKE](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/classic-cloud/kubernetes/gcp-gke.md): Install an API Management 4.12 Gateway on Kubernetes with GCP GKE. Follow the steps to complete a Classic Cloud hybrid deployment. - [.ZIP](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/classic-cloud/.zip.md): Install a Classic Cloud hybrid API Management 4.12 deployment from the .zip distribution. Follow the steps after installing the platform. - [Cloud Certificate Renewal](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/classic-cloud/cloud-certificate-renewal.md): Renew the certificate that keeps your self-hosted API Management 4.12 instance connected to Gravitee Cloud. Follow the steps to replace it. - [Add Classic Cloud IP ranges to your firewall rules](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/classic-cloud/classic-cloud-ip-ranges.md): Gravitee is migrating Classic Cloud API Management 4.12 environments to a new platform, changing its IP ranges. Update your firewall rules. - [Proxy Configuration](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/proxy-configuration.md): Hybrid API Management 4.12 components often reach Gravitee Cloud through a corporate proxy. Browse the proxy configuration guides. - [Hybrid Gateway Proxy Configuration](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/hybrid-gateway-proxy-configuration.md): Configure a hybrid API Management 4.12 Gateway that connects to a remote Management API through a proxy. Follow the steps to set it up. - [System Proxy for Backend APIs](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/system-proxy-for-backend-apis.md): Configure a system proxy so a hybrid API Management 4.12 Gateway can reach your backend APIs. Follow the steps to set it up. - [Configure Cloud Gateway Client](https://documentation.gravitee.io/apim/hybrid-installation-and-configuration-guides/configure-cloud-gateway-client.md): In a hybrid deployment the API Management 4.12 Gateway reaches Gravitee Cloud through a proxy. Follow the steps to configure the client. - [Self-Hosted Installation Guides](https://documentation.gravitee.io/apim/self-hosted-installation-guides.md): Self-hosted architecture means you host every API Management 4.12 component on your own infrastructure. Browse the installation guides. - [Docker](https://documentation.gravitee.io/apim/self-hosted-installation-guides/docker.md): The Docker installation architecture for API Management 4.12, including the FIPS image variants. Compare the installation methods. - [Docker Compose](https://documentation.gravitee.io/apim/self-hosted-installation-guides/docker/docker-compose.md): Install API Management 4.12 with Docker Compose, the quickest self-hosted route. Follow the steps and see what the deployment includes. - [Docker CLI](https://documentation.gravitee.io/apim/self-hosted-installation-guides/docker/docker-cli.md): Install API Management 4.12 with the Docker CLI, persisting data and plugins in your own directories. Follow the steps to set it up. - [Customize your Installation](https://documentation.gravitee.io/apim/self-hosted-installation-guides/docker/customize-your-installation.md): Customize an API Management 4.12 Docker Compose installation through the gateway environment section. Follow the steps to change it. - [FIPS images](https://documentation.gravitee.io/apim/self-hosted-installation-guides/docker/fips-images.md): Every API Management 4.12 component ships a FIPS image variant alongside its ordinary image. Learn what the FIPS builds provide. - [Kubernetes](https://documentation.gravitee.io/apim/self-hosted-installation-guides/kubernetes.md): Install API Management 4.12 on Kubernetes with the Helm chart, which requires Kubernetes 1.14 or later. Browse the deployment guides. - [Vanilla Kubernetes](https://documentation.gravitee.io/apim/self-hosted-installation-guides/kubernetes/vanilla-kubernetes.md): Deploy a complete self-hosted API Management 4.12 platform on Kubernetes using Helm charts. Follow the steps to install the platform. - [AWS EKS](https://documentation.gravitee.io/apim/self-hosted-installation-guides/kubernetes/aws-eks.md): Deploy a complete self-hosted API Management 4.12 platform on Amazon Elastic Kubernetes Service. Follow the steps to install with Helm. - [Azure AKS](https://documentation.gravitee.io/apim/self-hosted-installation-guides/kubernetes/azure-aks.md): Deploy a complete self-hosted API Management 4.12 platform on Azure Kubernetes Service. Follow the steps to install with Helm. - [OpenShift](https://documentation.gravitee.io/apim/self-hosted-installation-guides/kubernetes/openshift.md): Install API Management 4.12 within OpenShift. Follow the steps to deploy the platform on an OpenShift cluster of your own. - [RPM](https://documentation.gravitee.io/apim/self-hosted-installation-guides/rpm.md): Install API Management 4.12 on RPM-based Linux such as Red Hat, CentOS, or Oracle. Follow the steps for your distribution. - [Troubleshooting](https://documentation.gravitee.io/apim/self-hosted-installation-guides/rpm/troubleshooting.md): An SELinux issue can stop Nginx opening ports 8084 and 8085 for API Management 4.12 on RPM installs. Follow the steps to correct it. - [.ZIP](https://documentation.gravitee.io/apim/self-hosted-installation-guides/.zip.md): Install API Management 4.12 from the .zip distribution. Follow the steps for a self-hosted deployment on your own machine. - [Multi-tenancy](https://documentation.gravitee.io/apim/self-hosted-installation-guides/multi-tenancy.md): Multi-tenancy in API Management 4.12 Enterprise lets one installation serve several tenants. Learn what the packages include. - [Proxy Configuration](https://documentation.gravitee.io/apim/self-hosted-installation-guides/proxy-configuration.md): API Management 4.12 components often need to reach the internet through a corporate proxy. Browse the proxy configuration guides. - [System Proxy for Backend APIs](https://documentation.gravitee.io/apim/self-hosted-installation-guides/proxy-configuration/system-proxy-for-backend-apis.md): Configure a system proxy so the API Management 4.12 Gateway can reach backend APIs. Follow the steps to set the proxy up. - [Disaster Recovery (Backup and Restore)](https://documentation.gravitee.io/apim/self-hosted-installation-guides/disaster-recovery-backup-and-restore.md): Deploy API Management 4.12 control and data planes active/active or active/passive. Learn how backup and restore work for each. - [Upgrade Guides](https://documentation.gravitee.io/apim/upgrade-guides.md): Upgrade API Management 4.12 components in the right order, and note that downgrades are not supported. Browse the upgrade articles. - [Upgrade APIM from 4.8.x to 4.10.x](https://documentation.gravitee.io/apim/upgrade-guides/upgrade-apim-from-4.8.x-to-4.10.x.md): A checklist for the API Management 4.12 upgrade path from the 4.8 line to 4.10. Follow the checks to run before, during, and after. - [Infrastructure Changes for API Product Analytics](https://documentation.gravitee.io/apim/upgrade-guides/infrastructure-changes-for-api-product-analytics.md): API Management 4.12 applies updated Elasticsearch log and metrics templates automatically for API Product analytics. Learn what changes. - [Update the Connection to Cloud](https://documentation.gravitee.io/apim/upgrade-guides/update-the-connection-to-cloud.md): Multi-tenancy changed how an API Management 4.12 installation connects to Cloud. Learn what to update for connected Consoles and Portals. - [APIM 4.4.+ & Hybrid Gateways](https://documentation.gravitee.io/apim/upgrade-guides/apim-4.4.+-and-hybrid-gateways.md): From the 4.4 release, API Management 4.12 gateways must explicitly disable certificate checks. Learn what changed and what you must set. - [Upgrade with RPM](https://documentation.gravitee.io/apim/upgrade-guides/upgrade-with-rpm.md): Upgrade an API Management 4.12 installation that was installed with RPM packages. Follow the steps to back up your configuration first. - [MongoDB Index Management](https://documentation.gravitee.io/apim/upgrade-guides/mongodb-index-management.md): The MongoDB indexes that improve query performance on large API Management 4.12 datasets. Follow the steps to create them manually. - [APIM 4.9 Elasticsearch Index Template Changes](https://documentation.gravitee.io/apim/upgrade-guides/apim-4.9-elasticsearch-index-template-changes.md): New Elasticsearch index templates enable extra analytics for API Management 4.12 v2 and v4 APIs. Learn which templates are updated. - [APIM 4.12 Elasticsearch Index Template Changes](https://documentation.gravitee.io/apim/upgrade-guides/apim-4.12-elasticsearch-index-template-changes.md): The Elasticsearch index templates gain an api-product-id field for API Management 4.12 v4 APIs. Learn which templates change and how. - [Migrate v1 APIs to v2](https://documentation.gravitee.io/apim/upgrade-guides/migrate-v1-apis-to-v2.md): Migrate a v1 API to a v2 definition in place with API Management 4.12 tooling. Follow the steps in the Console or the Management API. - [How-To Guides](https://documentation.gravitee.io/apim/how-to-guides.md): Gravitee how-to guides for API Management 4.12, from your first API to advanced use cases. Browse the tutorials that match your goal. - [Use Case Tutorials](https://documentation.gravitee.io/apim/how-to-guides/use-case-tutorials.md): Detailed use case tutorials for the API Management 4.12 platform. Browse the articles that match the problem you are solving. - [Rate Limit REST APIs](https://documentation.gravitee.io/apim/how-to-guides/use-case-tutorials/rate-limit-rest-apis.md): Rate limiting protects API Management 4.12 REST APIs and keeps performance predictable. Follow the tutorial through the main use cases. - [Configure JWT Security](https://documentation.gravitee.io/apim/how-to-guides/use-case-tutorials/configure-jwt-security.md): Apply JSON Web Token security to your API Management 4.12 APIs. Follow the steps to configure the gateway APIs and the plan. - [Add RBAC to your JWT Plan](https://documentation.gravitee.io/apim/how-to-guides/use-case-tutorials/add-rbac-to-your-jwt-plan.md): The Role-based Access Control policy adds authorization on top of an API Management 4.12 JWT plan. Follow the steps to configure your IdP. - [Aggregating multiple responses](https://documentation.gravitee.io/apim/how-to-guides/use-case-tutorials/aggregating-multiple-responses.md): Initiate multiple backend calls from API Management 4.12 and aggregate them into a single response. Follow the steps to build the API. - [Configure DCR](https://documentation.gravitee.io/apim/how-to-guides/use-case-tutorials/configure-dcr.md): Configure Dynamic Client Registration between API Management 4.12 and Access Management. Follow the steps to set up both sides. - [Secure and Expose gRPC Services](https://documentation.gravitee.io/apim/how-to-guides/use-case-tutorials/secure-and-expose-grpc-services.md): Use API Management 4.12 as a central place to secure and manage your gRPC APIs. Follow the steps to run the samples with Docker. - [Expose SOAP Webservices as REST APIs](https://documentation.gravitee.io/apim/how-to-guides/use-case-tutorials/expose-soap-webservices-as-rest-apis.md): Transform a SOAP endpoint and expose it as a REST service with API Management 4.12. Follow the steps in the Gravitee policy studio. - [Create and Publish an API Using the Management API](https://documentation.gravitee.io/apim/how-to-guides/use-case-tutorials/create-and-publish-an-api-using-the-management-api.md): Create and publish an HTTP proxy API through the Management API in API Management 4.12. Follow the steps from access token to published API. - [Create Applications and Subscriptions Using the Management API](https://documentation.gravitee.io/apim/how-to-guides/use-case-tutorials/create-applications-and-subscriptions-using-the-management-api.md): Create applications and subscriptions with the Management API in API Management 4.12. Follow the steps to change an API's security first. - [Connect to an Endpoint Using SSE](https://documentation.gravitee.io/apim/how-to-guides/use-case-tutorials/connect-to-an-endpoint-using-sse.md): Establish a Server-Sent Events channel and consume messages through API Management 4.12. Follow the steps to identify and connect an endpoint. - [Implement BFF pattern (with a Shared Policy Group)](https://documentation.gravitee.io/apim/how-to-guides/use-case-tutorials/implement-bff-pattern-with-a-shared-policy-group.md): Implement the backend-for-frontend pattern for single-page apps with an API Management 4.12 shared policy group. Learn what it handles. - [Configure an MCP-Proxy with the OAuth plan and Entra ID](https://documentation.gravitee.io/apim/how-to-guides/use-case-tutorials/secure-a-mcp-proxy-with-entra-id-oauth.md): Secure an MCP Proxy in API Management 4.12 with an OAuth2 plan and Microsoft Entra ID. Learn the key configuration points to get right. - [Monitor APIM with Prometheus and Grafana using Docker Compose](https://documentation.gravitee.io/apim/how-to-guides/use-case-tutorials/monitor-apim-with-prometheus-and-grafana.md): Deploy a Prometheus and Grafana monitoring stack for API Management 4.12 with Docker Compose. Follow the steps to enable the metrics service. - [Configure & Manage the Platform](https://documentation.gravitee.io/apim/configure-and-manage-the-platform.md): Configuring and managing the API Management 4.12 platform, split into three sections. Browse the area you need to change. - [Gravitee Gateway](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/gravitee-gateway.md): Configure the general settings of your API Management 4.12 Gateway. Browse the guides covering each part of the configuration. - [Configuring Global Redaction Rules](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/gravitee-gateway/configuring-global-redaction-rules.md): Configure platform-wide redaction rules in gravitee.yml before any API-specific rule in API Management 4.12. Follow the steps to set them. - [Configuring the Hazelcast Rate-Limit Repository for Standalone Gateways](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/gravitee-gateway/configuring-the-hazelcast-rate-limit-repository-for-standalone-gateways.md): Configure the Hazelcast rate-limit repository for standalone API Management 4.12 gateways. Follow the steps to set up the sample config. - [Deploying the Hazelcast Rate-Limit Repository with Helm and Kubernetes Discovery](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/gravitee-gateway/deploying-the-hazelcast-rate-limit-repository-with-helm-and-kubernetes-discovery.md): Deploy the Hazelcast rate-limit repository for API Management 4.12 with Helm and Kubernetes discovery. Learn what the plugin configures. - [Proxy](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/gravitee-gateway/proxy.md): Define specific proxies for specific use cases in API Management 4.12. Learn where proxy configurations can be applied to it. - [Services](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/gravitee-gateway/services.md): Update the default values for API Management 4.12 Gateway services, which are all enabled by default. Follow the steps to change them. - [Dictionaries](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/gravitee-gateway/dictionaries.md): Dictionaries let platform administrators manage values across API Management 4.12 APIs, beyond per-API properties. Learn how they work. - [Alerts](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/gravitee-gateway/alerts.md): Set alerting conditions for the API Management 4.12 Gateway from the platform settings. Follow the steps to configure them. - [Notifications](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/gravitee-gateway/notifications.md): Set up alerts and notifications based on events the API Management 4.12 Gateway recognizes. Learn what you can be notified about. - [Gateway Internal API](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/gravitee-gateway/gateway-internal-api.md): The API Management 4.12 Gateway exposes an internal API for monitoring the component. Follow the steps to configure and secure it. - [Sharding Tags](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/gravitee-gateway/sharding-tags.md): Sharding tags tag API Management 4.12 Gateways so specific APIs and API Products deploy to them. Learn how the tags work. - [Span Attribute Redaction Overview](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/gravitee-gateway/span-attribute-redaction-overview.md): Span Attribute Redaction masks sensitive metadata in API Management 4.12 OpenTelemetry traces before they leave. Learn what it hides. - [Tenants](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/gravitee-gateway/tenants.md): Tenants let an API Management 4.12 API select a backend endpoint per deployment. Learn how the multi-endpoint capability works. - [Header IDs](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/gravitee-gateway/header-ids.md): The API Management 4.12 Gateway generates an id for every request and sets it in a header. Learn how to change the header names. - [Gateway Cluster sync with Redis](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/gravitee-gateway/gateway-cluster-sync-with-redis.md): Enable and configure Gateway Cluster sync with Redis in API Management 4.12. Follow the steps to set the synchronization up. - [Gateway Cluster sync with Redis](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/gravitee-gateway/gateway-cluster-sync-with-redis-using-docker.md): Gateway Cluster sync uses Redis to synchronize API Management 4.12 state across gateways. Follow the steps to configure it with Docker. - [Gateway Cluster sync with Redis using Kubernetes (Helm)](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/gravitee-gateway/gateway-cluster-sync-with-redis-using-kubernetes-helm.md): Gateway Cluster sync uses Redis to synchronize API Management 4.12 state across gateways. Follow the steps to configure it with Helm. - [Gateway Configuration for mTLS Certificate Management](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/gravitee-gateway/gateway-configuration-for-mtls-certificate-management.md): The API Management 4.12 Gateway validates uploaded X.509 certificates before storing them. Learn the configuration for mTLS management. - [Request Path Handling](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/gravitee-gateway/request-path-handling.md): The path handling setting is available from certain API Management 4.12 patch releases. Learn what it does and when you can use it. - [Management API](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/management-api.md): Configure general API Management 4.12 Management API settings in the gravitee.yaml file. Browse the configuration guides you need. - [Cron Schedule Frequency Limits](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/management-api/cron-schedule-frequency-limits.md): Cron schedule frequency limits let API Management 4.12 administrators enforce minimum intervals. Learn how to set those limits. - [MAPI Internal API](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/management-api/mapi-internal-api.md): The API Management 4.12 Management API exposes its own internal API for monitoring. Follow the steps to configure and secure it. - [mTLS certificate management API reference](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/management-api/mtls-certificate-management-api-reference.md): The REST endpoints that manage application client certificates for mTLS in API Management 4.12. Browse the full reference. - [Portal analytics API reference](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/management-api/portal-analytics-management-api-reference.md): The portal analytics REST endpoints let consumers and administrators retrieve API Management 4.12 dashboard data. Browse the reference. - [Native API Connection Logs Management API Reference](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/management-api/native-api-connection-logs-management-api-reference.md): The Management API v2 exposes three endpoints for native API connection logs in API Management 4.12. Browse the reference. - [Settings](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/management-api/settings.md): Configure management settings from the Settings page of the API Management 4.12 Console. Learn what each setting controls. - [Cleanup Services](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/management-api/cleanup-services.md): API Management 4.12 stores event and audit data that grows over time. Learn how the cleanup services trim those collections. - [Manage Organizations & Environments](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/manage-organizations-and-environments.md): An organization is a logical part of a company sharing settings in API Management 4.12, containing environments. Learn the model. - [Authentication](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/manage-organizations-and-environments/authentication.md): API Management 4.12 natively supports several authentication types for the Console. Compare the options before you configure one. - [Gravitee Access Management](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/manage-organizations-and-environments/authentication/gravitee-access-management.md): Gravitee offers Access Management alongside API Management 4.12 for full identity handling. Learn how the two products relate. - [Authentication Providers](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/manage-organizations-and-environments/authentication/authentication-providers.md): Configure in-memory users, LDAP, or Active Directory authentication for API Management 4.12. Follow the steps for your provider. - [Password Policy](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/manage-organizations-and-environments/authentication/password-policy.md): The Console and Developer Portal share one user store in API Management 4.12, so one password policy applies. Learn the settings. - [Social Providers](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/manage-organizations-and-environments/authentication/social-providers.md): Let users sign in to API Management 4.12 with a GitHub OAuth application or another social provider. Follow the steps to configure it. - [OpenID Connect](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/manage-organizations-and-environments/authentication/openid-connect.md): OpenID Connect is an authentication protocol built on OAuth 2.0, supported by API Management 4.12. Follow the steps to configure it. - [Microsoft Entra ID](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/manage-organizations-and-environments/authentication/microsoft-entra-id.md): Set up API Management 4.12 Console authentication with Microsoft Entra ID. Follow the steps to configure the identity provider. - [Roles and Groups Mapping](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/manage-organizations-and-environments/authentication/roles-and-groups-mapping.md): Assign roles to API Management 4.12 users through groups rather than individually. Learn how group and role mapping works. - [User Management](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/manage-organizations-and-environments/user-management.md): Set up and manage roles, scopes, permissions and users in API Management 4.12. Follow the steps to configure your organization. - [Create a service account](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/manage-organizations-and-environments/create-a-service-account.md): A service account is a non-human API Management 4.12 user for automated tools and integrations. Follow the steps to create one. - [Applications](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/manage-organizations-and-environments/applications.md): An application represents a consumer of your API Management 4.12 APIs and holds its subscriptions. Learn how applications work. - [APIM Console](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/manage-organizations-and-environments/apim-console.md): The API Management 4.12 Console is the graphical interface for configuring gateways and creating APIs. Learn what it lets you do. - [Developer Portal](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/manage-organizations-and-environments/developer-portal.md): The Developer Portal gives API consumers a simplified interface onto your API Management 4.12 APIs. Learn how to configure it. - [SMTP Configuration](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/manage-organizations-and-environments/smtp-configuration.md): The SMTP configuration API Management 4.12 uses for sending email notifications. Follow the steps to point it at your mail server. - [CORS Configuration](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/manage-organizations-and-environments/cors-configuration.md): CORS lets a web page request resources from another domain in API Management 4.12. Follow the steps to configure it for your organization. - [Configuring Portal and Console deployments](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/manage-organizations-and-environments/configuring-portal-and-console-deployments.md): API Management 4.12 has four components that communicate with each other. Learn how to configure the Portal and Console deployments. - [Support](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/manage-organizations-and-environments/support.md): Gravitee encourages you to engage your team first if your API Management 4.12 installation has issues. Learn what support covers. - [Reviewing API Product Memberships Across Users](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/manage-organizations-and-environments/reviewing-api-product-memberships-across-users.md): Review API Product memberships across users from the API Management 4.12 Organization menu. Follow the steps to audit them. - [Managing Organization Sharding Tags](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/manage-organizations-and-environments/managing-organization-sharding-tags.md): Control where API Management 4.12 API Products deploy with organization sharding tags. Learn how administrators configure them. - [Debug logging](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/debug-logging.md): API Management 4.12 supports standard Java logging per component, plus debug logging for specific areas. Learn how to enable it. - [Context-aware logging](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/logging-infrastructure.md): The API Management 4.12 Gateway and Management API enrich log entries with request metadata. Learn what context-aware logging adds. - [Node logging configuration](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/node-logging-configuration.md): Configure MDC filtering, log patterns, and Logback overrides for the API Management 4.12 Gateway. Follow the steps to set them. - [Create & Configure APIs](https://documentation.gravitee.io/apim/create-and-configure-apis.md): Creating and configuring API Management 4.12 APIs, split into five sections from definitions to v2 and v4 configuration. Browse what you need. - [Gravitee API Definitions](https://documentation.gravitee.io/apim/create-and-configure-apis/gravitee-api-definitions.md): Gravitee v2 and v4 API definitions describe the Gateway APIs consumers call in API Management 4.12. Compare the two definitions. - [Entrypoint Connect phase overview](https://documentation.gravitee.io/apim/create-and-configure-apis/gravitee-api-definitions/native-api-phases.md): Connectors declare which phases they support on a native API Management 4.12 API. Compare the supported connector modes. - [A2A Proxy API Type Overview](https://documentation.gravitee.io/apim/create-and-configure-apis/gravitee-api-definitions/a2a-proxy-api-type.md): The A2A Proxy is a v4 API type enabling agent-to-agent communication through API Management 4.12. Learn its reactor architecture. - [v2 and v4 API Comparison](https://documentation.gravitee.io/apim/create-and-configure-apis/gravitee-api-definitions/v2-and-v4-api-comparison.md): v2 and v4 API Management 4.12 APIs differ in functionality and supported features. Compare them before you choose a definition. - [Execution Engine](https://documentation.gravitee.io/apim/create-and-configure-apis/gravitee-api-definitions/execution-engine.md): The execution engine is the Gateway runtime that executes API Management 4.12 APIs and policy flows. Learn its improvements and policy support. - [Create APIs](https://documentation.gravitee.io/apim/create-and-configure-apis/create-apis.md): Create or import v2 and v4 APIs in API Management 4.12. Browse the articles covering each creation and import path available. - [Import and Update v4 APIs from OpenAPI and Gravitee Definitions](https://documentation.gravitee.io/apim/create-and-configure-apis/create-apis/import-and-update-v4-apis-from-openapi-and-gravitee-definitions.md): Create or update a v4 API Management 4.12 API by importing a Gravitee definition or an OpenAPI spec. Compare the import formats. - [v4 API Creation Wizard](https://documentation.gravitee.io/apim/create-and-configure-apis/create-apis/v4-api-creation-wizard.md): Create a v4 API with the API Management 4.12 creation wizard, from API details through to entrypoints. Follow the steps in order. - [v2 API Creation Wizard](https://documentation.gravitee.io/apim/create-and-configure-apis/create-apis/v2-api-creation-wizard.md): The v2 API definition is a JSON representation of your Gateway API. Follow the API Management 4.12 creation wizard step by step. - [Import APIs](https://documentation.gravitee.io/apim/create-and-configure-apis/create-apis/import-apis.md): Import an API into API Management 4.12 as a Gravitee definition or an OpenAPI specification. Follow the steps to import from a local file. - [Remote URL Import: Concepts and Security](https://documentation.gravitee.io/apim/create-and-configure-apis/create-apis/import-apis/remote-url-import-concepts-and-security.md): Remote URL import creates or updates v4 API Management 4.12 APIs by fetching a definition. Learn the concepts and the security model. - [Import APIs from Remote URLs (Console)](https://documentation.gravitee.io/apim/create-and-configure-apis/create-apis/import-apis/import-apis-from-remote-urls-console.md): Create an API Management 4.12 API from a remote URL in the Console, using a Gravitee definition or OpenAPI. Follow the steps to import. - [Migrate APIs](https://documentation.gravitee.io/apim/create-and-configure-apis/create-apis/migrate-apis.md): Migrate existing v2 APIs to v4 with the API Management 4.12 Migration feature. Follow the prerequisites and steps to migrate them. - [Maintain analytics continuity after migrating v2 APIs to v4](https://documentation.gravitee.io/apim/create-and-configure-apis/create-apis/v2-api-analytics-continuity-after-migration.md): Historical analytics survive when you migrate an API Management 4.12 HTTP proxy API from v2 to v4. Follow the steps to update existing indices. - [Search for APIs in the Console](https://documentation.gravitee.io/apim/create-and-configure-apis/create-apis/search-for-apis-in-the-console.md): Filter the list of APIs that appear in the API Management 4.12 Console. Follow the steps to search, and see the worked search examples. - [Promote APIs](https://documentation.gravitee.io/apim/create-and-configure-apis/create-apis/promote-apis.md): Promote an API Management 4.12 API from one environment to another. Follow the steps to request and then approve a promotion. - [WSDL Import for v4 APIs](https://documentation.gravitee.io/apim/create-and-configure-apis/create-apis/wsdl-import-for-v4-apis.md): Create or update a v4 HTTP proxy API in API Management 4.12 from a WSDL 1.1 document. Learn how WSDL converts to OpenAPI. - [Configure v4 APIs](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis.md): The articles covering how to configure a v4 API in API Management 4.12, from endpoints to response templates. Browse what you need. - [General Settings](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/general-settings.md): Every v4 API in API Management 4.12 has general settings on its Configuration page. Learn what you can view and change there. - [API Lifecycle States](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/api-lifecycle-states.md): A v4 API lifecycle state controls its visibility on the API Management 4.12 Developer Portal. Learn the allowed transitions and retirement flow. - [Entrypoints](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/entrypoints.md): Entrypoints define how consumers reach a v4 API Management 4.12 API, for proxy or message APIs. Compare the entrypoint types. - [HTTP GET](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/entrypoints/http-get.md): Configure the HTTP GET entrypoint parameters for a v4 API Management 4.12 API. Follow the steps to set them for your own API. - [HTTP POST](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/entrypoints/http-post.md): Configure the HTTP POST entrypoint for a v4 API Management 4.12 API, including message and record mapping. Follow the steps to set it. - [Server-Sent Events](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/entrypoints/server-sent-events.md): Configure the Server-Sent Events entrypoint for a v4 API Management 4.12 API, including quality of service. Follow the steps to set it. - [Webhook](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/entrypoints/webhook.md): Declare the webhook identifier to use the Webhook entrypoint on a v4 API Management 4.12 API. Follow the steps to configure it. - [WebSocket](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/entrypoints/websocket.md): Configure the WebSocket entrypoint parameters for a v4 API Management 4.12 API. Follow the steps to set them for your API. - [Endpoints](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/endpoints.md): Endpoints connect a v4 API Management 4.12 API to its backend, for proxy or message APIs. Compare the endpoint types available. - [Azure Service Bus](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/endpoints/azure-service-bus.md): Configure the Azure Service Bus endpoint for a v4 message API in API Management 4.12. Follow the steps through the initial settings. - [JMS](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/endpoints/jms.md): Configure the JMS endpoint for a v4 message API in API Management 4.12. Learn the configuration it needs and how it is implemented. - [Kafka](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/endpoints/kafka.md): The Kafka endpoint mediates between a Kafka cluster and an HTTP client in API Management 4.12. Learn the routing modes for native Kafka APIs. - [Mock](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/endpoints/mock.md): The Mock endpoint emulates a backend HTTP server so you can test an API Management 4.12 v4 API. Follow the steps to configure it. - [MQTT5](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/endpoints/mqtt5.md): Configure the MQTT5 endpoint for a v4 message API in API Management 4.12. Learn the server information it needs and how it works. - [Solace](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/endpoints/solace.md): Configure the Solace endpoint for a v4 message API in API Management 4.12. Learn the configuration it needs and how it is implemented. - [RabbitMQ](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/endpoints/rabbitmq.md): Configure the RabbitMQ endpoint for a v4 message API in API Management 4.12. Follow the steps through the initial settings. - [Partial Updates for V4 HTTP Proxy APIs](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/partial-updates-for-v4-http-proxy-apis.md): V4 HTTP proxy APIs in API Management 4.12 support partial updates through PATCH, using JSON Merge Patch. Learn what you can change. - [Reporter Settings UI for Native APIs (OpenTelemetry Section)](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/reporter-settings-ui-for-native-apis-opentelemetry-section.md): The Reporter Settings page of a native v4 API Management 4.12 API has an OpenTelemetry section. Learn what Enabled and Verbose do. - [User Permissions](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/user-permissions.md): Configure user and group access to your API Management 4.12 APIs. Follow the steps to add members and set their permissions. - [Quality of Service](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/quality-of-service.md): Quality of Service sets the delivery guarantee for an asynchronous API Management 4.12 API. Compare the QoS levels and their compatibility. - [Response Templates](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/response-templates.md): Change the default values in an API Management 4.12 response with a response template. Learn the default payload and create your own. - [CORS](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/cors.md): CORS lets a web page request resources from another domain through your API Management 4.12 v4 API. Follow the steps to configure it. - [Health-checks](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/health-checks.md): Health checks monitor the availability of endpoints behind a v4 HTTP proxy API in API Management 4.12. Follow the steps to configure them. - [Documentation](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/documentation.md): Add documentation to a v4 API from the API Management 4.12 Console so consumers know how to use it. Follow the steps to add pages and folders. - [Audit Logs](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/audit-logs.md): View and filter the audit logs and events recorded for a v4 API in API Management 4.12. Follow the steps to access and filter them. - [Version History](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/version-history.md): Version History shows a v4 API's deployment history and the JSON definition of each version in API Management 4.12. Follow the steps to view it. - [Load balancing and failover](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v4-apis/load-balancing-and-failover.md): The API Management 4.12 Gateway spreads requests across an endpoint group using a load balancing algorithm. Compare the four algorithms. - [Configure v2 APIs](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v2-apis.md): The articles covering how to configure a v2 API in API Management 4.12, from proxy settings through to access. Browse what you need. - [General Settings](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v2-apis/general-settings.md): The general settings for a v2 API Management 4.12 API, grouped into three sections. Follow the steps to access and edit them. - [Proxy Settings](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v2-apis/proxy-settings.md): Configure the proxy settings of a v2 API Management 4.12 API, covering entrypoints and CORS. Follow the steps to change them. - [Load-balancing, Failover, & Health-checks](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v2-apis/load-balancing-failover-and-health-checks.md): API Management 4.12 provides load balancing, failover, and health checks for v2 API backends. Compare the three backend services. - [Service Discovery](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v2-apis/service-discovery.md): Bind the backend endpoints of an API Management 4.12 API to a HashiCorp Consul service. Follow the steps to configure discovery. - [User and Group Access](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v2-apis/user-and-group-access.md): Configure user and group access to your v2 API Management 4.12 APIs. Follow the steps to add members and set their permissions. - [Documentation](https://documentation.gravitee.io/apim/create-and-configure-apis/configure-v2-apis/documentation.md): Create, import, and add metadata to v2 API documentation from the API Management 4.12 Console. Follow the steps to publish it. - [Apply Policies](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies.md): Policies are customizable rules the API Management 4.12 Gateway runs during an API transaction. Compare policy support across v2 and v4 APIs. - [v4 API Policy Studio](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/v4-api-policy-studio.md): The v4 Policy Studio designs flows for APIs using the v4 API Management 4.12 definition. Follow the example to create a flow and add a policy. - [v2 API Policy Studio](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/v2-api-policy-studio.md): The v2 Policy Studio designs flows for APIs using the v2 API Management 4.12 definition. Follow the steps to design and configure flow mode. - [Debug Mode](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/debug-mode.md): Debug mode diagnoses v2 and v4 proxy API flows in API Management 4.12. Learn how to read the debug timeline and the inspector. - [Shared Policy Groups](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/shared-policy-groups.md): Define a collection of API Management 4.12 policies centrally and reuse them across APIs. Follow the steps to create and add a group. - [Resources](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/resources.md): Resources supply reusable configuration to API Management 4.12 policies. Compare the resource types and follow the steps to create one. - [Create and Configure Redis Cache Resources](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/resources/create-and-configure-redis-cache-resources.md): Create a Redis cache resource for API Management 4.12 Cache and Data Cache policies. Follow the steps for per-resource and Sentinel settings. - [Configure Cache Policies to Use Redis Cache Resources](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/resources/configure-cache-policies-to-use-redis-cache-resources.md): Point the API Management 4.12 Cache and Data Cache policies at a Redis cache resource. Follow the steps to configure the policies. - [Custom Policies](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/custom-policies.md): Policies act as a proxy controller in the API Management 4.12 Gateway. Follow the steps to generate a policy skeleton and apply your own. - [Policy Reference](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference.md): Every policy you can apply to a Gravitee API in API Management 4.12, linked to its own reference page. Find the policy you need. - [AI - Model Text Classification - Model and Performance Metrics](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/ai-model-text-classification-model-reference-and-performance-metrics.md): The toxicity and prompt injection models available to API Management 4.12 text classification, with their performance metrics. Compare the models. - [AI - Semantic Caching](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/ai-semantic-caching.md): AI Semantic Caching cuts token use and latency in API Management 4.12 by caching on meaning rather than exact text. Learn how it works. - [Kafka Governance Rules Policies](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/kafka-governance-rules-policies.md): Kafka governance rules policies enforce compliance standards on Kafka requests through the API Management 4.12 Gateway. Learn what they check. - [Kafka Message Encryption & Decryption](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/kafka-message-encryption-decryption-policy-reference.md): The Kafka Message Encryption and Decryption policy secures payloads with AES-GCM in API Management 4.12. Learn how to configure it. - [Native IP filtering](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/native-ip-filtering.md): The Native IP Filtering policy controls client access to native Kafka APIs in API Management 4.12 by IP address. Learn how to set it. - [AI - MCP ACL](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/ai-mcp-acl.md): The MCP ACL policy controls access to MCP server functionality in API Management 4.12 with an access control list. Learn how to configure it. - [AI - Prompt Guard Rails](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/ai-prompt-guard-rails.md): The Prompt Guard Rails policy evaluates prompts for inappropriate or malicious content in API Management 4.12. Learn what it detects. - [AI - Prompt Token Tracking](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/ai-prompt-token-tracking.md): The Prompt Token Tracking policy counts tokens sent to and received from an AI API in API Management 4.12. Learn how to configure it. - [AI - Token Rate Limit](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/ai-token-rate-limit.md): The Token Rate Limit policy caps inbound and outbound tokens over a period in API Management 4.12. Learn how to configure the limits. - [API Key](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/api-key.md): The API Key policy checks API keys during request processing so only approved apps reach your API Management 4.12 API. Learn how to set it. - [Assign Attributes](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/assign-attributes.md): The Assign Attributes policy sets request and execution context attributes in API Management 4.12. Learn how to configure the variables. - [Assign Content](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/assign-content.md): The Assign Content policy changes or transforms request and response bodies in API Management 4.12. Learn how to configure the transformation. - [Assign Metrics](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/assign-metrics.md): The Assign Metrics policy pushes extra metrics alongside the native request metrics in API Management 4.12. Learn how to configure it. - [Avro to JSON](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/avro-to-json.md): The Avro to JSON policy transforms request, response, and message content in API Management 4.12, including native Kafka APIs. Learn how. - [Avro to Protobuf](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/avro-to-protobuf.md): The Avro to Protobuf policy applies a transformation to request, response, or message content in API Management 4.12. Learn how to set it. - [AWS Lambda](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/aws-lambda.md): The AWS Lambda policy invokes a Lambda function during API Management 4.12 proxy or message requests. Learn how the response is returned. - [Basic Authentication](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/basic-authentication.md): The Basic Authentication policy manages basic auth headers on API Management 4.12 calls and compares credentials. Learn how to configure it. - [Cache](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/cache.md): The Cache policy stores upstream responses in API Management 4.12 so repeat calls skip the backend. Learn how to configure the cache. - [Circuit Breaker](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/circuit-breaker.md): The Circuit Breaker policy switches backend or fails with 503 on errors or latency in API Management 4.12. Learn the guarantees it gives. - [CloudEvents](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/cloudevents.md): The CloudEvents policy builds a CloudEvents JSON object from messages in API Management 4.12. Learn how the data content type is set. - [Custom Query Parameters Parser](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/custom-query-parameters-parser.md): The Custom Query Parameters Parser policy controls how API Management 4.12 reads query parameters. Learn what you can configure with it. - [Data Cache](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/data-cache.md): The Data Cache policy gets, sets, and expires key-value pairs in an API Management 4.12 cache resource. Learn how to configure it. - [Data Logging Masking](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/data-logging-masking.md): The Data Logging Masking policy conceals sensitive data in API Management 4.12 logs using JSONPath rules. Learn how to configure it. - [Dynamic Routing](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/dynamic-routing.md): The Dynamic Routing policy dispatches calls to different targets or rewrites URIs in API Management 4.12. Learn how to configure it. - [Generate HTTP Signature](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/generate-http-signature.md): The Generate HTTP Signature policy adds HTTP Signature authentication to API Management 4.12 calls. Learn how to configure the signature. - [Generate JWT](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/generate-jwt.md): The Generate JWT policy issues a signed JWT with configurable claims for API Management 4.12 to forward to a backend. Learn how to set it. - [GeoIP Filtering](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/geoip-filtering.md): The GeoIP Filtering policy controls access to an API Management 4.12 API by IP address, country, or distance. Learn how to configure it. - [GraphQL Rate Limit](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/graphql-rate-limit.md): The GraphQL Rate Limit policy applies basic rate limiting to GraphQL queries in API Management 4.12. Learn how to configure the limits. - [Groovy](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/groovy.md): Run a Groovy script at any stage of request processing through the API Management 4.12 Gateway. Learn how to configure the policy. - [HTML to JSON](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/html-to-json.md): The HTML to JSON transformation policy converts response content in API Management 4.12. Learn how to configure the mapping it applies. - [HTTP Callout](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/http-callout.md): The HTTP Callout policy invokes an external URL and stores the response in API Management 4.12 variables. Learn how to configure it. - [HTTP Redirect](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/http-redirect.md): The HTTP Redirect policy sends RFC 7231 redirect responses to clients from API Management 4.12. Learn how to configure the redirect. - [HTTP Signature](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/http-signature.md): The HTTP Signature policy enforces signature-based authentication on API Management 4.12 calls. Learn how to configure the signature. - [InterOPS](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/interops.md): InterOPS support in API Management 4.12, with the phase order for proxy and for native APIs. Learn where the policy runs in each. - [Interrupt](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/interrupt.md): The Interrupt policy breaks request processing in API Management 4.12 when a condition is met. Learn how to configure the condition. - [IP Filtering](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/ip-filtering.md): The IP Filtering policy allows or denies specific IP addresses on an API Management 4.12 API. Learn how to configure the filters. - [JavaScript](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/javascript.md): The JavaScript policy runs scripts at any stage of API Management 4.12 Gateway processing. Learn how to configure the policy. - [JavaScript Policy (New)](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/javascript-policy-new-reference.md): The JavaScript Policy (New) runs custom scripts during API Management 4.12 request or response processing. Learn what it supports. - [JSON to JSON](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/json-to-json.md): The JSON to JSON policy applies a transformation to request, response, or message content in API Management 4.12. Learn how to set it. - [JSON to XML](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/json-to-xml.md): The JSON to XML policy converts JSON payloads to XML before API Management 4.12 sends or returns them. Learn how to configure it. - [JSON Threat Protection](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/json-threat-protection.md): The JSON Threat Protection policy validates a request body against structural limits in API Management 4.12. Learn how to set the limits. - [JSON Validation](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/json-validation.md): The JSON Validation policy validates payloads against a JSON schema in API Management 4.12. Learn how to configure the schema it uses. - [JWS Validator](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/jws-validator.md): The JWS Validator policy checks token signature, certificate, and expiry before API Management 4.12 calls the backend. Learn how to set it. - [JWT Validator](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/jwt-validator.md): The JWT Validator policy checks a token's signature and expiration before API Management 4.12 forwards the call. Learn how to configure it. - [Kafka ACL](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/kafka-acl.md): The Kafka ACL policy defines access control lists on cluster resources proxied by API Management 4.12. Learn how to configure them. - [Kafka Message Filtering](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/kafka-message-filtering.md): The Kafka Message Filtering policy controls which Kafka messages reach consumers through API Management 4.12. Learn how to configure it. - [Kafka Offloading](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/kafka-offloading.md): The Kafka Offloading policy controls how message content is offloaded to storage in API Management 4.12. Learn how to configure it. - [Kafka Quota](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/kafka-quota.md): The Kafka Quota policy enforces limits on the data Kafka clients exchange through API Management 4.12. Learn how to configure quotas. - [Kafka Topic Mapping](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/kafka-topic-mapping.md): The Kafka Topic Mapping policy maps one topic name to another so clients can use their own in API Management 4.12. Learn how to set it. - [Kafka Transform Key](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/kafka-transform-key.md): The Kafka Transform Key policy adds a custom message key in API Management 4.12 so you can control partitioning. Learn how to set it. - [Keyless](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/keyless.md): The Keyless security policy treats every request to an API Management 4.12 API as valid and blocks none. Learn when to use it. - [Latency](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/latency.md): The Latency policy adds artificial delay to a request or a response in API Management 4.12. Learn how to configure the delay. - [Maven Archetype](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/maven-archetype.md): A policy is a step in the API Management 4.12 request and response proxy chain. Learn how to generate one with the Maven archetype. - [Message Filtering](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/message-filtering.md): The Message Filtering policy lets a publisher control which messages are streamed to subscribers in API Management 4.12. Learn how to set it. - [Metrics Reporter](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/metrics-reporter.md): The Metrics Reporter policy pushes request metrics to a custom endpoint from API Management 4.12. Learn how to configure the reporter. - [Mock](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/mock.md): The Mock policy returns mock responses from API Management 4.12 so you can test without a backend. Learn how to configure the mock. - [mTLS](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/mtls.md): The mTLS policy verifies that a client certificate is present on an API Management 4.12 request. Learn how to configure the policy. - [OAS Validation](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/oas-validation.md): The OAS Validation policy checks requests and responses against an embedded OpenAPI specification in API Management 4.12. Learn how. - [OAuth2](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/oauth2.md): The OAuth2 policy checks access token validity through introspection in API Management 4.12. Learn how to configure the policy. - [Generic OAuth2 Authorization Server](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/oauth2/generic-oauth2-authorization-server.md): The Generic OAuth2 Authorization Server resource introspects an access token for API Management 4.12. Learn how to configure it. - [Gravitee.io AM Authorization Server](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/oauth2/gravitee.io-am-authorization-server.md): The Access Management authorization server resource introspects a token issued by Gravitee for API Management 4.12. Learn how to set it. - [OpenID Connect UserInfo](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/openid-connect-userinfo.md): The OpenID Connect UserInfo policy fetches user information from an OAuth2 resource in API Management 4.12. Learn how to configure it. - [Override HTTP Method](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/override-http-method.md): The Override HTTP Method policy replaces the method sent by the consumer in API Management 4.12. Learn how to configure the override. - [PII Filtering](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/pii-filtering.md): The PII Filtering policy detects and redacts personally identifiable information in API Management 4.12 using token classification. Learn how. - [Protobuf to JSON](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/protobuf-to-json.md): The Protobuf to JSON policy applies a transformation to request, response, or message content in API Management 4.12. Learn how to set it. - [Rate Limit](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/rate-limit.md): API Management 4.12 offers three rate limit policies for capping request volume. Compare them and learn how to configure each one. - [Regex Threat Protection](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/regex-threat-protection.md): The Regex Threat Protection policy inspects request headers, path, parameters, and body in API Management 4.12. Learn how to configure it. - [Request Content Limit](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/request-content-limit.md): The Request Content Limit policy caps the request content length API Management 4.12 accepts. Learn how to configure the maximum. - [Request Validation](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/request-validation.md): The Request Validation policy validates incoming HTTP requests against rules in API Management 4.12. Learn how to define the rules. - [Resource Filtering](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/resource-filtering.md): The Resource Filtering policy restricts or allows access to specific REST resources in API Management 4.12. Learn how to configure it. - [REST to SOAP](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/rest-to-soap.md): The REST to SOAP policy exposes a SOAP backend as a REST API through API Management 4.12. Learn how the SOAP envelope is passed on. - [Retry](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/retry.md): The Retry policy replays requests in API Management 4.12 when the backend fails or a condition matches. Learn how to configure it. - [Role-based Access Control (RBAC)](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/role-based-access-control-rbac.md): The Role-based Access Control policy restricts a resource to the roles you specify in API Management 4.12. Learn how to configure it. - [SSL Enforcement](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/ssl-enforcement.md): The SSL Enforcement policy restricts access to requests meeting your SSL criteria in API Management 4.12. Learn how to configure it. - [Status Code Transformation](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/status-code-transformation.md): The Status Code Transformation policy rewrites the upstream response status code in API Management 4.12. Learn how to configure it. - [Template](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/template.md): A policy template to fork as a quick starter for your own API Management 4.12 policy. Learn what the skeleton gives you to build on. - [Token-Bucket Rate Limiting](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/token-bucket-rate-limiting.md): Token-bucket rate limiting allows controlled bursts of traffic in API Management 4.12, unlike fixed rate limits. Learn how it differs. - [Traffic Shadowing](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/traffic-shadowing.md): The Traffic Shadowing policy asynchronously copies API Management 4.12 traffic to another service. Learn how to configure the copy. - [Transform Headers](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/transform-headers.md): The Transform Headers policy overrides headers on incoming or outgoing API Management 4.12 traffic. Learn how to configure it. - [Transform Query Parameters](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/transform-query-parameters.md): The Transform Query Parameters policy overrides incoming query parameters in API Management 4.12. Learn how to configure the override. - [URL Rewriting](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/url-rewriting.md): The URL Rewriting policy rewrites URLs in an API Management 4.12 response header or response body. Learn how to configure it. - [WS Security Authentication](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/ws-security-authentication.md): The WS Security Authentication policy secures SOAP API calls in API Management 4.12 by comparing credentials. Learn how to configure it. - [WS Security Sign](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/ws-security-sign.md): The WS Security Sign policy signs SOAP messages in API Management 4.12 to guarantee integrity. Learn how to configure the signature. - [XML to JSON](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/xml-to-json.md): The XML to JSON policy transforms XML content into JSON content in API Management 4.12. Learn how to configure the transformation. - [XML Threat Protection](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/xml-threat-protection.md): The XML Threat Protection policy validates an XML request body against structural limits in API Management 4.12. Learn how to set them. - [XML Validation](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/xml-validation.md): The XML Validation policy validates XML against an XSD schema in API Management 4.12, rejecting bad requests. Learn how to configure it. - [XSLT](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/xslt.md): The XSLT policy applies an XSL transformation to an XML request or response body in API Management 4.12. Learn how to configure it. - [Webhook Signature Generator](https://documentation.gravitee.io/apim/create-and-configure-apis/apply-policies/policy-reference/webhook-signature-generator.md): The Webhook Signature Generator policy computes an HMAC signature over the response body in API Management 4.12. Learn how to set it. - [Secure & Expose APIs](https://documentation.gravitee.io/apim/secure-and-expose-apis.md): Plans, applications, and subscriptions govern how an API Management 4.12 API is exposed to consumers. Learn how the three fit together. - [Plans](https://documentation.gravitee.io/apim/secure-and-expose-apis/plans.md): A plan is the service and access layer an API Management 4.12 API needs before you expose it. Compare the plan types available. - [Keyless](https://documentation.gravitee.io/apim/secure-and-expose-apis/plans/keyless.md): A keyless plan allows public access to an API Management 4.12 API with no authentication. Learn what it offers and when to use it. - [API Key](https://documentation.gravitee.io/apim/secure-and-expose-apis/plans/api-key.md): The API Key plan verifies keys during request processing so only approved applications reach your API Management 4.12 API. Learn how. - [OAuth2](https://documentation.gravitee.io/apim/secure-and-expose-apis/plans/oauth2.md): An OAuth 2.0 plan gives client applications secure, delegated access to an API Management 4.12 API. Learn how the standard works. - [JWT](https://documentation.gravitee.io/apim/secure-and-expose-apis/plans/jwt.md): A JWT plan secures an API Management 4.12 API with signed claims passed between two parties. Learn how the token is validated. - [Push](https://documentation.gravitee.io/apim/secure-and-expose-apis/plans/push.md): A Push plan suits an API Management 4.12 API with an entrypoint that sends message payloads, such as Webhook. Learn when to use it. - [mTLS](https://documentation.gravitee.io/apim/secure-and-expose-apis/plans/mtls.md): An mTLS plan requires a client certificate when connecting to an API Management 4.12 API. Learn how the certificate is used. - [Applications](https://documentation.gravitee.io/apim/secure-and-expose-apis/applications.md): Consumers register an application and subscribe to a published plan to reach API Management 4.12 APIs. Learn what applications do. - [Create an Application](https://documentation.gravitee.io/apim/secure-and-expose-apis/applications/create-an-application.md): Create an application in the API Management 4.12 Console so a consumer can subscribe to a plan. Follow the steps to set one up. - [Global Settings](https://documentation.gravitee.io/apim/secure-and-expose-apis/applications/global-settings.md): An application's global settings hold its details and a danger zone for destructive actions in API Management 4.12. Learn what each does. - [mTLS certificate management for applications](https://documentation.gravitee.io/apim/secure-and-expose-apis/applications/mtls-certificate-management-for-applications-overview-and-concepts.md): Upload, rotate, and retire client certificates for mutual TLS on an API Management 4.12 application. Learn how certificate management works. - [User and Group Access](https://documentation.gravitee.io/apim/secure-and-expose-apis/applications/user-and-group-access.md): Manage user and group access to an individual API Management 4.12 application. Follow the steps to add and remove members. - [Subscriptions](https://documentation.gravitee.io/apim/secure-and-expose-apis/subscriptions.md): A subscription is how an API Management 4.12 publisher controls who uses their API and on what terms. Learn how subscriptions work. - [Creating and managing subscription forms](https://documentation.gravitee.io/apim/secure-and-expose-apis/subscriptions/creating-and-managing-subscription-forms.md): Create and manage the subscription form consumers complete in API Management 4.12. Follow the steps in the Management Console. - [Reuse Custom API Keys](https://documentation.gravitee.io/apim/secure-and-expose-apis/subscriptions/reuse-custom-api-keys.md): Allow inactive custom API keys to be reused for new subscriptions in API Management 4.12. Learn what enabling reuse changes. - [Subscription form feature overview](https://documentation.gravitee.io/apim/secure-and-expose-apis/subscriptions/subscription-form-feature-overview.md): The subscription form lets an API Management 4.12 publisher collect details when a consumer subscribes. Learn what the feature offers. - [Subscription Requests](https://documentation.gravitee.io/apim/secure-and-expose-apis/subscriptions/subscription-requests.md): A subscription is a contract between an API Management 4.12 publisher and a consumer. Learn how requests are made and approved. - [Manage Subscriptions](https://documentation.gravitee.io/apim/secure-and-expose-apis/subscriptions/manage-subscriptions.md): Find and manage an application's subscriptions from the API Management 4.12 Console. Follow the steps to review and change them. - [Transfer Subscriptions](https://documentation.gravitee.io/apim/secure-and-expose-apis/subscriptions/transfer-subscriptions.md): Transfer an active API Management 4.12 subscription to another plan with the same security type. Follow the steps to move it. - [API Products overview and concepts](https://documentation.gravitee.io/apim/secure-and-expose-apis/api-products.md): API Products bundle several v4 HTTP proxy APIs into one subscribable package in API Management 4.12. Learn how unified access works. - [API Product Analytics and Logging: Concepts and Data Model](https://documentation.gravitee.io/apim/secure-and-expose-apis/api-products/api-product-analytics-and-logging-concepts-and-data-model.md): Track and filter API Management 4.12 requests by API Product across analytics dashboards and logs. Learn the data model behind it. - [API Product Analytics: Prerequisites and Restrictions](https://documentation.gravitee.io/apim/secure-and-expose-apis/api-products/api-product-analytics-prerequisites-and-restrictions.md): Filter the API Management 4.12 analytics dashboard by API Product. Follow the steps and check the restrictions that apply first. - [API Product Membership and Ownership Models](https://documentation.gravitee.io/apim/secure-and-expose-apis/api-products/api-product-membership-and-ownership-models.md): The primary owner mode decides whether an API Management 4.12 API Product is owned by a user or a group. Learn the ownership models. - [API Products console UI reference](https://documentation.gravitee.io/apim/secure-and-expose-apis/api-products/console-ui-reference.md): The API Products pages in the API Management 4.12 Console, from the list view through to each tab. Find the control you need. - [API Products restrictions and licensing](https://documentation.gravitee.io/apim/secure-and-expose-apis/api-products/restrictions-and-licensing.md): API Management 4.12 API Products require the Enterprise Universe licence tier. Learn the restrictions before you deploy one. - [Configuring API Product Deployment with Sharding Tags](https://documentation.gravitee.io/apim/secure-and-expose-apis/api-products/configuring-api-product-deployment-with-sharding-tags.md): Assign sharding tags to an API Management 4.12 API Product to control where it deploys. Follow the steps on the Deployment tab. - [Configuring API Product Primary Owner Mode and Group Defaults](https://documentation.gravitee.io/apim/secure-and-expose-apis/api-products/configure-api-product-primary-owner-mode-and-group-defaults.md): Set who can be primary owner of a new API Management 4.12 API Product, and the group defaults. Follow the steps to configure it. - [Consuming APIs via API Products](https://documentation.gravitee.io/apim/secure-and-expose-apis/api-products/consuming-api-products.md): Consumers use the same authentication for APIs inside an API Management 4.12 API Product as for individual APIs. Learn how it works. - [Managing API Product Members and Ownership (Configuration Page)](https://documentation.gravitee.io/apim/secure-and-expose-apis/api-products/manage-api-product-members-and-ownership-configuration-page.md): Manage the members and ownership of an API Management 4.12 API Product. Follow the steps, and check the permissions you need first. - [Managing API Products with the Management API](https://documentation.gravitee.io/apim/secure-and-expose-apis/api-products/manage-api-products-with-management-api.md): Create and manage API Management 4.12 API Products through the Management API. Follow the steps to post a product definition. - [API Products configuration reference](https://documentation.gravitee.io/apim/secure-and-expose-apis/api-products-configuration-reference.md): The reference fields for plans and subscriptions created against API Management 4.12 API Products. Find the field you need to set. - [Developer Portal](https://documentation.gravitee.io/apim/developer-portal.md): The Developer Portal 4.12 is the web application where consumers discover and consume your APIs. Learn what the portal offers. - [New Developer Portal](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal.md): The features and functionality of the New Developer Portal 4.12. Browse the tiles to find the area you want to configure. - [API Overview Page Templates](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/api-overview-page-templates.md): API Overview Page Templates supply pre-configured Gravitee Markdown for New Developer Portal 4.12 API pages. Learn what they provide. - [Catalog](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/catalog.md): The Catalog lets consumers discover the APIs published in the New Developer Portal 4.12. Learn how discovery works for them. - [Configure mTLS certificate management (administrator guide)](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/configuring-mtls-certificate-management-administrator-guide.md): Enable self-service mTLS certificate management for Developer Portal 4.12 application owners. Follow the steps as an administrator. - [Create an Application](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/create-an-application.md): Create an application in the New Developer Portal 4.12 and subscribe it to a plan. Follow the steps unless the API is keyless. - [Create and manage mTLS certificates (application owner guide)](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/creating-and-managing-mtls-certificates-application-owner-guide.md): Upload, rotate, and delete mTLS client certificates for your Developer Portal 4.12 application. Follow the steps as an owner. - [Enable the New Developer Portal](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/configure-the-new-portal.md): The New Developer Portal 4.12 has an updated interface and more customization. Follow the steps to enable it for your environment. - [Layout and Theme](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/layout-and-theme.md): Select the fonts and set the layout and theme of the New Developer Portal 4.12. Follow the steps to change how the portal appears. - [Customize the Homepage](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/customize-the-homepage.md): Customize the New Developer Portal 4.12 homepage with standard Markdown. Follow the steps to change what consumers see first. - [Manage Portal Navigation and APIs](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/customize-the-navigation.md): Customize New Developer Portal 4.12 navigation and manage which APIs appear in it. Follow the steps to organize the portal. - [Structure the navigation with the Management API](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/customize-the-navigation/structure-the-navigation-with-the-management-api.md): Manage your Developer Portal 4.12 navigation programmatically with the Management API. Follow the steps to structure it. - [Creating OpenAPI Documentation Pages](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/customize-the-navigation/creating-openapi-documentation-pages.md): Choose how each OpenAPI page renders in Developer Portal 4.12 navigation. Follow the steps to configure the rendering mode. - [Creating AsyncAPI Documentation Pages](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/customize-the-navigation/creating-asyncapi-documentation-pages.md): The New Developer Portal 4.12 renders AsyncAPI documentation pages alongside Markdown and OpenAPI. Learn how to create them. - [Portal automation](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/customize-the-navigation/portal-automation.md): The Next-Gen Developer Portal 4.12 supports CI/CD-driven setup of structure, APIs, and documentation. Browse the automation guides. - [Portal listings](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/customize-the-navigation/portal-automation/portal-listings.md): Portal listings publish APIs to specific locations in Developer Portal 4.12 navigation. Learn what each listing specifies. - [Portal documentation](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/customize-the-navigation/portal-automation/portal-documentation.md): Portal-scoped documentation pages provide platform-level guides in the Developer Portal 4.12. Learn how each page is attached. - [API documentation](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/customize-the-navigation/portal-automation/api-documentation.md): API-scoped documentation pages attach guides and reference to a single API in the Developer Portal 4.12. Learn how they work. - [Creating and Managing Templated Portal Pages](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/creating-and-managing-templated-portal-pages.md): Create Developer Portal 4.12 pages from templates. Check the prerequisites and follow the steps to manage templated pages. - [Gravitee Markdown Components](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/gravitee-markdown-components.md): Customize the New Developer Portal 4.12 with Gravitee Markdown components. Learn what the components give you to work with. - [MCP Server Installation Widget for Portal Pages](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/mcp-server-installation-widget-for-portal-pages.md): The Gravitee Markdown install component embeds one-click MCP installer actions on API Management 4.12 portal pages. Learn the supported AI clients. - [Application Logs](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/application-logs.md): API subscribers view paginated logs for every API their application subscribes to in the Developer Portal 4.12. Learn how to read them. - [Manage API Keys in the Developer Portal](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/manage-api-keys-in-the-developer-portal.md): View, revoke, and renew API keys directly in the Developer Portal 4.12. Learn what administrators and developers can do. - [Manage Subscriptions](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/manage-subscriptions.md): Subscribe to APIs and manage your subscriptions in the New Developer Portal 4.12. Follow the steps unless the API is keyless. - [Configure Webhook Subscriptions](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/configure-webhook-subscriptions.md): Configure a webhook subscription from the Developer Portal 4.12 catalog. Follow the steps to set it up for your application. - [Configure Authentication](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/configure-authentication.md): Configure authentication for the New Developer Portal 4.12 so only authorized users reach it. Browse the authentication options. - [Configure Authentication with Login and Password](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/configure-authentication/configure-authentication-with-login-and-password.md): Require a username and password to sign in to the New Developer Portal 4.12. Follow the steps to configure the login method. - [Configure Authentication with SSO](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/configure-authentication/configure-authentication-with-sso.md): Require a single sign-on login before users can reach the New Developer Portal 4.12. Follow the steps to configure SSO access. - [Enforce User Authentication](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/configure-authentication/enforce-user-authentication.md): Enforce user authentication so only signed-in users can reach your New Developer Portal 4.12. Follow the steps to enable it. - [Portal analytics configuration reference](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/portal-analytics-configuration-reference.md): The conditions that must be met before Developer Portal 4.12 analytics dashboards work. Browse the configuration reference. - [Portal Navigation Cascade Operations](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/portal-navigation-cascade-operations.md): Organize and control the structure of Developer Portal 4.12 navigation, including cascade operations. Learn how changes propagate. - [Subscription form technical implementation](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/subscription-form-technical-implementation.md): Retrieve a Developer Portal 4.12 subscription form with resolved dynamic options. Learn what the endpoint returns to you. - [View and manage portal analytics dashboards](https://documentation.gravitee.io/apim/developer-portal/new-developer-portal/viewing-and-managing-portal-analytics-dashboards.md): The New Developer Portal 4.12 presents pre-configured analytics dashboards to consumers and administrators. Learn how to use them. - [Classic Developer Portal](https://documentation.gravitee.io/apim/developer-portal/classic-developer-portal.md): The features and functionality of the classic Developer Portal 4.12. Browse the tiles to find the area you need to change. - [API Model Object Reference for Portal Templates](https://documentation.gravitee.io/apim/developer-portal/classic-developer-portal/api-model-object-reference-for-portal-templates.md): The api variable in Developer Portal 4.12 templates is one of three model classes chosen by API definition. Find the fields you need. - [Configuration File](https://documentation.gravitee.io/apim/developer-portal/classic-developer-portal/configuration-file.md): The Developer Portal 4.12 configuration file is assets/config.json. Browse the default configuration and what you can change in it. - [Portal Navigation Templating Concepts](https://documentation.gravitee.io/apim/developer-portal/classic-developer-portal/portal-navigation-templating-concepts.md): Gravitee Markdown pages served through the Developer Portal 4.12 support FreeMarker template expressions. Learn the templating concepts. - [Portal Settings](https://documentation.gravitee.io/apim/developer-portal/classic-developer-portal/portal-settings.md): Reach the Developer Portal 4.12 settings from the Management Console sidebar. Follow the steps to open and change the settings. - [Layout and Theme](https://documentation.gravitee.io/apim/developer-portal/classic-developer-portal/layout-and-theme.md): Administrators can change the layout and theme of the Developer Portal 4.12 to control how APIs are presented. Learn what you can customize. - [Manage Users](https://documentation.gravitee.io/apim/developer-portal/classic-developer-portal/manage-users.md): Users reaching the Developer Portal 4.12 from the Management Console are signed in automatically. Learn how user management works. - [Webhook Subscriptions](https://documentation.gravitee.io/apim/developer-portal/classic-developer-portal/webhook-subscriptions.md): API consumers configure their webhook subscriptions from the Developer Portal 4.12. Learn what the configuration involves for them. - [Create an Application](https://documentation.gravitee.io/apim/developer-portal/classic-developer-portal/create-an-application.md): Unless an API has a keyless plan, a consumer registers an application in the Developer Portal 4.12 and subscribes. Follow the steps. - [API Documentation](https://documentation.gravitee.io/apim/developer-portal/classic-developer-portal/api-documentation.md): Administrators use site-wide documentation in the Developer Portal 4.12 to share best practices and configure pages. Learn what you can set. - [Portal Page Content Validator API Changes](https://documentation.gravitee.io/apim/developer-portal/portal-page-content-validator-api-changes.md): Developer Portal 4.12 page content validators now receive the existing content for context. Learn what changed in the API. - [Typo-tolerant API search](https://documentation.gravitee.io/apim/developer-portal/typo-tolerant-api-search.md): Typo-tolerant search helps consumers find APIs in the Developer Portal 4.12 catalog despite spelling mistakes. Learn how it works. - [Govern APIs](https://documentation.gravitee.io/apim/govern-apis.md): The API governance features API Management 4.12 offers, from scoring through to federation. Browse what is available to you. - [Federation](https://documentation.gravitee.io/apim/govern-apis/federation.md): Federation brings APIs from other gateways and brokers into API Management 4.12 for a single catalogue. Learn how it works. - [Integrations](https://documentation.gravitee.io/apim/govern-apis/federation/integrations.md): Integrations connect Gravitee to third-party API gateways and event brokers for API Management 4.12. Learn what they provide. - [Discovery](https://documentation.gravitee.io/apim/govern-apis/federation/discovery.md): Discovery is how an integration connects to a third-party management API and finds its assets for API Management 4.12. Learn the process. - [Federated APIs](https://documentation.gravitee.io/apim/govern-apis/federation/federated-apis.md): Federated APIs are one of the three main v4 Gravitee API types in API Management 4.12. Learn what they can and cannot do. - [Federation Agent Service Account](https://documentation.gravitee.io/apim/govern-apis/federation/federation-agent-service-account.md): Create a service account so the federation agent can authenticate to your API Management 4.12 installation. Follow the steps. - [3rd-Party Providers](https://documentation.gravitee.io/apim/govern-apis/federation/3rd-party-providers.md): Each third-party API gateway or event broker has its own integration for federating APIs into API Management 4.12. Compare the providers. - [Apigee X](https://documentation.gravitee.io/apim/govern-apis/federation/3rd-party-providers/apigee-x.md): Federate APIs from Apigee X, Google Cloud's API management solution, into API Management 4.12. Learn how the integration works. - [AWS API Gateway](https://documentation.gravitee.io/apim/govern-apis/federation/3rd-party-providers/aws-api-gateway.md): Federate APIs from AWS API Gateway, the built-in AWS solution, into API Management 4.12. Learn how the integration works for you. - [Multi-Account and Multi-Region AWS API Gateway Federation](https://documentation.gravitee.io/apim/govern-apis/federation/3rd-party-providers/aws-api-gateway/multi-account-and-multi-region-aws-api-gateway-federation.md): Configure the AWS API Gateway federation agent to ingest APIs across accounts and regions into API Management 4.12. Follow the steps. - [AWS IAM Role-Based Authentication](https://documentation.gravitee.io/apim/govern-apis/federation/3rd-party-providers/aws-api-gateway/aws-iam-role-based-authentication.md): IAM role-based authentication lets the AWS federation agent work without static keys in API Management 4.12. Learn how to configure it. - [Azure API Management](https://documentation.gravitee.io/apim/govern-apis/federation/3rd-party-providers/azure-api-management.md): API Management 4.12 federates APIs from Azure API Management, Azure's built-in solution. Learn how the integration works for you. - [Confluent Platform](https://documentation.gravitee.io/apim/govern-apis/federation/3rd-party-providers/confluent-platform.md): Federate APIs from Confluent Platform, the event streaming platform built on Kafka, into API Management 4.12. Learn how it works. - [IBM API Connect](https://documentation.gravitee.io/apim/govern-apis/federation/3rd-party-providers/ibm-api-connect.md): Federate APIs from IBM API Connect, cloud or on-premise, into API Management 4.12. Learn how the integration works for you. - [Mulesoft Anypoint](https://documentation.gravitee.io/apim/govern-apis/federation/3rd-party-providers/mulesoft-anypoint.md): Federate APIs from the Mulesoft Anypoint Platform into API Management 4.12. Learn how the integration discovers and ingests them. - [Solace](https://documentation.gravitee.io/apim/govern-apis/federation/3rd-party-providers/solace.md): Federate event APIs from the Solace Event Portal into API Management 4.12. Learn how the integration works with an event mesh. - [Edge Stack](https://documentation.gravitee.io/apim/govern-apis/federation/3rd-party-providers/edge-stack.md): Edge Stack is a cloud native API gateway running in Kubernetes, federated into API Management 4.12. Learn how the integration works. - [API Score](https://documentation.gravitee.io/apim/govern-apis/api-score.md): API Score is the automated governance capability in API Management 4.12, scoring APIs on criteria like security. Learn how it works. - [Enable API Score](https://documentation.gravitee.io/apim/govern-apis/api-score/enable-api-score.md): API Score is available in Gravitee Cloud; a self-hosted API Management 4.12 install needs it enabled. Follow the steps to turn it on. - [View API Scores](https://documentation.gravitee.io/apim/govern-apis/api-score/view-api-scores.md): High-level API Score statistics appear on the API Score page in API Management 4.12. Follow the steps to reach your dashboard. - [Rulesets and Functions](https://documentation.gravitee.io/apim/govern-apis/api-score/rulesets-and-functions.md): API Score rulesets hold the rules that rate an API in API Management 4.12. Learn how rulesets and their functions are built. - [Types of Assets](https://documentation.gravitee.io/apim/govern-apis/api-score/types-of-assets.md): API Score analyses different parts of an API Management 4.12 API against rulesets. Learn which assets are checked and how. - [Generate an API Score](https://documentation.gravitee.io/apim/govern-apis/api-score/generate-an-api-score.md): API Score does not score automatically in API Management 4.12; each API stays unscored until you act. Follow the steps to generate one. - [Analyze & Monitor APIs](https://documentation.gravitee.io/apim/analyze-and-monitor-apis.md): Analysing and monitoring API Management 4.12 APIs, across dashboards, logging, and quality. Browse the sections that matter to you. - [Dashboards](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/dashboards.md): The dashboards available in API Management 4.12, from the overview through to LLM and MCP usage. Browse the dashboard you need. - [Overview dashboard](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/dashboards/overview-dashboard.md): The Overview Dashboard shows API performance and traffic patterns across your API Management 4.12 environment. Learn the available metrics. - [Portal analytics dashboards overview](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/dashboards/portal-analytics-dashboards-overview.md): Portal analytics dashboards give consumers and administrators pre-configured views of API Management 4.12 traffic. Learn the key concepts. - [Create portal analytics dashboards](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/dashboards/creating-portal-analytics-dashboards.md): Create environment-scoped portal analytics dashboards in the API Management 4.12 Console. Follow the steps to build one from a template. - [V4 Proxy API traffic dashboard](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/dashboards/api-proxy-dashboard.md): Access and interpret the v4 proxy API traffic dashboard in API Management 4.12. Follow the steps to read what the dashboard reports. - [V4 API analytics dashboard](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/dashboards/v4-api-analytics-dashboard.md): The v4 API analytics dashboard shows performance and traffic patterns for an API Management 4.12 v4 API. Learn the metrics it reports. - [V2 API analytics dashboards](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/dashboards/v2-api-analytics-dashboards.md): The v2 API analytics dashboard shows performance and traffic patterns for an API Management 4.12 v2 API. Follow the steps to access it. - [LLM Usage Dashboard](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/dashboards/llm-usage-dashboard.md): The LLM Dashboard shows LLM usage across an API Management 4.12 environment. Learn the metrics it reports and its prerequisites. - [MCP Usage Dashboard](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/dashboards/mcp-usage-dashboard.md): The MCP Dashboard shows MCP usage across an API Management 4.12 environment. Learn the metrics it reports and its prerequisites. - [API Quality](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/api-quality.md): API Quality assigns customizable governance scores to your API Management 4.12 APIs. Follow the steps to configure and review them. - [Audit Trail](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/audit-trail.md): The Audit Trail table and filters let you audit API consumption and activity in API Management 4.12. Follow the steps to use it. - [Reporters](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/reporters.md): Reporters record events from the API Management 4.12 Gateway and send them onward. Compare the reporters available to you. - [Elasticsearch Reporter](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/reporters/elasticsearch-reporter.md): Send API Management 4.12 Gateway events to Elasticsearch with the Elasticsearch reporter. Find the configuration details you need. - [File Reporter](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/reporters/file-reporter.md): Write API Management 4.12 Gateway events to a file with the file reporter. Browse the configuration parameters it accepts. - [Managing API-Specific Redaction Rules in the Console](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/reporters/managing-api-specific-redaction-rules-in-the-console.md): Configure span attribute redaction rules for a single API in the API Management 4.12 Console. Follow the steps to manage them. - [TCP Reporter](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/reporters/tcp-reporter.md): Stream API Management 4.12 Gateway events over TCP with the TCP reporter. Browse the configuration parameters it accepts. - [Datadog Reporter](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/reporters/datadog-reporter.md): Send API Management 4.12 Gateway events to Datadog with the Datadog reporter plugin. Follow the steps to download and configure it. - [Logging](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/logging.md): Enable and configure logging at Gateway and API level in API Management 4.12, then view the detail. Browse the logging guides. - [Configure Gateway-level Logs](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/logging/configure-gateway-level-logs.md): Gateway logging applies to all v4 API Management 4.12 APIs by default. Follow the steps to enable and configure the logging you need. - [Configure API-level Logs](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/logging/configure-api-level-logs.md): Collect runtime logs for v4 proxy and message APIs in API Management 4.12, including webhook logs. Follow the steps to configure them. - [Configure Environment-level Logs](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/logging/configure-environment-level-logs.md): Environment-level logs give cross-API visibility into v4 proxy API runtime logs in API Management 4.12. Follow the steps to view them. - [Configuring and Viewing Native API Connection Logs](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/logging/configuring-and-viewing-native-api-connection-logs.md): Configure and view connection logs for a native Kafka API in API Management 4.12. Follow the steps to report connection metrics. - [Native API Connection Logs: Concepts and Architecture](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/logging/native-api-connection-logs-concepts-and-architecture.md): Native Kafka API connection logs record every client connection lifecycle event in API Management 4.12. Learn the architecture behind them. - [View API Logs](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/logging/view-api-logs.md): Collect and view runtime logs for v4 proxy and message APIs in API Management 4.12, plus webhook logs. Follow the steps to read them. - [Expose Metrics to Prometheus](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/logging/expose-metrics-to-prometheus.md): Expose API Management 4.12 metrics to Prometheus. Follow the configuration steps needed to make the metrics available to scrape. - [OpenTelemetry](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/opentelemetry.md): Trace every request the API Management 4.12 Gateway handles with the Gravitee OpenTelemetry feature. Learn how tracing is set up. - [OpenTelemetry Logs Integration Overview](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/opentelemetry/opentelemetry-logs-integration-overview.md): OpenTelemetry Logs Integration injects trace and span IDs into API Management 4.12 runtime log records. Learn how correlation works. - [Configure Gateway for OpenTelemetry Logs](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/opentelemetry/configure-gateway-for-opentelemetry-logs.md): Enable OpenTelemetry tracing and set the logs export endpoint on the API Management 4.12 Gateway. Follow the steps to configure it. - [Enable and Use OpenTelemetry Logs for APIs](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/opentelemetry/enable-and-use-opentelemetry-logs-for-apis.md): Enable OpenTelemetry logs for an API Management 4.12 API and view the correlated logs in Grafana. Follow the steps to configure it. - [Execution Transparency Analytics](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/execution-transparency-analytics.md): Execution transparency analytics gives actionable diagnostics when an API Management 4.12 call fails. Learn what the components report. - [Gateway Error Key Reference](https://documentation.gravitee.io/apim/analyze-and-monitor-apis/gateway-error-key-reference.md): The Gateway records an error key on every failed API Management 4.12 request. Browse the reference to interpret the key you see. - [Alert Engine](https://documentation.gravitee.io/apim/alert-engine.md): Alert Engine monitors API performance and availability in real time alongside API Management 4.12. Learn what the monitoring solution offers. - [Architecture](https://documentation.gravitee.io/apim/alert-engine/architecture.md): Alert Engine is a standalone application needing no database, running alongside API Management 4.12. Learn how it is built. - [Integrations](https://documentation.gravitee.io/apim/alert-engine/integrations.md): Alert Engine works inside and outside the Gravitee ecosystem, including with API Management 4.12. Learn what it connects to. - [Install and Upgrade](https://documentation.gravitee.io/apim/alert-engine/install-and-upgrade-guides.md): Install Alert Engine in your environment alongside API Management 4.12. Browse the guides for the deployment method you use. - [Sizing requirements](https://documentation.gravitee.io/apim/alert-engine/install-and-upgrade-guides/sizing-requirements.md): Resource planning and optimization advice for an Alert Engine install alongside API Management 4.12. Learn what to allow for. - [Install via .ZIP file](https://documentation.gravitee.io/apim/alert-engine/install-and-upgrade-guides/install-via-.zip-file.md): Install Alert Engine from the distribution bundle alongside API Management 4.12. Check the prerequisites before you start. - [Install via Docker](https://documentation.gravitee.io/apim/alert-engine/install-and-upgrade-guides/install-via-docker.md): Run Alert Engine images in Docker alongside API Management 4.12. Follow the steps if you are already familiar with Docker. - [Install via Kubernetes](https://documentation.gravitee.io/apim/alert-engine/install-and-upgrade-guides/install-via-kubernetes.md): Deploy Alert Engine in Kubernetes alongside API Management 4.12. Follow the steps if you are already familiar with Kubernetes. - [Upgrade guide](https://documentation.gravitee.io/apim/alert-engine/install-and-upgrade-guides/upgrade-guide.md): Upgrading Alert Engine alongside API Management 4.12 changes only internals between the 1.6 and 2.0 lines. Learn what to check. - [Configuration](https://documentation.gravitee.io/apim/alert-engine/configuration.md): Configure Alert Engine and its internal API alongside API Management 4.12. Browse the configuration guides that apply to you. - [Configure Alert Engine](https://documentation.gravitee.io/apim/alert-engine/configuration/configure-alert-engine.md): Three methods configure Alert Engine in an API Management 4.12 platform. Compare them and follow the steps for the one you use. - [Configure the Internal API](https://documentation.gravitee.io/apim/alert-engine/configuration/configure-the-internal-api.md): Alert Engine exposes an internal API for monitoring the component alongside API Management 4.12. Follow the steps to configure it. - [Alerts and Conditions](https://documentation.gravitee.io/apim/alert-engine/alerts-and-conditions.md): Alert Engine sends alerts when conditions are met across your API Management 4.12 platform. Learn how an alert is structured. - [Dampening](https://documentation.gravitee.io/apim/alert-engine/dampening.md): Dampening stops Alert Engine flooding users when a condition triggers repeatedly in API Management 4.12. Learn how to configure it. - [Notifications](https://documentation.gravitee.io/apim/alert-engine/notifications.md): Choose the channel Alert Engine notifies you through when an alert fires in API Management 4.12. Compare the providers available. - [Integration set up](https://documentation.gravitee.io/apim/alert-engine/integration-set-up.md): Alert Engine bolts on to your API Management 4.12 platform and to third-party backends. Compare the integrations available. - [Gravitee API Management](https://documentation.gravitee.io/apim/alert-engine/integration-set-up/gravitee-api-management.md): Integrate Alert Engine with API Management 4.12 so API teams get advanced monitoring. Learn what the integration provides. - [Installation](https://documentation.gravitee.io/apim/alert-engine/integration-set-up/gravitee-api-management/installation.md): Install the Alert Engine integration for API Management 4.12. Follow the steps, or skip them if you run Enterprise Docker images. - [Configure Notifications](https://documentation.gravitee.io/apim/alert-engine/integration-set-up/gravitee-api-management/configure-notifications.md): Use Alert Engine and API Management 4.12 together to configure notifications for your alerts. Follow the steps to set them up. - [Gravitee API Management Alerts Dashboard](https://documentation.gravitee.io/apim/alert-engine/integration-set-up/gravitee-api-management/gravitee-api-management-alerts-dashboard.md): The Alerts dashboard sits in the API Management 4.12 Console under Analytics. Learn what Alert Engine surfaces there for you. - [Gravitee Access Management](https://documentation.gravitee.io/apim/alert-engine/integration-set-up/gravitee-access-management.md): Integrate Alert Engine with Access Management alongside API Management 4.12. Browse the installation and configuration guides. - [Installation](https://documentation.gravitee.io/apim/alert-engine/integration-set-up/gravitee-access-management/installation.md): Install the Alert Engine integration for Access Management alongside API Management 4.12. Follow the steps, or skip them on Enterprise images. - [Configuration](https://documentation.gravitee.io/apim/alert-engine/integration-set-up/gravitee-access-management/configuration.md): Access Management ships an Alert Engine integration used alongside API Management 4.12. Follow the steps to configure it. - [Azure regions for SaaS and Hybrid Deployments](https://documentation.gravitee.io/apim/alert-engine/azure-regions-for-saas-and-hybrid-deployments.md): The Azure regions Gravitee supports for SaaS and hybrid Alert Engine deployments with API Management 4.12. Find your region. - [Changelog](https://documentation.gravitee.io/apim/alert-engine/page-6.md): Release notes for Changelog. - [AI Agent Management](https://documentation.gravitee.io/apim/ai-agent-management.md): AI Agent Management governs and protects AI use cases across API Management 4.12, from the Agent Gateway to LLM and A2A proxies. Learn what it covers. - [Set Up an AI Agent (A2A) Proxy](https://documentation.gravitee.io/apim/ai-agent-management/create-an-a2a-proxy.md): As organizations adopt AI agents, an API Management 4.12 A2A proxy connects them securely. Follow the steps to create one and configure the gateway. - [Discover and Catalog AI Agents (A2A)](https://documentation.gravitee.io/apim/ai-agent-management/add-agents-to-your-agent-catalog.md): Add AI agents to your API Management 4.12 Agent Catalog by importing or discovering their Agent Cards. Follow the steps to create an integration. - [Convert REST APIs to an MCP Server](https://documentation.gravitee.io/apim/ai-agent-management/convert-your-apis-to-mcp-servers.md): Deploy an API Management 4.12 REST API as an MCP Server for AI agents. Follow the steps and see how the OpenAPI specification maps to MCP tools. - [LLM proxy](https://documentation.gravitee.io/apim/ai-agent-management/llm-proxy.md): An LLM Proxy sits between an LLM consumer and provider in API Management 4.12. Learn what it solves and which providers are supported. - [Proxy your LLMs](https://documentation.gravitee.io/apim/ai-agent-management/llm-proxy/proxy-your-llms.md): An API Management 4.12 LLM proxy exposes an OpenAI-compatible API you can plug into any compatible client. Follow the steps to proxy your LLM. - [Accepted request formats](https://documentation.gravitee.io/apim/ai-agent-management/llm-proxy/accepted-request-formats.md): The API Management 4.12 LLM Proxy accepts OpenAI, Anthropic Messages, and Gemini request formats. Compare the supported endpoints. - [Add the Token Rate Limit policy to your LLM proxy](https://documentation.gravitee.io/apim/ai-agent-management/llm-proxy/add-the-token-rate-limit-policy-to-your-llm-proxy.md): The Token Rate Limit policy caps inbound and outbound tokens on an API Management 4.12 LLM proxy. Follow the steps to add and verify it. - [Add the Guard Rails policy to your LLM proxy](https://documentation.gravitee.io/apim/ai-agent-management/llm-proxy/add-the-guard-rails-policy-to-your-llm-proxy.md): The Guard Rails policy evaluates prompts on an API Management 4.12 LLM proxy for unsafe content. Follow the steps to add it and create a resource. - [Override the model at runtime](https://documentation.gravitee.io/apim/ai-agent-management/llm-proxy/override-the-model-at-runtime.md): Route an API Management 4.12 LLM proxy request to a different model without changing the client. Follow the steps to add the Assign attributes policy. - [Consume your LLM proxy with the OpenAI Python SDK](https://documentation.gravitee.io/apim/ai-agent-management/llm-proxy/consume-your-llm-proxy-with-the-openai-python-sdk.md): Consume an API Management 4.12 LLM proxy with the OpenAI Python SDK. Follow the steps to point the SDK at your proxy and verify the calls. - [Connect Claude Code through a Gravitee LLM Proxy](https://documentation.gravitee.io/apim/ai-agent-management/llm-proxy/connect-claude-code-through-gravitee-llm-proxy.md): Connect Claude Code to Anthropic through an API Management 4.12 LLM Proxy while users keep their own subscription. Follow the steps to connect. - [Configure an OpenAI-compatible provider](https://documentation.gravitee.io/apim/ai-agent-management/llm-proxy/configure-an-openai-compatible-provider.md): Set the target URL when an API Management 4.12 LLM proxy endpoint uses the OpenAI-compatible provider. Follow the steps to verify the target. - [Secure MCP Proxy with OAuth2](https://documentation.gravitee.io/apim/ai-agent-management/secure-mcp-proxy-with-oauth2.md): Secure an MCP proxy API in API Management 4.12 with an OAuth2 plan and Access Management. Learn the use cases and how the flow works. - [AI Resources](https://documentation.gravitee.io/apim/ai-agent-management/ai-resources.md): The resources that support AI-powered policies in API Management 4.12, covering model inference and vector storage. Compare what each provides. - [AI - Model Text Classification - Overview and Model Selection](https://documentation.gravitee.io/apim/ai-agent-management/ai-resources/ai-model-text-classification-overview-and-model-selection.md): AI Model Text Classification detects toxic content and prompt injection in API Management 4.12 traffic. Compare the detection models available. - [AI - Model Text Classification - Configuration and Usage](https://documentation.gravitee.io/apim/ai-agent-management/ai-resources/ai-model-text-classification-configuration-and-usage.md): Configure an API Management 4.12 text classification policy by choosing a model and input sources. Follow the steps and see the known limitations. - [Terraform](https://documentation.gravitee.io/apim/terraform.md): Terraform manages your API Management 4.12 infrastructure from configuration files. Check the compatibility matrix before you start. - [Quick Start Guide](https://documentation.gravitee.io/apim/terraform/quick-start-guide.md): Manage API Management 4.12 entities with Terraform instead of manual Console updates. Follow the steps to install the Gravitee provider. - [Define an APIM service account for Terraform](https://documentation.gravitee.io/apim/terraform/define-an-apim-service-account-for-terraform.md): Terraform authenticates to API Management 4.12 as a user of the instance. Follow the steps to create a Terraform service account. - [Gravitee Resources](https://documentation.gravitee.io/apim/terraform/example-resource-configurations.md): The Gravitee resources Terraform can create and manage in API Management 4.12. Compare the resources and the features each release adds. - [Release notes](https://documentation.gravitee.io/apim/terraform/release-notes.md): Release notes - [Changelog](https://documentation.gravitee.io/apim/terraform/changelog.md): Changelogs - [Kafka Gateway](https://documentation.gravitee.io/apim/kafka-gateway.md): The Kafka Gateway applies API Management 4.12 capabilities directly to native Kafka. Learn what it addresses for security and control. - [Configure the Kafka Client & Gateway](https://documentation.gravitee.io/apim/kafka-gateway/configure-the-kafka-client-and-gateway.md): Configure the Kafka Gateway and a Kafka client so API Management 4.12 can proxy your Kafka cluster. Follow the steps for both sides. - [Deploy the Kafka Gateway for High Availability](https://documentation.gravitee.io/apim/kafka-gateway/deploy-the-kafka-gateway-for-high-availability.md): The Kafka Gateway is a protocol-aware proxy rewriting broker addresses in API Management 4.12. Learn how to deploy it for high availability. - [Configuring Kafka Port Routing (Gateway and Console)](https://documentation.gravitee.io/apim/kafka-gateway/configuring-kafka-port-routing-gateway-and-console.md): Configure Kafka port routing on the API Management 4.12 Gateway and Console. Check the prerequisites and follow the steps. - [Creating and Updating Plans with Port Routing](https://documentation.gravitee.io/apim/kafka-gateway/creating-and-updating-plans-with-port-routing.md): Create and update plans for a native Kafka API when port routing is enabled in API Management 4.12. Follow the steps in the plan screen. - [Deploy a Kafka Gateway with Gravitee Cloud](https://documentation.gravitee.io/apim/kafka-gateway/deploy-a-kafka-gateway-with-gravitee-cloud.md): Use Gravitee Cloud to deploy an API Management 4.12 Gateway that supports the Kafka protocol. Follow the steps to deploy it. - [Produce and Consume Kafka Messages with Gravitee Cloud](https://documentation.gravitee.io/apim/kafka-gateway/produce-and-consume-kafka-messages-with-gravitee-cloud.md): Produce and consume Kafka messages through Gravitee Cloud with API Management 4.12. Follow the steps to send your first messages. - [Create & Configure Kafka APIs](https://documentation.gravitee.io/apim/kafka-gateway/create-and-configure-kafka-apis.md): Creating and configuring a Kafka API in API Management 4.12, from the Console. Browse the articles covering each part of the process. - [Create Kafka APIs](https://documentation.gravitee.io/apim/kafka-gateway/create-and-configure-kafka-apis/create-kafka-apis.md): Kafka APIs apply API Management 4.12 capabilities directly to the Kafka protocol. Follow the steps to create a Kafka API of your own. - [Configure Kafka APIs](https://documentation.gravitee.io/apim/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis.md): Configure Kafka APIs from the API Management 4.12 Console, a UI for creating and amending them. Learn what you can change there. - [Configuration](https://documentation.gravitee.io/apim/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/configuration.md): The Configuration section manages high-level settings for a Kafka API in API Management 4.12. Learn what you can customize. - [Entrypoint Connect phase](https://documentation.gravitee.io/apim/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/entrypoint-connect-phase.md): The Entrypoint Connect phase runs when a client opens a Kafka connection in API Management 4.12, before authentication. Learn what runs. - [Connection interruption in Entrypoint Connect phase](https://documentation.gravitee.io/apim/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/connection-interruption.md): Policies in the Entrypoint Connect phase can interrupt a Kafka connection in API Management 4.12. Learn the Expression Language variables. - [Console UI changes for multi-tenant Kafka endpoints](https://documentation.gravitee.io/apim/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/console_ui_changes_for_multi-tenant_kafka_endpoints.md): The API Management 4.12 Console endpoint table shows a Tenants column for multi-tenant Kafka endpoints. Learn what changed in the UI. - [Enable OpenTelemetry Tracing for a Kafka API](https://documentation.gravitee.io/apim/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/enable-opentelemetry-tracing-for-a-kafka-api.md): Enable OpenTelemetry tracing for a single Kafka native API in API Management 4.12 once gateway tracing is in place. Follow the steps. - [Entrypoints](https://documentation.gravitee.io/apim/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/entrypoints.md): Entrypoints define the protocol and settings consumers use to reach a Kafka API in API Management 4.12. Learn how to configure them. - [Endpoints](https://documentation.gravitee.io/apim/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/endpoints.md): Endpoints define the protocol and settings a Kafka API uses to reach its backend in API Management 4.12. Learn how to configure them. - [mTLS plans for Kafka native APIs](https://documentation.gravitee.io/apim/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/mtls-plans.md): mTLS plans authenticate Kafka native API clients with X.509 certificates in API Management 4.12. Learn how subscriptions resolve. - [Policies](https://documentation.gravitee.io/apim/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/policies.md): Policies are customizable rules the Gateway runs during a Kafka API transaction in API Management 4.12. Learn how they change behaviour. - [Consumers](https://documentation.gravitee.io/apim/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/consumers.md): The Consumers section manages how a Kafka API is consumed in API Management 4.12, through plans and subscriptions. Learn what it covers. - [Documentation](https://documentation.gravitee.io/apim/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/documentation.md): The Documentation section creates Developer Portal pages for a Kafka API in API Management 4.12. Learn how to inform consumers. - [Deployment](https://documentation.gravitee.io/apim/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/deployment.md): The Deployment section manages sharding tags and tracks changes to a Kafka API in API Management 4.12. Learn what it records. - [Create and Configure Kafka Clusters](https://documentation.gravitee.io/apim/kafka-gateway/create-and-configure-kafka-clusters.md): Create and manage Kafka clusters from the Kafka UI in the API Management 4.12 Console. Follow the steps to configure a cluster. - [Virtual Cluster Broker Addressing](https://documentation.gravitee.io/apim/kafka-gateway/virtual-cluster-broker-addressing.md): A Virtual Cluster presents several backend Kafka clusters as one in API Management 4.12. Learn how broker addressing works. - [Configure and Deploy Kafka Console](https://documentation.gravitee.io/apim/kafka-gateway/configure-and-deploy-kafka-console.md): The Kafka Console is a standalone UI that integrates with API Management 4.12 to manage Kafka clusters. Follow the steps to deploy it. - [Plans](https://documentation.gravitee.io/apim/kafka-gateway/plans.md): A plan is the service and access layer over a Kafka API in API Management 4.12, setting limits and validation. Learn the options. - [Applications](https://documentation.gravitee.io/apim/kafka-gateway/applications.md): Consumers register an application and subscribe to a plan to reach Kafka APIs in API Management 4.12. Learn what applications do. - [Subscriptions](https://documentation.gravitee.io/apim/kafka-gateway/subscriptions.md): A subscription is the contract between a Kafka API publisher and consumer in API Management 4.12. Learn how one is created. - [Other Ways Gravitee Supports Kafka](https://documentation.gravitee.io/apim/kafka-gateway/other-ways-gravitee-supports-kafka.md): Gravitee connects to Kafka through protocol mediation or native Kafka APIs in API Management 4.12. Compare the two approaches. - [Expose Metrics to Prometheus](https://documentation.gravitee.io/apim/kafka-gateway/expose-metrics-to-prometheus.md): Expose the API Management 4.12 Gateway internal API metrics to Prometheus. Follow the steps and verify the metrics arrive. - [Expose Metrics to Elasticsearch](https://documentation.gravitee.io/apim/kafka-gateway/expose-metrics-to-elasticsearch.md): Configure the Elasticsearch reporter to store runtime metrics from an API Management 4.12 Kafka Gateway. Follow the steps to set it up. - [Prepare a Production Environment](https://documentation.gravitee.io/apim/prepare-a-production-environment.md): Preparing an API Management 4.12 environment for production, from sizing through to best practices. Browse the articles you need. - [Gateway Resource Sizing](https://documentation.gravitee.io/apim/prepare-a-production-environment/gateway-resource-sizing-guidelines.md): Resource recommendations for an API Management 4.12 Gateway instance, based on traffic and deployment context. Learn how to size it. - [Production Best Practices](https://documentation.gravitee.io/apim/prepare-a-production-environment/production-best-practices.md): Default settings from an API Management 4.12 install suit testing, not production. Browse the best practices before you go live. - [Internal APIs](https://documentation.gravitee.io/apim/prepare-a-production-environment/production-best-practices/internal-apis.md): API Management 4.12 enables internal APIs on the Management API and Gateway by default. Learn what they expose and how to secure them. - [Deployments](https://documentation.gravitee.io/apim/prepare-a-production-environment/production-best-practices/deployments.md): The API Management 4.12 Management API exposes both the Console and Developer Portal REST APIs. Learn how to deploy them safely. - [Authentication](https://documentation.gravitee.io/apim/prepare-a-production-environment/production-best-practices/authentication.md): Authenticate API Management 4.12 users against an LDAP server or another provider in production. Learn the options available. - [Protections](https://documentation.gravitee.io/apim/prepare-a-production-environment/production-best-practices/protections.md): A brute-force attack submits a high volume of authentication requests. Learn how API Management 4.12 protects against them. - [General Recommendations](https://documentation.gravitee.io/apim/prepare-a-production-environment/production-best-practices/general-recommendations.md): Generalized recommendations for API Management 4.12 production settings and practices. Browse the articles in this section. - [Default APIM Settings](https://documentation.gravitee.io/apim/prepare-a-production-environment/production-best-practices/general-recommendations/default-apim-settings.md): Update the most common default settings in the API Management 4.12 Console before going live. Follow the steps for each one. - [API Design](https://documentation.gravitee.io/apim/prepare-a-production-environment/production-best-practices/general-recommendations/api-design.md): There is no single rule for designing and exposing API Management 4.12 APIs. Learn the considerations that shape your design. - [API Review and Quality](https://documentation.gravitee.io/apim/prepare-a-production-environment/production-best-practices/general-recommendations/api-review-and-quality.md): Enable API review and quality in API Management 4.12 to avoid unexpected exposure on the Developer Portal. Learn how to turn it on. - [Property Encryption](https://documentation.gravitee.io/apim/prepare-a-production-environment/production-best-practices/general-recommendations/property-encryption.md): API Management 4.12 can store encrypted property values on an API. Learn how property encryption works and how to set it up. - [Documentation Sanitizer](https://documentation.gravitee.io/apim/prepare-a-production-environment/production-best-practices/general-recommendations/documentation-sanitizer.md): API Management 4.12 can sanitize published API documentation pages. Learn what the sanitizer removes and why that matters. - [Notifiers](https://documentation.gravitee.io/apim/prepare-a-production-environment/production-best-practices/general-recommendations/notifiers.md): API publishers can send notifications about their APIs in API Management 4.12. Learn what notifiers do and how to restrict them. - [Default Nginx Security Config](https://documentation.gravitee.io/apim/prepare-a-production-environment/production-best-practices/general-recommendations/default-nginx-security-config.md): The default Nginx security configuration the API Management 4.12 Console uses. Browse it before you harden your deployment. - [Cache](https://documentation.gravitee.io/apim/prepare-a-production-environment/cache.md): Caches store different types of data in API Management 4.12. Compare the cache managers available and how each one is configured. - [Repositories](https://documentation.gravitee.io/apim/prepare-a-production-environment/repositories.md): API Management 4.12 stores data in repositories configured in gravitee.yml or elsewhere. Compare the repository types available. - [Hazelcast Rate-Limit Repository Overview and Key Concepts](https://documentation.gravitee.io/apim/prepare-a-production-environment/repositories/hazelcast-rate-limit-repository-overview-and-key-concepts.md): The Hazelcast rate-limit repository is a distributed rate-limiting backend for API Management 4.12 gateways. Learn the key concepts. - [Hazelcast Rate-Limit Repository Restrictions and Known Limitations](https://documentation.gravitee.io/apim/prepare-a-production-environment/repositories/hazelcast-rate-limit-repository-restrictions-and-known-limitations.md): The restrictions and known limitations of the Hazelcast rate-limit repository in API Management 4.12. Browse them before you deploy. - [MongoDB](https://documentation.gravitee.io/apim/prepare-a-production-environment/repositories/mongodb.md): The MongoDB plugin ships in the default API Management 4.12 distribution. Follow the steps to configure MongoDB as your repository. - [ElasticSearch](https://documentation.gravitee.io/apim/prepare-a-production-environment/repositories/elasticsearch.md): The Elasticsearch connector for API Management 4.12 uses the HTTP API that Elasticsearch instances expose. Learn how to configure it. - [JDBC](https://documentation.gravitee.io/apim/prepare-a-production-environment/repositories/jdbc.md): API Management 4.12 can use a JDBC repository for its configuration database. Follow the steps to install the driver and configure it. - [Redis](https://documentation.gravitee.io/apim/prepare-a-production-environment/repositories/redis.md): The Redis repository plugin connects API Management 4.12 to Redis for the rate limit feature. Follow the steps to configure it. - [Configure your HTTP Server](https://documentation.gravitee.io/apim/prepare-a-production-environment/configure-your-http-server.md): Configure the API Management 4.12 Gateway HTTP server properties. Follow the steps in the tab that matches your deployment. - [Timeout Management](https://documentation.gravitee.io/apim/prepare-a-production-environment/timeout-management.md): Timeouts apply at two independent scopes in API Management 4.12, both running on every request. Learn how the two interact. - [Sensitive Data Management](https://documentation.gravitee.io/apim/prepare-a-production-environment/sensitive-data-management.md): Protecting sensitive information in API Management 4.12, from API secrets to configuration secrets. Browse the articles you need. - [Configure Secrets](https://documentation.gravitee.io/apim/prepare-a-production-environment/sensitive-data-management/configure-secrets.md): API Management 4.12 integrates with secret managers for configuration-level secrets. Learn how that integration works in practice. - [Quick Start](https://documentation.gravitee.io/apim/prepare-a-production-environment/sensitive-data-management/configure-secrets/quick-start.md): Configure configuration-level secrets in API Management 4.12. Follow the quick start steps to reference your first secret. - [Configuration](https://documentation.gravitee.io/apim/prepare-a-production-environment/sensitive-data-management/configure-secrets/configuration.md): Configure a secret manager so you can reference secrets from API Management 4.12 configuration files. Follow the steps to set it up. - [Reference Secrets in Configurations](https://documentation.gravitee.io/apim/prepare-a-production-environment/sensitive-data-management/configure-secrets/reference-secrets-in-configurations.md): Reference secret manager values from your API Management 4.12 configuration files. Follow the steps to use them safely in production. - [API Secrets](https://documentation.gravitee.io/apim/prepare-a-production-environment/sensitive-data-management/api-secrets.md): API Management 4.12 integrates with secret managers so the values inside your APIs stay hidden. Learn how API secrets work in practice. - [Quick Start](https://documentation.gravitee.io/apim/prepare-a-production-environment/sensitive-data-management/api-secrets/quick-start.md): Configure access to a secret manager and reference a secret from an API Management 4.12 API. Follow the quick start steps. - [Configuration](https://documentation.gravitee.io/apim/prepare-a-production-environment/sensitive-data-management/api-secrets/configuration.md): Configure a secret manager to hide values inside your API Management 4.12 APIs. Follow the steps to set the integration up. - [Reference Secrets in APIs](https://documentation.gravitee.io/apim/prepare-a-production-environment/sensitive-data-management/api-secrets/reference-secrets-in-apis.md): Reference secret manager values from within an API Management 4.12 API to hide sensitive data. Follow the steps to use them. - [Plugin support](https://documentation.gravitee.io/apim/prepare-a-production-environment/sensitive-data-management/plugin-support.md): Which API Management 4.12 plugins support referencing secrets. Browse the support table before you configure a secret in one. - [Plugins](https://documentation.gravitee.io/apim/plugins.md): Plugins expand what the API Management 4.12 Gateway, Management API, and other components can do. Compare the types of plugin available. - [Deployment](https://documentation.gravitee.io/apim/plugins/deployment.md): Deploy an API Management 4.12 plugin by copying its archive into the plugins directory. Follow the steps, including for air-gapped clusters. - [Customization](https://documentation.gravitee.io/apim/plugins/customization.md): API Management 4.12 plugins extend and customize component behaviour. Learn the common structure a plugin shares before you build one. - [Context-Aware Logging in Plugins](https://documentation.gravitee.io/apim/plugins/customization/context-aware-logging.md): Use the context-aware logging API when developing API Management 4.12 Gateway plugins. Follow the steps for request-scoped logging. - [Policies for the Entrypoint Connect phase](https://documentation.gravitee.io/apim/plugins/customization/entrypoint-connect-phase-policies.md): The Entrypoint Connect phase runs when a client opens a native Kafka connection to the API Management 4.12 Gateway. Learn how to interrupt one. - [Enforce Logging Rules with ArchUnit Maven Plugin](https://documentation.gravitee.io/apim/plugins/customization/archunit-maven-plugin.md): The ArchUnit Maven plugin enforces context-aware logging rules at build time for API Management 4.12 plugins. Follow the steps to configure it. - [Gravitee Expression Language](https://documentation.gravitee.io/apim/gravitee-expression-language.md): Gravitee Expression Language queries object graphs to configure API Management 4.12 policies dynamically. Learn the syntax and expression markers. - [Management API Reference](https://documentation.gravitee.io/apim/management-api-reference.md): The Gravitee Management API is the programmatic interface to the API Management 4.12 backend. Browse the reference for its two sub-APIs. - [Expose APIM as an MCP Server](https://documentation.gravitee.io/apim/expose-apim-as-an-mcp-server.md): Install the API Management 4.12 MCP Server so AI clients can call your platform. Follow the steps to install it and create a service account token. - [Release Information](https://documentation.gravitee.io/apim/release-information.md): Information about release information. - [Release Notes](https://documentation.gravitee.io/apim/release-information/release-notes.md): An overview about Gravitee's release notes on news, overviews, and patch releases. - [APIM 4.12](https://documentation.gravitee.io/apim/release-information/release-notes/apim-4.12.md) - [Changelog](https://documentation.gravitee.io/apim/release-information/changelog.md): An overview about changelog. - [APIM 4.12.x](https://documentation.gravitee.io/apim/release-information/changelog/apim-4.12.x.md) - [APIM 4.11.x](https://documentation.gravitee.io/apim/release-information/changelog/apim-4.11.x.md) - [Breaking Changes and Deprecations](https://documentation.gravitee.io/apim/release-information/breaking-changes-and-deprecations.md): Information about breaking changes and deprecations. - [Release Types](https://documentation.gravitee.io/apim/release-information/release-types.md): Gravitee's approach to software development and deployment - [Release schedule](https://documentation.gravitee.io/apim/release-information/release-schedule.md): Overview of the Release schedule - [Support Model](https://documentation.gravitee.io/apim/release-information/support-model.md): Gravitee's approach to software support - [Support for v1 APIs](https://documentation.gravitee.io/apim/release-information/support-model/support-for-v1-apis.md): This page details the go-forward strategy for supporting v1 APIs in APIM * [Introduction](https://documentation.gravitee.io/apim/4.11/readme.md): API Management 4.11 accelerates and streamlines the governance and delivery of your APIs. Learn what the platform offers and where to start. * [Core Concepts](https://documentation.gravitee.io/apim/4.11/readme/core-concepts.md): The core concepts behind API Management 4.11, from architecture to component configuration. Learn how the pieces fit together. * [Enterprise Edition](https://documentation.gravitee.io/apim/4.11/readme/enterprise-edition.md): The Enterprise Edition of API Management 4.11 can include Event Management and AI Agent Management. Compare the global enterprise features. * [Enterprise Edition installation](https://documentation.gravitee.io/apim/4.11/readme/enterprise-edition/enterprise-edition-installation.md): Gravitee ships one bundle per product covering Community and Enterprise features. Follow the steps to install API Management 4.11 as Enterprise. * [Enterprise Edition licensing](https://documentation.gravitee.io/apim/4.11/readme/enterprise-edition/enterprise-edition-licensing.md): Request and apply an Enterprise Edition licence for API Management 4.11. Follow the steps to apply it by environment variable or by file. * [Integrations](https://documentation.gravitee.io/apim/4.11/readme/integrations.md): The major integrations API Management 4.11 offers with event brokers, observability tools, and service discovery. Compare what is supported. * [Community Forum](https://documentation.gravitee.io/apim/4.11/readme/community-forum.md): What to expect from the Gravitee community forum as an API Management 4.11 user. See how to ask a question others can find later. * [Contribute to APIM](https://documentation.gravitee.io/apim/4.11/readme/contribute-to-apim.md): Set up a local environment to contribute to API Management 4.11 development. Follow the steps to clone the project and prepare the UIs. * [API Fundamentals](https://documentation.gravitee.io/apim/4.11/readme/api-fundamentals.md): Key API terminology and concepts that make the API Management 4.11 platform easier to use. Learn the fundamentals before you start building. * [API Basics](https://documentation.gravitee.io/apim/4.11/readme/api-fundamentals/api-basics.md): An API is a set of publicly exposed specifications defining how to integrate with a service. Learn the basics before using API Management 4.11. * [Web APIs](https://documentation.gravitee.io/apim/4.11/readme/api-fundamentals/web-apis.md): How web APIs are structured, from protocols and transport to the shift to microservices. Learn what underpins API Management 4.11. * [Categorizing Web APIs](https://documentation.gravitee.io/apim/4.11/readme/api-fundamentals/categorizing-web-apis.md): Web APIs are synchronous or asynchronous, stateless or stateful. Compare the categories that shape how you design for API Management 4.11. * [Glossary](https://documentation.gravitee.io/apim/4.11/readme/glossary.md): The Gravitee glossary defines products, components, and terms in four sections, covering API Management 4.11 and Access Management. Find a term. * [Getting Started](https://documentation.gravitee.io/apim/4.11/getting-started.md): Start with API Management 4.11 on Gravitee Cloud, hybrid, or fully self-hosted. Compare the deployment options before you install. * [Fully self-hosted installation with Vanilla Kubernetes](https://documentation.gravitee.io/apim/4.11/getting-started/vanilla-kubernetes.md): Install a fully self-hosted API Management 4.11 platform on Kubernetes with Helm charts. Follow the steps and review the components first. * [Fully self-hosted installation with Docker](https://documentation.gravitee.io/apim/4.11/getting-started/local-install-with-docker.md): Install a fully self-hosted API Management 4.11 with Docker Compose. Follow the steps to download the compose file and verify the stack. * [Create & Publish Your First API](https://documentation.gravitee.io/apim/4.11/getting-started/create-and-publish-your-first-api.md): Create and publish your first API Management 4.11 API, step by step. Follow the articles in order from creation through to publication. * [Create an API](https://documentation.gravitee.io/apim/4.11/getting-started/create-and-publish-your-first-api/create-an-api.md): Create your first API with API Management 4.11, using the Console. Follow the steps to build it, test it, and move to the next stage. * [Add Security](https://documentation.gravitee.io/apim/4.11/getting-started/create-and-publish-your-first-api/add-security.md): Secure your first API Management 4.11 API with an API Key plan. Follow the steps to add the plan and check it is enforced. * [Add a Policy](https://documentation.gravitee.io/apim/4.11/getting-started/create-and-publish-your-first-api/add-a-policy.md): Add the Rate Limit policy to your first API Management 4.11 API. Follow the steps to apply it and verify the limit is enforced. * [Add API Documentation](https://documentation.gravitee.io/apim/4.11/getting-started/create-and-publish-your-first-api/add-api-documentation.md): Add documentation to your first API Management 4.11 API so consumers can read it. Follow the steps to attach and verify a page. * [Publish your API](https://documentation.gravitee.io/apim/4.11/getting-started/create-and-publish-your-first-api/publish-your-api.md): Publish your first API Management 4.11 API so consumers can find it. Follow the steps to publish it and verify it is live. * [Hybrid Installation & Configuration Guides](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides.md): A hybrid Gateway architecture mixes self-hosted and cloud API Management 4.11 components. Browse the guides for your deployment stack. * [Next-Gen Cloud](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides/next-gen-cloud.md): A Next-Gen Cloud hybrid API Management 4.11 deployment needs the Gateway and Redis as a minimum. Browse the installation guides. * [Docker](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides/next-gen-cloud/docker.md): Run a Next-Gen Cloud hybrid API Management 4.11 deployment in Docker. Browse the guides for the CLI and Compose approaches. * [Docker CLI](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides/next-gen-cloud/docker/docker-cli.md): Install the API Management 4.11 Data Plane with Docker CLI commands for a Next-Gen Cloud hybrid. Follow the steps to run it. * [Docker Compose](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides/next-gen-cloud/docker/docker-compose.md): Next-Gen Cloud supports hybrid API Management 4.11 deployments through Docker Compose. Follow the steps to configure the compose file. * [Kubernetes](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides/next-gen-cloud/kubernetes.md): Route hybrid API Management 4.11 Gateway traffic through a corporate proxy on Kubernetes. Browse the deployment guides you need. * [Vanilla Kubernetes](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides/next-gen-cloud/kubernetes/vanilla-kubernetes.md): Install a hybrid API Management 4.11 Gateway on Kubernetes and connect it to Next-Gen Cloud. Follow the steps to deploy it. * [AWS EKS](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides/next-gen-cloud/kubernetes/aws-eks.md): Install a hybrid API Management 4.11 Gateway on Amazon EKS and connect it to Gravitee Cloud. Follow the steps to deploy it. * [Azure AKS](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides/next-gen-cloud/kubernetes/azure-aks.md): Install a hybrid API Management 4.11 Gateway on Azure Kubernetes Service and connect it to Gravitee Cloud. Follow the steps to deploy. * [OpenShift](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides/next-gen-cloud/kubernetes/openshift.md): Install a hybrid API Management 4.11 Gateway on OpenShift and connect it to Gravitee Cloud. Follow the steps to deploy it. * [RPM](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides/next-gen-cloud/rpm.md): Install a hybrid API Management 4.11 Gateway from the RPM package. Follow the steps for the Linux distribution you are running. * [.ZIP](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides/next-gen-cloud/.zip.md): Install a Next-Gen Cloud hybrid API Management 4.11 deployment from the binary distribution. Follow the steps to set it up. * [Generate a New Cloud Token](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides/next-gen-cloud/generate-a-new-cloud-token.md): Revoking a cloud token breaks the link between Gravitee Cloud and your hybrid API Management 4.11 Gateway. Follow the steps to replace it. * [Delete a Hybrid Gateway](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides/next-gen-cloud/delete-a-hybrid-gateway.md): Delete a hybrid API Management 4.11 Gateway you no longer need to keep your environment controlled. Follow the steps to remove it. * [Link to a Hybrid Gateway](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides/next-gen-cloud/link-to-a-hybrid-gateway.md): Link a new cloud token to an existing hybrid API Management 4.11 Gateway. Follow the steps to restore the Cloud connection. * [Classic Cloud](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides/classic-cloud.md): The technology stacks and deployment methods for a Classic Cloud hybrid API Management 4.11 install. Compare the options available. * [Docker](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides/classic-cloud/docker.md): Run a Classic Cloud hybrid API Management 4.11 deployment in Docker. Browse the guides for the CLI and Compose approaches. * [Docker Compose](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides/classic-cloud/docker/docker-compose.md): A sample compose file that sets up a Classic Cloud hybrid API Management 4.11 configuration. Follow the steps to adapt it. * [Kubernetes](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides/classic-cloud/kubernetes.md): Deploy a Classic Cloud hybrid API Management 4.11 Gateway on Kubernetes. Browse the guides for the cloud provider you use. * [GCP GKE](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides/classic-cloud/kubernetes/gcp-gke.md): Install an API Management 4.11 Gateway on Kubernetes with GCP GKE. Follow the steps to complete a Classic Cloud hybrid deployment. * [.ZIP](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides/classic-cloud/.zip.md): Install a Classic Cloud hybrid API Management 4.11 deployment from the .zip distribution. Follow the steps after installing the platform. * [Cloud Certificate Renewal](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides/classic-cloud/cloud-certificate-renewal.md): Renew the certificate that keeps your self-hosted API Management 4.11 instance connected to Gravitee Cloud. Follow the steps to replace it. * [Proxy Configuration](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides/proxy-configuration.md): Hybrid API Management 4.11 components often reach Gravitee Cloud through a corporate proxy. Browse the proxy configuration guides. * [Hybrid Gateway Proxy Configuration](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides/proxy-configuration/hybrid-gateway-proxy-configuration.md): Configure a hybrid API Management 4.11 Gateway that connects to a remote Management API through a proxy. Follow the steps to set it up. * [System Proxy for Backend APIs](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides/proxy-configuration/system-proxy-for-backend-apis.md): Configure a system proxy so a hybrid API Management 4.11 Gateway can reach your backend APIs. Follow the steps to set it up. * [Configure Cloud Gateway Client](https://documentation.gravitee.io/apim/4.11/hybrid-installation-and-configuration-guides/proxy-configuration/configure-cloud-gateway-client.md): In a hybrid deployment the API Management 4.11 Gateway reaches Gravitee Cloud through a proxy. Follow the steps to configure the client. * [Self-Hosted Installation Guides](https://documentation.gravitee.io/apim/4.11/self-hosted-installation-guides.md): Self-hosted architecture means you host every API Management 4.11 component on your own infrastructure. Browse the installation guides. * [Docker](https://documentation.gravitee.io/apim/4.11/self-hosted-installation-guides/docker.md): The Docker installation architecture common to each API Management 4.11 install method. Compare the methods available to you. * [Docker Compose](https://documentation.gravitee.io/apim/4.11/self-hosted-installation-guides/docker/docker-compose.md): Install API Management 4.11 with Docker Compose, the quickest self-hosted route. Follow the steps and see what the deployment includes. * [Docker CLI](https://documentation.gravitee.io/apim/4.11/self-hosted-installation-guides/docker/docker-cli.md): Install API Management 4.11 with the Docker CLI, persisting data and plugins in your own directories. Follow the steps to set it up. * [Customize your Installation](https://documentation.gravitee.io/apim/4.11/self-hosted-installation-guides/docker/customize-your-installation.md): Customize an API Management 4.11 Docker Compose installation through the gateway environment section. Follow the steps to change it. * [Kubernetes](https://documentation.gravitee.io/apim/4.11/self-hosted-installation-guides/kubernetes.md): Install API Management 4.11 on Kubernetes with the Helm chart, which requires Kubernetes 1.14 or later. Browse the deployment guides. * [Vanilla Kubernetes](https://documentation.gravitee.io/apim/4.11/self-hosted-installation-guides/kubernetes/vanilla-kubernetes.md): Deploy a complete self-hosted API Management 4.11 platform on Kubernetes using Helm charts. Follow the steps to install the platform. * [AWS EKS](https://documentation.gravitee.io/apim/4.11/self-hosted-installation-guides/kubernetes/aws-eks.md): Deploy a complete self-hosted API Management 4.11 platform on Amazon Elastic Kubernetes Service. Follow the steps to install with Helm. * [Azure AKS](https://documentation.gravitee.io/apim/4.11/self-hosted-installation-guides/kubernetes/azure-aks.md): Deploy a complete self-hosted API Management 4.11 platform on Azure Kubernetes Service. Follow the steps to install with Helm. * [OpenShift](https://documentation.gravitee.io/apim/4.11/self-hosted-installation-guides/kubernetes/openshift.md): Install API Management 4.11 within OpenShift. Follow the steps to deploy the platform on an OpenShift cluster of your own. * [RPM](https://documentation.gravitee.io/apim/4.11/self-hosted-installation-guides/rpm.md): Install API Management 4.11 on RPM-based Linux such as Red Hat, CentOS, or Oracle. Follow the steps for your distribution. * [Troubleshooting](https://documentation.gravitee.io/apim/4.11/self-hosted-installation-guides/rpm/troubleshooting.md): An SELinux issue can stop Nginx opening ports 8084 and 8085 for API Management 4.11 on RPM installs. Follow the steps to correct it. * [.ZIP](https://documentation.gravitee.io/apim/4.11/self-hosted-installation-guides/.zip.md): Install API Management 4.11 from the .zip distribution. Follow the steps for a self-hosted deployment on your own machine. * [Multi-tenancy](https://documentation.gravitee.io/apim/4.11/self-hosted-installation-guides/multi-tenancy.md): Multi-tenancy in API Management 4.11 Enterprise lets one installation serve several tenants. Learn what the packages include. * [Proxy Configuration](https://documentation.gravitee.io/apim/4.11/self-hosted-installation-guides/proxy-configuration.md): API Management 4.11 components often need to reach the internet through a corporate proxy. Browse the proxy configuration guides. * [System Proxy for Backend APIs](https://documentation.gravitee.io/apim/4.11/self-hosted-installation-guides/proxy-configuration/system-proxy-for-backend-apis.md): Configure a system proxy so the API Management 4.11 Gateway can reach backend APIs. Follow the steps to set the proxy up. * [Upgrade Guides](https://documentation.gravitee.io/apim/4.11/upgrade-guides.md): Upgrade API Management 4.11 components in the right order. Browse the upgrade articles for the version you are moving to. * [Update the Connection to Cloud](https://documentation.gravitee.io/apim/4.11/upgrade-guides/update-the-connection-to-cloud.md): Multi-tenancy changed how an API Management 4.11 installation connects to Cloud. Learn what to update for connected Consoles and Portals. * [APIM 4.4.+ & Hybrid Gateways](https://documentation.gravitee.io/apim/4.11/upgrade-guides/apim-4.4.+-and-hybrid-gateways.md): From the 4.4 release, API Management 4.11 gateways must explicitly disable certificate checks. Learn what changed and what you must set. * [Upgrade with RPM](https://documentation.gravitee.io/apim/4.11/upgrade-guides/upgrade-with-rpm.md): Upgrade an API Management 4.11 installation that was installed with RPM packages. Follow the steps to back up your configuration first. * [MongoDB Index Management](https://documentation.gravitee.io/apim/4.11/upgrade-guides/mongodb-index-management.md): The MongoDB indexes that improve query performance on large API Management 4.11 datasets. Follow the steps to create them manually. * [APIM 4.9 Elasticsearch Index Template Changes](https://documentation.gravitee.io/apim/4.11/upgrade-guides/apim-4.9-elasticsearch-index-template-changes.md): New Elasticsearch index templates enable extra analytics for API Management 4.11 v2 and v4 APIs. Learn which templates are updated. * [Migrate v1 APIs to v2](https://documentation.gravitee.io/apim/4.11/upgrade-guides/migrate-v1-apis-to-v2.md): Migrate a v1 API to a v2 definition in place with API Management 4.11 tooling. Follow the steps in the Console or the Management API. * [How-To Guides](https://documentation.gravitee.io/apim/4.11/how-to-guides.md): Gravitee how-to guides for API Management 4.11, from your first API to advanced use cases. Browse the tutorials that match your goal. * [Use Case Tutorials](https://documentation.gravitee.io/apim/4.11/how-to-guides/use-case-tutorials.md): Detailed use case tutorials for the API Management 4.11 platform. Browse the articles that match the problem you are solving. * [Rate Limit REST APIs](https://documentation.gravitee.io/apim/4.11/how-to-guides/use-case-tutorials/rate-limit-rest-apis.md): Rate limiting protects API Management 4.11 REST APIs and keeps performance predictable. Follow the tutorial through the main use cases. * [Configure JWT Security](https://documentation.gravitee.io/apim/4.11/how-to-guides/use-case-tutorials/configure-jwt-security.md): Apply JSON Web Token security to your API Management 4.11 APIs. Follow the steps to configure the gateway APIs and the plan. * [Add RBAC to your JWT Plan](https://documentation.gravitee.io/apim/4.11/how-to-guides/use-case-tutorials/add-rbac-to-your-jwt-plan.md): The Role-based Access Control policy adds authorization on top of an API Management 4.11 JWT plan. Follow the steps to configure your IdP. * [Aggregating multiple responses](https://documentation.gravitee.io/apim/4.11/how-to-guides/use-case-tutorials/aggregating-multiple-responses.md): Initiate multiple backend calls from API Management 4.11 and aggregate them into a single response. Follow the steps to build the API. * [Configure DCR](https://documentation.gravitee.io/apim/4.11/how-to-guides/use-case-tutorials/configure-dcr.md): Configure Dynamic Client Registration between API Management 4.11 and Access Management. Follow the steps to set up both sides. * [Secure and Expose gRPC Services](https://documentation.gravitee.io/apim/4.11/how-to-guides/use-case-tutorials/secure-and-expose-grpc-services.md): Use API Management 4.11 as a central place to secure and manage your gRPC APIs. Follow the steps to run the samples with Docker. * [Expose SOAP Webservices as REST APIs](https://documentation.gravitee.io/apim/4.11/how-to-guides/use-case-tutorials/expose-soap-webservices-as-rest-apis.md): Transform a SOAP endpoint and expose it as a REST service with API Management 4.11. Follow the steps in the Gravitee policy studio. * [Create and Publish an API Using the Management API](https://documentation.gravitee.io/apim/4.11/how-to-guides/use-case-tutorials/create-and-publish-an-api-using-the-management-api.md): Create and publish an HTTP proxy API through the Management API in API Management 4.11. Follow the steps from access token to published API. * [Create Applications and Subscriptions Using the Management API](https://documentation.gravitee.io/apim/4.11/how-to-guides/use-case-tutorials/create-applications-and-subscriptions-using-the-management-api.md): Create applications and subscriptions with the Management API in API Management 4.11. Follow the steps to change an API's security first. * [Connect to an Endpoint Using SSE](https://documentation.gravitee.io/apim/4.11/how-to-guides/use-case-tutorials/connect-to-an-endpoint-using-sse.md): Establish a Server-Sent Events channel and consume messages through API Management 4.11. Follow the steps to identify and connect an endpoint. * [Implement BFF pattern (with a Shared Policy Group)](https://documentation.gravitee.io/apim/4.11/how-to-guides/use-case-tutorials/implement-bff-pattern-with-a-shared-policy-group.md): Implement the backend-for-frontend pattern for single-page apps with an API Management 4.11 shared policy group. Learn what it handles. * [Configure an MCP-Proxy with the OAuth plan and Entra ID](https://documentation.gravitee.io/apim/4.11/how-to-guides/use-case-tutorials/secure-a-mcp-proxy-with-entra-id-oauth.md): Secure an MCP Proxy in API Management 4.11 with an OAuth2 plan and Microsoft Entra ID. Learn the key configuration points to get right. * [Monitor APIM with Prometheus and Grafana using Docker Compose](https://documentation.gravitee.io/apim/4.11/how-to-guides/use-case-tutorials/monitor-apim-with-prometheus-and-grafana.md): Deploy a Prometheus and Grafana monitoring stack for API Management 4.11 with Docker Compose. Follow the steps to enable the metrics service. * [Configure & Manage the Platform](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform.md): Configuring and managing the API Management 4.11 platform, split into three sections. Browse the area you need to change. * [Gravitee Gateway](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/gravitee-gateway.md): Configure the general settings of your API Management 4.11 Gateway. Browse the guides covering each part of the configuration. * [Proxy](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/gravitee-gateway/proxy.md): Define specific proxies for specific use cases in API Management 4.11. Learn where proxy configurations can be applied to it. * [Services](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/gravitee-gateway/services.md): Update the default values for API Management 4.11 Gateway services, which are all enabled by default. Follow the steps to change them. * [Dictionaries](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/gravitee-gateway/dictionaries.md): Dictionaries let platform administrators manage values across API Management 4.11 APIs, beyond per-API properties. Learn how they work. * [Alerts](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/gravitee-gateway/alerts.md): Set alerting conditions for the API Management 4.11 Gateway from the platform settings. Follow the steps to configure them. * [Notifications](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/gravitee-gateway/notifications.md): Set up alerts and notifications based on events the API Management 4.11 Gateway recognizes. Learn what you can be notified about. * [Gateway Internal API](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/gravitee-gateway/gateway-internal-api.md): The API Management 4.11 Gateway exposes an internal API for monitoring the component. Follow the steps to configure and secure it. * [Sharding Tags](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/gravitee-gateway/sharding-tags.md): Sharding tags tag API Management 4.11 Gateways so specific APIs deploy to a particular gateway. Learn how the tags work in practice. * [Tenants](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/gravitee-gateway/tenants.md): Tenants let an API Management 4.11 API select a backend endpoint per deployment. Learn how the multi-endpoint capability works. * [Header IDs](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/gravitee-gateway/header-ids.md): The API Management 4.11 Gateway generates an id for every request and sets it in a header. Learn how to change the header names. * [Gateway Cluster sync with Redis](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/gravitee-gateway/gateway-cluster-sync-with-redis.md): Enable and configure Gateway Cluster sync with Redis in API Management 4.11. Follow the steps to set the synchronization up. * [Gateway Cluster sync with Redis using Docker](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/gravitee-gateway/gateway-cluster-sync-with-redis/gateway-cluster-sync-with-redis-using-docker.md): Gateway Cluster sync uses Redis to synchronize API Management 4.11 state across gateways. Follow the steps to configure it with Docker. * [Gateway Cluster sync with Redis using Kubernetes (Helm)](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/gravitee-gateway/gateway-cluster-sync-with-redis/gateway-cluster-sync-with-redis-using-kubernetes-helm.md): Gateway Cluster sync uses Redis to synchronize API Management 4.11 state across gateways. Follow the steps to configure it with Helm. * [Gateway Configuration for mTLS Certificate Management](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/gravitee-gateway/gateway-configuration-for-mtls-certificate-management.md): The API Management 4.11 Gateway validates uploaded X.509 certificates before storing them. Learn the configuration for mTLS management. * [Request Path Handling](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/gravitee-gateway/request-path-handling.md): The path handling setting is available from certain API Management 4.11 patch releases. Learn what it does and when you can use it. * [Management API](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/management-api.md): Configure general API Management 4.11 Management API settings in the gravitee.yaml file. Browse the configuration guides you need. * [MAPI Internal API](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/management-api/mapi-internal-api.md): The API Management 4.11 Management API exposes its own internal API for monitoring. Follow the steps to configure and secure it. * [mTLS certificate management API reference](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/management-api/mtls-certificate-management-api-reference.md): The REST endpoints that manage application client certificates for mTLS in API Management 4.11. Browse the full reference. * [Settings](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/management-api/settings.md): Configure management settings from the Settings page of the API Management 4.11 Console. Learn what each setting controls. * [Cleanup Services](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/management-api/cleanup-services.md): API Management 4.11 stores event and audit data that grows over time. Learn how the cleanup services trim those collections. * [Manage Organizations & Environments](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/manage-organizations-and-environments.md): An organization is a logical part of a company sharing settings in API Management 4.11, containing environments. Learn the model. * [Authentication](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/manage-organizations-and-environments/authentication.md): API Management 4.11 natively supports several authentication types for the Console. Compare the options before you configure one. * [Gravitee Access Management](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/manage-organizations-and-environments/authentication/gravitee-access-management.md): Gravitee offers Access Management alongside API Management 4.11 for full identity handling. Learn how the two products relate. * [Authentication Providers](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/manage-organizations-and-environments/authentication/authentication-providers.md): Configure in-memory users, LDAP, or Active Directory authentication for API Management 4.11. Follow the steps for your provider. * [Social Providers](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/manage-organizations-and-environments/authentication/social-providers.md): Let users sign in to API Management 4.11 with a GitHub OAuth application or another social provider. Follow the steps to configure it. * [OpenID Connect](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/manage-organizations-and-environments/authentication/openid-connect.md): OpenID Connect is an authentication protocol built on OAuth 2.0, supported by API Management 4.11. Follow the steps to configure it. * [Microsoft Entra ID](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/manage-organizations-and-environments/authentication/microsoft-entra-id.md): Set up API Management 4.11 Console authentication with Microsoft Entra ID. Follow the steps to configure the identity provider. * [Roles and Groups Mapping](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/manage-organizations-and-environments/authentication/roles-and-groups-mapping.md): Assign roles to API Management 4.11 users through groups rather than individually. Learn how group and role mapping works. * [User Management](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/manage-organizations-and-environments/user-management.md): Set up and manage roles, scopes, permissions and users in API Management 4.11. Follow the steps to configure your organization. * [Create a service account](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/manage-organizations-and-environments/create-a-service-account.md): A service account is a non-human API Management 4.11 user for automated tools and integrations. Follow the steps to create one. * [Applications](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/manage-organizations-and-environments/applications.md): An application represents a consumer of your API Management 4.11 APIs and holds its subscriptions. Learn how applications work. * [APIM Console](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/manage-organizations-and-environments/apim-console.md): The API Management 4.11 Console is the graphical interface for configuring gateways and creating APIs. Learn what it lets you do. * [Developer Portal](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/manage-organizations-and-environments/developer-portal.md): The Developer Portal gives API consumers a simplified interface onto your API Management 4.11 APIs. Learn how to configure it. * [SMTP Configuration](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/manage-organizations-and-environments/smtp-configuration.md): The SMTP configuration API Management 4.11 uses for sending email notifications. Follow the steps to point it at your mail server. * [CORS Configuration](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/manage-organizations-and-environments/cors-configuration.md): CORS lets a web page request resources from another domain in API Management 4.11. Follow the steps to configure it for your organization. * [Configuring Portal and Console deployments](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/manage-organizations-and-environments/configuring-portal-and-console-deployments.md): API Management 4.11 has four components that communicate with each other. Learn how to configure the Portal and Console deployments. * [Support](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/manage-organizations-and-environments/support.md): Gravitee encourages you to engage your team first if your API Management 4.11 installation has issues. Learn what support covers. * [Debug logging](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/debug-logging.md): API Management 4.11 supports standard Java logging per component, plus debug logging for specific areas. Learn how to enable it. * [Context-aware logging](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/logging-infrastructure.md): The API Management 4.11 Gateway and Management API enrich log entries with request metadata. Learn what context-aware logging adds. * [Node logging configuration](https://documentation.gravitee.io/apim/4.11/configure-and-manage-the-platform/node-logging-configuration.md): Configure MDC filtering, log patterns, and Logback overrides for the API Management 4.11 Gateway. Follow the steps to set them. * [Create & Configure APIs](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis.md): Creating and configuring API Management 4.11 APIs, split into five sections from definitions to v2 and v4 configuration. Browse what you need. * [Gravitee API Definitions](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/gravitee-api-definitions.md): Gravitee v2 and v4 API definitions describe the Gateway APIs consumers call in API Management 4.11. Compare the two definitions. * [Entrypoint Connect phase overview](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/gravitee-api-definitions/native-api-phases.md): Connectors declare which phases they support on a native API Management 4.11 API. Compare the supported connector modes. * [A2A Proxy API Type Overview](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/gravitee-api-definitions/a2a-proxy-api-type.md): The A2A Proxy is a v4 API type enabling agent-to-agent communication through API Management 4.11. Learn its reactor architecture. * [v2 and v4 API Comparison](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/gravitee-api-definitions/v2-and-v4-api-comparison.md): v2 and v4 API Management 4.11 APIs differ in functionality and supported features. Compare them before you choose a definition. * [Execution Engine](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/gravitee-api-definitions/execution-engine.md): The execution engine is the Gateway runtime that executes API Management 4.11 APIs and policy flows. Learn its improvements and policy support. * [Create APIs](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/create-apis.md): Create or import v2 and v4 APIs in API Management 4.11. Browse the articles covering each creation and import path available. * [v4 API Creation Wizard](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/create-apis/v4-api-creation-wizard.md): Create a v4 API with the API Management 4.11 creation wizard, from API details through to entrypoints. Follow the steps in order. * [v2 API Creation Wizard](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/create-apis/v2-api-creation-wizard.md): The v2 API definition is a JSON representation of your Gateway API. Follow the API Management 4.11 creation wizard step by step. * [Import APIs](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/create-apis/import-apis.md): Import an API into API Management 4.11 as a Gravitee definition or an OpenAPI specification. Follow the steps to import an OpenAPI spec. * [Migrate APIs](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/create-apis/migrate-apis.md): Migrate existing v2 APIs to v4 with the API Management 4.11 Migration feature. Follow the prerequisites and steps to migrate them. * [Search for APIs in the Console](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/create-apis/search-for-apis-in-the-console.md): Filter the list of APIs that appear in the API Management 4.11 Console. Follow the steps to search, and see the worked search examples. * [Promote APIs](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/create-apis/promote-apis.md): Promote an API Management 4.11 API from one environment to another. Follow the steps to request and then approve a promotion. * [Configure v4 APIs](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis.md): The articles covering how to configure a v4 API in API Management 4.11, from endpoints to response templates. Browse what you need. * [General Settings](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis/general-settings.md): Every v4 API in API Management 4.11 has general settings on its Configuration page. Learn what you can view and change there. * [API Lifecycle States](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis/api-lifecycle-states.md): A v4 API lifecycle state controls its visibility on the API Management 4.11 Developer Portal. Learn the allowed transitions and retirement flow. * [Entrypoints](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis/entrypoints.md): Entrypoints define how consumers reach a v4 API Management 4.11 API, for proxy or message APIs. Compare the entrypoint types. * [HTTP GET](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis/entrypoints/http-get.md): Configure the HTTP GET entrypoint parameters for a v4 API Management 4.11 API. Follow the steps to set them for your own API. * [HTTP POST](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis/entrypoints/http-post.md): Configure the HTTP POST entrypoint parameters for a v4 API Management 4.11 API. Follow the steps to set them for your own API. * [Server-Sent Events](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis/entrypoints/server-sent-events.md): Configure the Server-Sent Events entrypoint for a v4 API Management 4.11 API, including quality of service. Follow the steps to set it. * [Webhook](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis/entrypoints/webhook.md): Declare the webhook identifier to use the Webhook entrypoint on a v4 API Management 4.11 API. Follow the steps to configure it. * [WebSocket](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis/entrypoints/websocket.md): Configure the WebSocket entrypoint parameters for a v4 API Management 4.11 API. Follow the steps to set them for your API. * [Endpoints](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis/endpoints.md): Endpoints connect a v4 API Management 4.11 API to its backend, for proxy or message APIs. Compare the endpoint types available. * [Azure Service Bus](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis/endpoints/azure-service-bus.md): Configure the Azure Service Bus endpoint for a v4 message API in API Management 4.11. Follow the steps through the initial settings. * [JMS](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis/endpoints/jms.md): Configure the JMS endpoint for a v4 message API in API Management 4.11. Learn the configuration it needs and how it is implemented. * [Kafka](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis/endpoints/kafka.md): The Kafka endpoint mediates between a Kafka cluster and an HTTP client in API Management 4.11. Follow the steps to set the bootstrap servers. * [Mock](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis/endpoints/mock.md): The Mock endpoint emulates a backend HTTP server so you can test an API Management 4.11 v4 API. Follow the steps to configure it. * [MQTT5](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis/endpoints/mqtt5.md): Configure the MQTT5 endpoint for a v4 message API in API Management 4.11. Learn the server information it needs and how it works. * [Solace](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis/endpoints/solace.md): Configure the Solace endpoint for a v4 message API in API Management 4.11. Learn the configuration it needs and how it is implemented. * [RabbitMQ](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis/endpoints/rabbitmq.md): Configure the RabbitMQ endpoint for a v4 message API in API Management 4.11. Follow the steps through the initial settings. * [User Permissions](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis/user-permissions.md): Configure user and group access to your API Management 4.11 APIs. Follow the steps to add members and set their permissions. * [Quality of Service](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis/quality-of-service.md): Quality of Service sets the delivery guarantee for an asynchronous API Management 4.11 API. Compare the QoS levels and their compatibility. * [Response Templates](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis/response-templates.md): Change the default values in an API Management 4.11 response with a response template. Learn the default payload and create your own. * [CORS](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis/cors.md): CORS lets a web page request resources from another domain through your API Management 4.11 v4 API. Follow the steps to configure it. * [Health-checks](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis/health-checks.md): Health checks monitor the availability of endpoints behind a v4 HTTP proxy API in API Management 4.11. Follow the steps to configure them. * [Documentation](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis/documentation.md): Add documentation to a v4 API from the API Management 4.11 Console so consumers know how to use it. Follow the steps to add pages and folders. * [Audit Logs](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis/audit-logs.md): View and filter the audit logs and events recorded for a v4 API in API Management 4.11. Follow the steps to access and filter them. * [Version History](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis/version-history.md): Version History shows a v4 API's deployment history and the JSON definition of each version in API Management 4.11. Follow the steps to view it. * [Load balancing and failover](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v4-apis/load-balancing-and-failover.md): The API Management 4.11 Gateway spreads requests across an endpoint group using a load balancing algorithm. Compare the four algorithms. * [Configure v2 APIs](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v2-apis.md): The articles covering how to configure a v2 API in API Management 4.11, from proxy settings through to access. Browse what you need. * [General Settings](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v2-apis/general-settings.md): The general settings for a v2 API Management 4.11 API, grouped into three sections. Follow the steps to access and edit them. * [Proxy Settings](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v2-apis/proxy-settings.md): Configure the proxy settings of a v2 API Management 4.11 API, covering entrypoints and CORS. Follow the steps to change them. * [Load-balancing, Failover, & Health-checks](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v2-apis/load-balancing-failover-and-health-checks.md): API Management 4.11 provides load balancing, failover, and health checks for v2 API backends. Compare the three backend services. * [Service Discovery](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v2-apis/service-discovery.md): Bind the backend endpoints of an API Management 4.11 API to a HashiCorp Consul service. Follow the steps to configure discovery. * [User and Group Access](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v2-apis/user-and-group-access.md): Configure user and group access to your v2 API Management 4.11 APIs. Follow the steps to add members and set their permissions. * [Documentation](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/configure-v2-apis/documentation.md): Create, import, and add metadata to v2 API documentation from the API Management 4.11 Console. Follow the steps to publish it. * [Apply Policies](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies.md): Policies are customizable rules the API Management 4.11 Gateway runs during an API transaction. Compare policy support across v2 and v4 APIs. * [v4 API Policy Studio](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/v4-api-policy-studio.md): The v4 Policy Studio designs flows for APIs using the v4 API Management 4.11 definition. Follow the example to create a flow and add a policy. * [v2 API Policy Studio](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/v2-api-policy-studio.md): The v2 Policy Studio designs flows for APIs using the v2 API Management 4.11 definition. Follow the steps to design and configure flow mode. * [Debug Mode](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/debug-mode.md): Debug mode diagnoses v2 and v4 proxy API flows in API Management 4.11. Learn how to read the debug timeline and the inspector. * [Shared Policy Groups](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/shared-policy-groups.md): Define a collection of API Management 4.11 policies centrally and reuse them across APIs. Follow the steps to create and add a group. * [Resources](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/resources.md): Resources supply reusable configuration to API Management 4.11 policies. Compare the resource types and follow the steps to create one. * [Custom Policies](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/custom-policies.md): Policies act as a proxy controller in the API Management 4.11 Gateway. Follow the steps to generate a policy skeleton and apply your own. * [Policy Reference](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference.md): Every policy you can apply to a Gravitee API in API Management 4.11, linked to its own reference page. Find the policy you need. * [AI - Model Text Classification - Model and Performance Metrics](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/ai-model-text-classification-model-reference-and-performance-metrics.md): The toxicity and prompt injection models available to API Management 4.11 text classification, with their performance metrics. Compare the models. * [AI - Semantic Caching](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/ai-semantic-caching.md): AI Semantic Caching cuts token use and latency in API Management 4.11 by caching on meaning rather than exact text. Learn how it works. * [Kafka Governance Rules Policies](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/kafka-governance-rules-policies.md): Kafka governance rules policies enforce compliance standards on Kafka requests through the API Management 4.11 Gateway. Learn what they check. * [Kafka Message Encryption & Decryption](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/kafka-message-encryption-decryption-policy-reference.md): The Kafka Message Encryption and Decryption policy secures payloads with AES-GCM in API Management 4.11. Learn how to configure it. * [Native IP filtering](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/native-ip-filtering.md): The Native IP Filtering policy controls client access to native Kafka APIs in API Management 4.11 by IP address. Learn how to set it. * [AI - MCP ACL](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/ai-mcp-acl.md): The MCP ACL policy controls access to MCP server functionality in API Management 4.11 with an access control list. Learn how to configure it. * [AI - Prompt Guard Rails](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/ai-prompt-guard-rails.md): The Prompt Guard Rails policy evaluates prompts for inappropriate or malicious content in API Management 4.11. Learn what it detects. * [AI - Prompt Token Tracking](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/ai-prompt-token-tracking.md): The Prompt Token Tracking policy counts tokens sent to and received from an AI API in API Management 4.11. Learn how to configure it. * [AI - Token Rate Limit](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/ai-token-rate-limit.md): The Token Rate Limit policy caps inbound and outbound tokens over a period in API Management 4.11. Learn how to configure the limits. * [API Key](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/api-key.md): The API Key policy checks API keys during request processing so only approved apps reach your API Management 4.11 API. Learn how to set it. * [Assign Attributes](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/assign-attributes.md): The Assign Attributes policy sets request and execution context attributes in API Management 4.11. Learn how to configure the variables. * [Assign Content](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/assign-content.md): The Assign Content policy changes or transforms request and response bodies in API Management 4.11. Learn how to configure the transformation. * [Assign Metrics](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/assign-metrics.md): The Assign Metrics policy pushes extra metrics alongside the native request metrics in API Management 4.11. Learn how to configure it. * [Avro to JSON](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/avro-to-json.md): The Avro to JSON policy transforms request, response, and message content in API Management 4.11, including native Kafka APIs. Learn how. * [Avro to Protobuf](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/avro-to-protobuf.md): The Avro to Protobuf policy applies a transformation to request, response, or message content in API Management 4.11. Learn how to set it. * [AWS Lambda](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/aws-lambda.md): The AWS Lambda policy invokes a Lambda function during API Management 4.11 proxy or message requests. Learn how the response is returned. * [Basic Authentication](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/basic-authentication.md): The Basic Authentication policy manages basic auth headers on API Management 4.11 calls and compares credentials. Learn how to configure it. * [Cache](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/cache.md): The Cache policy stores upstream responses in API Management 4.11 so repeat calls skip the backend. Learn how to configure the cache. * [Circuit Breaker](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/circuit-breaker.md): The Circuit Breaker policy switches backend or fails with 503 on errors or latency in API Management 4.11. Learn the guarantees it gives. * [CloudEvents](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/cloudevents.md): The CloudEvents policy builds a CloudEvents JSON object from messages in API Management 4.11. Learn how the data content type is set. * [Custom Query Parameters Parser](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/custom-query-parameters-parser.md): The Custom Query Parameters Parser policy controls how API Management 4.11 reads query parameters. Learn what you can configure with it. * [Data Cache](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/data-cache.md): The Data Cache policy gets, sets, and expires key-value pairs in an API Management 4.11 cache resource. Learn how to configure it. * [Data Logging Masking](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/data-logging-masking.md): The Data Logging Masking policy conceals sensitive data in API Management 4.11 logs using JSONPath rules. Learn how to configure it. * [Dynamic Routing](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/dynamic-routing.md): The Dynamic Routing policy dispatches calls to different targets or rewrites URIs in API Management 4.11. Learn how to configure it. * [Generate HTTP Signature](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/generate-http-signature.md): The Generate HTTP Signature policy adds HTTP Signature authentication to API Management 4.11 calls. Learn how to configure the signature. * [Generate JWT](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/generate-jwt.md): The Generate JWT policy issues a signed JWT with configurable claims for API Management 4.11 to forward to a backend. Learn how to set it. * [GeoIP Filtering](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/geoip-filtering.md): The GeoIP Filtering policy controls access to an API Management 4.11 API by IP address, country, or distance. Learn how to configure it. * [GraphQL Rate Limit](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/graphql-rate-limit.md): The GraphQL Rate Limit policy applies basic rate limiting to GraphQL queries in API Management 4.11. Learn how to configure the limits. * [Groovy](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/groovy.md): Run a Groovy script at any stage of request processing through the API Management 4.11 Gateway. Learn how to configure the policy. * [HTML to JSON](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/html-to-json.md): The HTML to JSON transformation policy converts response content in API Management 4.11. Learn how to configure the mapping it applies. * [HTTP Callout](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/http-callout.md): The HTTP Callout policy invokes an external URL and stores the response in API Management 4.11 variables. Learn how to configure it. * [HTTP Redirect](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/http-redirect.md): The HTTP Redirect policy sends RFC 7231 redirect responses to clients from API Management 4.11. Learn how to configure the redirect. * [HTTP Signature](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/http-signature.md): The HTTP Signature policy enforces signature-based authentication on API Management 4.11 calls. Learn how to configure the signature. * [InterOPS](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/interops.md): InterOPS support in API Management 4.11, with the phase order for proxy and for native APIs. Learn where the policy runs in each. * [Interrupt](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/interrupt.md): The Interrupt policy breaks request processing in API Management 4.11 when a condition is met. Learn how to configure the condition. * [IP Filtering](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/ip-filtering.md): The IP Filtering policy allows or denies specific IP addresses on an API Management 4.11 API. Learn how to configure the filters. * [JavaScript](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/javascript.md): The JavaScript policy runs scripts at any stage of API Management 4.11 Gateway processing. Learn how to configure the policy. * [JavaScript Policy (New)](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/javascript-policy-new-reference.md): The JavaScript Policy (New) runs custom scripts during API Management 4.11 request or response processing. Learn what it supports. * [JSON to JSON](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/json-to-json.md): The JSON to JSON policy applies a transformation to request, response, or message content in API Management 4.11. Learn how to set it. * [JSON to XML](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/json-to-xml.md): The JSON to XML policy converts JSON payloads to XML before API Management 4.11 sends or returns them. Learn how to configure it. * [JSON Threat Protection](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/json-threat-protection.md): The JSON Threat Protection policy validates a request body against structural limits in API Management 4.11. Learn how to set the limits. * [JSON Validation](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/json-validation.md): The JSON Validation policy validates payloads against a JSON schema in API Management 4.11. Learn how to configure the schema it uses. * [JWS Validator](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/jws-validator.md): The JWS Validator policy checks token signature, certificate, and expiry before API Management 4.11 calls the backend. Learn how to set it. * [JWT Validator](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/jwt-validator.md): The JWT Validator policy checks a token's signature and expiration before API Management 4.11 forwards the call. Learn how to configure it. * [Kafka ACL](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/kafka-acl.md): The Kafka ACL policy defines access control lists on cluster resources proxied by API Management 4.11. Learn how to configure them. * [Kafka Message Filtering](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/kafka-message-filtering.md): The Kafka Message Filtering policy controls which Kafka messages reach consumers through API Management 4.11. Learn how to configure it. * [Kafka Offloading](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/kafka-offloading.md): The Kafka Offloading policy controls how message content is offloaded to storage in API Management 4.11. Learn how to configure it. * [Kafka Quota](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/kafka-quota.md): The Kafka Quota policy enforces limits on the data Kafka clients exchange through API Management 4.11. Learn how to configure quotas. * [Kafka Topic Mapping](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/kafka-topic-mapping.md): The Kafka Topic Mapping policy maps one topic name to another so clients can use their own in API Management 4.11. Learn how to set it. * [Kafka Transform Key](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/kafka-transform-key.md): The Kafka Transform Key policy adds a custom message key in API Management 4.11 so you can control partitioning. Learn how to set it. * [Keyless](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/keyless.md): The Keyless security policy treats every request to an API Management 4.11 API as valid and blocks none. Learn when to use it. * [Latency](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/latency.md): The Latency policy adds artificial delay to a request or a response in API Management 4.11. Learn how to configure the delay. * [Maven Archetype](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/maven-archetype.md): A policy is a step in the API Management 4.11 request and response proxy chain. Learn how to generate one with the Maven archetype. * [Message Filtering](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/message-filtering.md): The Message Filtering policy lets a publisher control which messages are streamed to subscribers in API Management 4.11. Learn how to set it. * [Metrics Reporter](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/metrics-reporter.md): The Metrics Reporter policy pushes request metrics to a custom endpoint from API Management 4.11. Learn how to configure the reporter. * [Mock](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/mock.md): The Mock policy returns mock responses from API Management 4.11 so you can test without a backend. Learn how to configure the mock. * [mTLS](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/mtls.md): The mTLS policy verifies that a client certificate is present on an API Management 4.11 request. Learn how to configure the policy. * [OAS Validation](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/oas-validation.md): The OAS Validation policy checks requests and responses against an embedded OpenAPI specification in API Management 4.11. Learn how. * [OAuth2](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/oauth2.md): The OAuth2 policy checks access token validity through introspection in API Management 4.11. Learn how to configure the policy. * [Generic OAuth2 Authorization Server](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/oauth2/generic-oauth2-authorization-server.md): The Generic OAuth2 Authorization Server resource introspects an access token for API Management 4.11. Learn how to configure it. * [Gravitee.io AM Authorization Server](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/oauth2/gravitee.io-am-authorization-server.md): The Access Management authorization server resource introspects a token issued by Gravitee for API Management 4.11. Learn how to set it. * [OpenID Connect UserInfo](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/openid-connect-userinfo.md): The OpenID Connect UserInfo policy fetches user information from an OAuth2 resource in API Management 4.11. Learn how to configure it. * [Override HTTP Method](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/override-http-method.md): The Override HTTP Method policy replaces the method sent by the consumer in API Management 4.11. Learn how to configure the override. * [PII Filtering](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/pii-filtering.md): The PII Filtering policy detects and redacts personally identifiable information in API Management 4.11 using token classification. Learn how. * [Protobuf to JSON](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/protobuf-to-json.md): The Protobuf to JSON policy applies a transformation to request, response, or message content in API Management 4.11. Learn how to set it. * [Rate Limit](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/rate-limit.md): API Management 4.11 offers three rate limit policies for capping request volume. Compare them and learn how to configure each one. * [Regex Threat Protection](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/regex-threat-protection.md): The Regex Threat Protection policy inspects request headers, path, parameters, and body in API Management 4.11. Learn how to configure it. * [Request Content Limit](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/request-content-limit.md): The Request Content Limit policy caps the request content length API Management 4.11 accepts. Learn how to configure the maximum. * [Request Validation](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/request-validation.md): The Request Validation policy validates incoming HTTP requests against rules in API Management 4.11. Learn how to define the rules. * [Resource Filtering](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/resource-filtering.md): The Resource Filtering policy restricts or allows access to specific REST resources in API Management 4.11. Learn how to configure it. * [REST to SOAP](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/rest-to-soap.md): The REST to SOAP policy exposes a SOAP backend as a REST API through API Management 4.11. Learn how the SOAP envelope is passed on. * [Retry](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/retry.md): The Retry policy replays requests in API Management 4.11 when the backend fails or a condition matches. Learn how to configure it. * [Role-based Access Control (RBAC)](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/role-based-access-control-rbac.md): The Role-based Access Control policy restricts a resource to the roles you specify in API Management 4.11. Learn how to configure it. * [SSL Enforcement](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/ssl-enforcement.md): The SSL Enforcement policy restricts access to requests meeting your SSL criteria in API Management 4.11. Learn how to configure it. * [Status Code Transformation](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/status-code-transformation.md): The Status Code Transformation policy rewrites the upstream response status code in API Management 4.11. Learn how to configure it. * [Template](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/template.md): A policy template to fork as a quick starter for your own API Management 4.11 policy. Learn what the skeleton gives you to build on. * [Traffic Shadowing](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/traffic-shadowing.md): The Traffic Shadowing policy asynchronously copies API Management 4.11 traffic to another service. Learn how to configure the copy. * [Transform Headers](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/transform-headers.md): The Transform Headers policy overrides headers on incoming or outgoing API Management 4.11 traffic. Learn how to configure it. * [Transform Query Parameters](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/transform-query-parameters.md): The Transform Query Parameters policy overrides incoming query parameters in API Management 4.11. Learn how to configure the override. * [URL Rewriting](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/url-rewriting.md): The URL Rewriting policy rewrites URLs in an API Management 4.11 response header or response body. Learn how to configure it. * [WS Security Authentication](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/ws-security-authentication.md): The WS Security Authentication policy secures SOAP API calls in API Management 4.11 by comparing credentials. Learn how to configure it. * [WS Security Sign](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/ws-security-sign.md): The WS Security Sign policy signs SOAP messages in API Management 4.11 to guarantee integrity. Learn how to configure the signature. * [XML to JSON](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/xml-to-json.md): The XML to JSON policy transforms XML content into JSON content in API Management 4.11. Learn how to configure the transformation. * [XML Threat Protection](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/xml-threat-protection.md): The XML Threat Protection policy validates an XML request body against structural limits in API Management 4.11. Learn how to set them. * [XML Validation](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/xml-validation.md): The XML Validation policy validates XML against an XSD schema in API Management 4.11, rejecting bad requests. Learn how to configure it. * [XSLT](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/xslt.md): The XSLT policy applies an XSL transformation to an XML request or response body in API Management 4.11. Learn how to configure it. * [Webhook Signature Generator](https://documentation.gravitee.io/apim/4.11/create-and-configure-apis/apply-policies/policy-reference/webhook-signature-generator.md): The Webhook Signature Generator policy computes an HMAC signature over the response body in API Management 4.11. Learn how to set it. * [Secure & Expose APIs](https://documentation.gravitee.io/apim/4.11/secure-and-expose-apis.md): Plans, applications, and subscriptions govern how an API Management 4.11 API is exposed to consumers. Learn how the three fit together. * [Plans](https://documentation.gravitee.io/apim/4.11/secure-and-expose-apis/plans.md): A plan is the service and access layer an API Management 4.11 API needs before you expose it. Compare the plan types available. * [Keyless](https://documentation.gravitee.io/apim/4.11/secure-and-expose-apis/plans/keyless.md): A keyless plan allows public access to an API Management 4.11 API with no authentication. Learn what it offers and when to use it. * [API Key](https://documentation.gravitee.io/apim/4.11/secure-and-expose-apis/plans/api-key.md): The API Key plan verifies keys during request processing so only approved applications reach your API Management 4.11 API. Learn how. * [OAuth2](https://documentation.gravitee.io/apim/4.11/secure-and-expose-apis/plans/oauth2.md): An OAuth 2.0 plan gives client applications secure, delegated access to an API Management 4.11 API. Learn how the standard works. * [JWT](https://documentation.gravitee.io/apim/4.11/secure-and-expose-apis/plans/jwt.md): A JWT plan secures an API Management 4.11 API with signed claims passed between two parties. Learn how the token is validated. * [Push](https://documentation.gravitee.io/apim/4.11/secure-and-expose-apis/plans/push.md): A Push plan suits an API Management 4.11 API with an entrypoint that sends message payloads, such as Webhook. Learn when to use it. * [mTLS](https://documentation.gravitee.io/apim/4.11/secure-and-expose-apis/plans/mtls.md): An mTLS plan requires a client certificate when connecting to an API Management 4.11 API. Learn how the certificate is used. * [Applications](https://documentation.gravitee.io/apim/4.11/secure-and-expose-apis/applications.md): Consumers register an application and subscribe to a published plan to reach API Management 4.11 APIs. Learn what applications do. * [Create an Application](https://documentation.gravitee.io/apim/4.11/secure-and-expose-apis/applications/create-an-application.md): Create an application in the API Management 4.11 Console so a consumer can subscribe to a plan. Follow the steps to set one up. * [Global Settings](https://documentation.gravitee.io/apim/4.11/secure-and-expose-apis/applications/global-settings.md): An application's global settings hold its details and a danger zone for destructive actions in API Management 4.11. Learn what each does. * [mTLS certificate management for applications](https://documentation.gravitee.io/apim/4.11/secure-and-expose-apis/applications/mtls-certificate-management-for-applications-overview-and-concepts.md): Upload, rotate, and retire client certificates for mutual TLS on an API Management 4.11 application. Learn how certificate management works. * [User and Group Access](https://documentation.gravitee.io/apim/4.11/secure-and-expose-apis/applications/user-and-group-access.md): Manage user and group access to an individual API Management 4.11 application. Follow the steps to add and remove members. * [Subscriptions](https://documentation.gravitee.io/apim/4.11/secure-and-expose-apis/subscriptions.md): A subscription is how an API Management 4.11 publisher controls who uses their API and on what terms. Learn how subscriptions work. * [Creating and managing subscription forms](https://documentation.gravitee.io/apim/4.11/secure-and-expose-apis/subscriptions/creating-and-managing-subscription-forms.md): Create and manage the subscription form consumers complete in API Management 4.11. Follow the steps in the Management Console. * [Subscription form feature overview](https://documentation.gravitee.io/apim/4.11/secure-and-expose-apis/subscriptions/subscription-form-feature-overview.md): The subscription form lets an API Management 4.11 publisher collect details when a consumer subscribes. Learn what the feature offers. * [Subscription Requests](https://documentation.gravitee.io/apim/4.11/secure-and-expose-apis/subscriptions/subscription-requests.md): A subscription is a contract between an API Management 4.11 publisher and a consumer. Learn how requests are made and approved. * [Manage Subscriptions](https://documentation.gravitee.io/apim/4.11/secure-and-expose-apis/subscriptions/manage-subscriptions.md): Find and manage an application's subscriptions from the API Management 4.11 Console. Follow the steps to review and change them. * [Transfer Subscriptions](https://documentation.gravitee.io/apim/4.11/secure-and-expose-apis/subscriptions/transfer-subscriptions.md): Transfer an active API Management 4.11 subscription to another plan with the same security type. Follow the steps to move it. * [API Products overview and concepts](https://documentation.gravitee.io/apim/4.11/secure-and-expose-apis/api-products.md): API Products bundle several v4 HTTP proxy APIs into one subscribable package in API Management 4.11. Learn how unified access works. * [API Products console UI reference](https://documentation.gravitee.io/apim/4.11/secure-and-expose-apis/api-products/console-ui-reference.md): The API Products pages in the API Management 4.11 Console, from the list view through to each tab. Find the control you need. * [API Products restrictions and licensing](https://documentation.gravitee.io/apim/4.11/secure-and-expose-apis/api-products/restrictions-and-licensing.md): API Management 4.11 API Products require the Enterprise Universe licence tier. Learn the restrictions before you deploy one. * [Consuming APIs via API Products](https://documentation.gravitee.io/apim/4.11/secure-and-expose-apis/api-products/consuming-api-products.md): Consumers use the same authentication for APIs inside an API Management 4.11 API Product as for individual APIs. Learn how it works. * [Managing API Products via Management API](https://documentation.gravitee.io/apim/4.11/secure-and-expose-apis/api-products/manage-api-products-via-management-api.md): Create and manage API Management 4.11 API Products through the Management API. Follow the steps to post a product definition. * [API Products configuration reference](https://documentation.gravitee.io/apim/4.11/secure-and-expose-apis/api-products-configuration-reference.md): The reference fields for plans and subscriptions created against API Management 4.11 API Products. Find the field you need to set. * [Developer Portal](https://documentation.gravitee.io/apim/4.11/developer-portal.md): The Developer Portal 4.11 is the web application where consumers discover and consume your APIs. Learn what the portal offers. * [New Developer Portal](https://documentation.gravitee.io/apim/4.11/developer-portal/new-developer-portal.md): The features and functionality of the New Developer Portal 4.11. Browse the tiles to find the area you want to configure. * [Catalog](https://documentation.gravitee.io/apim/4.11/developer-portal/new-developer-portal/catalog.md): The Catalog lets consumers discover the APIs published in the New Developer Portal 4.11. Learn how discovery works for them. * [Configure mTLS certificate management (administrator guide)](https://documentation.gravitee.io/apim/4.11/developer-portal/new-developer-portal/configuring-mtls-certificate-management-administrator-guide.md): Enable self-service mTLS certificate management for Developer Portal 4.11 application owners. Follow the steps as an administrator. * [Create an Application](https://documentation.gravitee.io/apim/4.11/developer-portal/new-developer-portal/create-an-application.md): Create an application in the New Developer Portal 4.11 and subscribe it to a plan. Follow the steps unless the API is keyless. * [Create and manage mTLS certificates (application owner guide)](https://documentation.gravitee.io/apim/4.11/developer-portal/new-developer-portal/creating-and-managing-mtls-certificates-application-owner-guide.md): Upload, rotate, and delete mTLS client certificates for your Developer Portal 4.11 application. Follow the steps as an owner. * [Enable the New Developer Portal](https://documentation.gravitee.io/apim/4.11/developer-portal/new-developer-portal/configure-the-new-portal.md): The New Developer Portal 4.11 has an updated interface and more customization. Follow the steps to enable it for your environment. * [Layout and Theme](https://documentation.gravitee.io/apim/4.11/developer-portal/new-developer-portal/layout-and-theme.md): Select the fonts and set the layout and theme of the New Developer Portal 4.11. Follow the steps to change how the portal appears. * [Customize the Homepage](https://documentation.gravitee.io/apim/4.11/developer-portal/new-developer-portal/customize-the-homepage.md): Customize the New Developer Portal 4.11 homepage with standard Markdown. Follow the steps to change what consumers see first. * [Manage Portal Navigation and APIs](https://documentation.gravitee.io/apim/4.11/developer-portal/new-developer-portal/customize-the-navigation.md): Structure the New Developer Portal 4.11 navigation with pages and folders. Browse the guides for each customization task. * [Structure the navigation with the Management API](https://documentation.gravitee.io/apim/4.11/developer-portal/new-developer-portal/customize-the-navigation/structure-the-navigation-with-the-management-api.md): Manage your Developer Portal 4.11 navigation programmatically with the Management API. Follow the steps to structure it. * [Gravitee Markdown Components](https://documentation.gravitee.io/apim/4.11/developer-portal/new-developer-portal/gravitee-markdown-components.md): Customize the New Developer Portal 4.11 with Gravitee Markdown components. Learn what the components give you to work with. * [Application Logs](https://documentation.gravitee.io/apim/4.11/developer-portal/new-developer-portal/application-logs.md): API subscribers view paginated logs for every API their application subscribes to in the Developer Portal 4.11. Learn how to read them. * [Manage Subscriptions](https://documentation.gravitee.io/apim/4.11/developer-portal/new-developer-portal/manage-subscriptions.md): Subscribe to APIs and manage your subscriptions in the New Developer Portal 4.11. Follow the steps unless the API is keyless. * [Configure Webhook Subscriptions](https://documentation.gravitee.io/apim/4.11/developer-portal/new-developer-portal/configure-webhook-subscriptions.md): Configure a webhook subscription from the Developer Portal 4.11 catalog. Follow the steps to set it up for your application. * [Configure Authentication](https://documentation.gravitee.io/apim/4.11/developer-portal/new-developer-portal/configure-authentication.md): Configure authentication for the New Developer Portal 4.11 so only authorized users reach it. Browse the authentication options. * [Configure Authentication with Login and Password](https://documentation.gravitee.io/apim/4.11/developer-portal/new-developer-portal/configure-authentication/configure-authentication-with-login-and-password.md): Require a username and password to sign in to the New Developer Portal 4.11. Follow the steps to configure the login method. * [Configure Authentication with SSO](https://documentation.gravitee.io/apim/4.11/developer-portal/new-developer-portal/configure-authentication/configure-authentication-with-sso.md): Require a single sign-on login before users can reach the New Developer Portal 4.11. Follow the steps to configure SSO access. * [Enforce User Authentication](https://documentation.gravitee.io/apim/4.11/developer-portal/new-developer-portal/configure-authentication/enforce-user-authentication.md): Enforce user authentication so only signed-in users can reach your New Developer Portal 4.11. Follow the steps to enable it. * [Subscription form technical implementation](https://documentation.gravitee.io/apim/4.11/developer-portal/new-developer-portal/subscription-form-technical-implementation.md): Retrieve a Developer Portal 4.11 subscription form with resolved dynamic options. Learn what the endpoint returns to you. * [Classic Developer Portal](https://documentation.gravitee.io/apim/4.11/developer-portal/classic-developer-portal.md): The features and functionality of the classic Developer Portal 4.11. Browse the tiles to find the area you need to change. * [Configuration File](https://documentation.gravitee.io/apim/4.11/developer-portal/classic-developer-portal/configuration-file.md): The Developer Portal 4.11 configuration file is assets/config.json. Browse the default configuration and what you can change in it. * [Portal Settings](https://documentation.gravitee.io/apim/4.11/developer-portal/classic-developer-portal/portal-settings.md): Reach the Developer Portal 4.11 settings from the Management Console sidebar. Follow the steps to open and change the settings. * [Layout and Theme](https://documentation.gravitee.io/apim/4.11/developer-portal/classic-developer-portal/layout-and-theme.md): Administrators can change the layout and theme of the Developer Portal 4.11 to control how APIs are presented. Learn what you can customize. * [Manage Users](https://documentation.gravitee.io/apim/4.11/developer-portal/classic-developer-portal/manage-users.md): Users reaching the Developer Portal 4.11 from the Management Console are signed in automatically. Learn how user management works. * [Webhook Subscriptions](https://documentation.gravitee.io/apim/4.11/developer-portal/classic-developer-portal/webhook-subscriptions.md): API consumers configure their webhook subscriptions from the Developer Portal 4.11. Learn what the configuration involves for them. * [Create an Application](https://documentation.gravitee.io/apim/4.11/developer-portal/classic-developer-portal/create-an-application.md): Unless an API has a keyless plan, a consumer registers an application in the Developer Portal 4.11 and subscribes. Follow the steps. * [API Documentation](https://documentation.gravitee.io/apim/4.11/developer-portal/classic-developer-portal/api-documentation.md): Administrators use site-wide documentation in the Developer Portal 4.11 to share best practices and configure pages. Learn what you can set. * [Govern APIs](https://documentation.gravitee.io/apim/4.11/govern-apis.md): The API governance features API Management 4.11 offers, from scoring through to federation. Browse what is available to you. * [Federation](https://documentation.gravitee.io/apim/4.11/govern-apis/federation.md): Federation brings APIs from other gateways and brokers into API Management 4.11 for a single catalogue. Learn how it works. * [Integrations](https://documentation.gravitee.io/apim/4.11/govern-apis/federation/integrations.md): Integrations connect Gravitee to third-party API gateways and event brokers for API Management 4.11. Learn what they provide. * [Discovery](https://documentation.gravitee.io/apim/4.11/govern-apis/federation/discovery.md): Discovery is how an integration connects to a third-party management API and finds its assets for API Management 4.11. Learn the process. * [Federated APIs](https://documentation.gravitee.io/apim/4.11/govern-apis/federation/federated-apis.md): Federated APIs are one of the three main v4 Gravitee API types in API Management 4.11. Learn what they can and cannot do. * [Federation Agent Service Account](https://documentation.gravitee.io/apim/4.11/govern-apis/federation/federation-agent-service-account.md): Create a service account so the federation agent can authenticate to your API Management 4.11 installation. Follow the steps. * [3rd-Party Providers](https://documentation.gravitee.io/apim/4.11/govern-apis/federation/3rd-party-providers.md): Each third-party API gateway or event broker has its own integration for federating APIs into API Management 4.11. Compare the providers. * [Apigee X](https://documentation.gravitee.io/apim/4.11/govern-apis/federation/3rd-party-providers/apigee-x.md): Federate APIs from Apigee X, Google Cloud's API management solution, into API Management 4.11. Learn how the integration works. * [AWS API Gateway](https://documentation.gravitee.io/apim/4.11/govern-apis/federation/3rd-party-providers/aws-api-gateway.md): Federate APIs from AWS API Gateway, the built-in AWS solution, into API Management 4.11. Learn how the integration works for you. * [Multi-Account and Multi-Region AWS API Gateway Federation](https://documentation.gravitee.io/apim/4.11/govern-apis/federation/3rd-party-providers/aws-api-gateway/multi-account-and-multi-region-aws-api-gateway-federation.md): Configure the AWS API Gateway federation agent to ingest APIs across accounts and regions into API Management 4.11. Follow the steps. * [AWS IAM Role-Based Authentication](https://documentation.gravitee.io/apim/4.11/govern-apis/federation/3rd-party-providers/aws-api-gateway/aws-iam-role-based-authentication.md): IAM role-based authentication lets the AWS federation agent work without static keys in API Management 4.11. Learn how to configure it. * [Azure API Management](https://documentation.gravitee.io/apim/4.11/govern-apis/federation/3rd-party-providers/azure-api-management.md): API Management 4.11 federates APIs from Azure API Management, Azure's built-in solution. Learn how the integration works for you. * [Confluent Platform](https://documentation.gravitee.io/apim/4.11/govern-apis/federation/3rd-party-providers/confluent-platform.md): Federate APIs from Confluent Platform, the event streaming platform built on Kafka, into API Management 4.11. Learn how it works. * [IBM API Connect](https://documentation.gravitee.io/apim/4.11/govern-apis/federation/3rd-party-providers/ibm-api-connect.md): Federate APIs from IBM API Connect, cloud or on-premise, into API Management 4.11. Learn how the integration works for you. * [Mulesoft Anypoint](https://documentation.gravitee.io/apim/4.11/govern-apis/federation/3rd-party-providers/mulesoft-anypoint.md): Federate APIs from the Mulesoft Anypoint Platform into API Management 4.11. Learn how the integration discovers and ingests them. * [Solace](https://documentation.gravitee.io/apim/4.11/govern-apis/federation/3rd-party-providers/solace.md): Federate event APIs from the Solace Event Portal into API Management 4.11. Learn how the integration works with an event mesh. * [Edge Stack](https://documentation.gravitee.io/apim/4.11/govern-apis/federation/3rd-party-providers/edge-stack.md): Edge Stack is a cloud native API gateway running in Kubernetes, federated into API Management 4.11. Learn how the integration works. * [API Score](https://documentation.gravitee.io/apim/4.11/govern-apis/api-score.md): API Score is the automated governance capability in API Management 4.11, scoring APIs on criteria like security. Learn how it works. * [Enable API Score](https://documentation.gravitee.io/apim/4.11/govern-apis/api-score/enable-api-score.md): API Score is available in Gravitee Cloud; a self-hosted API Management 4.11 install needs it enabled. Follow the steps to turn it on. * [View API Scores](https://documentation.gravitee.io/apim/4.11/govern-apis/api-score/view-api-scores.md): High-level API Score statistics appear on the API Score page in API Management 4.11. Follow the steps to reach your dashboard. * [Rulesets and Functions](https://documentation.gravitee.io/apim/4.11/govern-apis/api-score/rulesets-and-functions.md): API Score rulesets hold the rules that rate an API in API Management 4.11. Learn how rulesets and their functions are built. * [Types of Assets](https://documentation.gravitee.io/apim/4.11/govern-apis/api-score/types-of-assets.md): API Score analyses different parts of an API Management 4.11 API against rulesets. Learn which assets are checked and how. * [Generate an API Score](https://documentation.gravitee.io/apim/4.11/govern-apis/api-score/generate-an-api-score.md): API Score does not score automatically in API Management 4.11; each API stays unscored until you act. Follow the steps to generate one. * [Analyze & Monitor APIs](https://documentation.gravitee.io/apim/4.11/analyze-and-monitor-apis.md): Analysing and monitoring API Management 4.11 APIs, across dashboards, logging, and quality. Browse the sections that matter to you. * [Dashboards](https://documentation.gravitee.io/apim/4.11/analyze-and-monitor-apis/dashboards.md): The dashboards available in API Management 4.11, from the overview through to LLM and MCP usage. Browse the dashboard you need. * [Overview dashboard](https://documentation.gravitee.io/apim/4.11/analyze-and-monitor-apis/dashboards/overview-dashboard.md): The Overview Dashboard shows API performance and traffic patterns across your API Management 4.11 environment. Learn the available metrics. * [V4 Proxy API traffic dashboard](https://documentation.gravitee.io/apim/4.11/analyze-and-monitor-apis/dashboards/api-proxy-dashboard.md): Access and interpret the v4 proxy API traffic dashboard in API Management 4.11. Follow the steps to read what the dashboard reports. * [V4 API analytics dashboard](https://documentation.gravitee.io/apim/4.11/analyze-and-monitor-apis/dashboards/v4-api-analytics-dashboard.md): The v4 API analytics dashboard shows performance and traffic patterns for an API Management 4.11 v4 API. Learn the metrics it reports. * [V2 API analytics dashboards](https://documentation.gravitee.io/apim/4.11/analyze-and-monitor-apis/dashboards/v2-api-analytics-dashboards.md): The v2 API analytics dashboard shows performance and traffic patterns for an API Management 4.11 v2 API. Follow the steps to access it. * [LLM Usage Dashboard](https://documentation.gravitee.io/apim/4.11/analyze-and-monitor-apis/dashboards/llm-usage-dashboard.md): The LLM Dashboard shows LLM usage across an API Management 4.11 environment. Learn the metrics it reports and its prerequisites. * [MCP Usage Dashboard](https://documentation.gravitee.io/apim/4.11/analyze-and-monitor-apis/dashboards/mcp-usage-dashboard.md): The MCP Dashboard shows MCP usage across an API Management 4.11 environment. Learn the metrics it reports and its prerequisites. * [API Quality](https://documentation.gravitee.io/apim/4.11/analyze-and-monitor-apis/api-quality.md): API Quality assigns customizable governance scores to your API Management 4.11 APIs. Follow the steps to configure and review them. * [Audit Trail](https://documentation.gravitee.io/apim/4.11/analyze-and-monitor-apis/audit-trail.md): The Audit Trail table and filters let you audit API consumption and activity in API Management 4.11. Follow the steps to use it. * [Reporters](https://documentation.gravitee.io/apim/4.11/analyze-and-monitor-apis/reporters.md): Reporters record events from the API Management 4.11 Gateway and send them onward. Compare the reporters available to you. * [Elasticsearch Reporter](https://documentation.gravitee.io/apim/4.11/analyze-and-monitor-apis/reporters/elasticsearch-reporter.md): Send API Management 4.11 Gateway events to Elasticsearch with the Elasticsearch reporter. Find the configuration details you need. * [File Reporter](https://documentation.gravitee.io/apim/4.11/analyze-and-monitor-apis/reporters/file-reporter.md): Write API Management 4.11 Gateway events to a file with the file reporter. Browse the configuration parameters it accepts. * [TCP Reporter](https://documentation.gravitee.io/apim/4.11/analyze-and-monitor-apis/reporters/tcp-reporter.md): Stream API Management 4.11 Gateway events over TCP with the TCP reporter. Browse the configuration parameters it accepts. * [Datadog Reporter](https://documentation.gravitee.io/apim/4.11/analyze-and-monitor-apis/reporters/datadog-reporter.md): Send API Management 4.11 Gateway events to Datadog with the Datadog reporter plugin. Follow the steps to download and configure it. * [Logging](https://documentation.gravitee.io/apim/4.11/analyze-and-monitor-apis/logging.md): Enable and configure logging at Gateway and API level in API Management 4.11, then view the detail. Browse the logging guides. * [Configure Gateway-level Logs](https://documentation.gravitee.io/apim/4.11/analyze-and-monitor-apis/logging/configure-gateway-level-logs.md): Gateway logging applies to all v4 API Management 4.11 APIs by default. Follow the steps to enable and configure the logging you need. * [Configure API-level Logs](https://documentation.gravitee.io/apim/4.11/analyze-and-monitor-apis/logging/configure-api-level-logs.md): Collect runtime logs for v4 proxy and message APIs in API Management 4.11, including webhook logs. Follow the steps to configure them. * [Configure Environment-level Logs](https://documentation.gravitee.io/apim/4.11/analyze-and-monitor-apis/logging/configure-environment-level-logs.md): Environment-level logs give cross-API visibility into v4 proxy API runtime logs in API Management 4.11. Follow the steps to view them. * [View API Logs](https://documentation.gravitee.io/apim/4.11/analyze-and-monitor-apis/logging/view-api-logs.md): Collect and view runtime logs for v4 proxy and message APIs in API Management 4.11, plus webhook logs. Follow the steps to read them. * [Expose Metrics to Prometheus](https://documentation.gravitee.io/apim/4.11/analyze-and-monitor-apis/logging/expose-metrics-to-prometheus.md): Expose API Management 4.11 metrics to Prometheus. Follow the configuration steps needed to make the metrics available to scrape. * [OpenTelemetry](https://documentation.gravitee.io/apim/4.11/analyze-and-monitor-apis/opentelemetry.md): Trace every request the API Management 4.11 Gateway handles with the Gravitee OpenTelemetry feature. Learn how tracing is set up. * [Execution Transparency Analytics](https://documentation.gravitee.io/apim/4.11/analyze-and-monitor-apis/execution-transparency-analytics.md): Execution transparency analytics gives actionable diagnostics when an API Management 4.11 call fails. Learn what the components report. * [Alert Engine](https://documentation.gravitee.io/apim/4.11/alert-engine.md): Alert Engine monitors API performance and availability in real time alongside API Management 4.11. Learn what the monitoring solution offers. * [Architecture](https://documentation.gravitee.io/apim/4.11/alert-engine/architecture.md): Alert Engine is a standalone application needing no database, running alongside API Management 4.11. Learn how it is built. * [Integrations](https://documentation.gravitee.io/apim/4.11/alert-engine/integrations.md): Alert Engine works inside and outside the Gravitee ecosystem, including with API Management 4.11. Learn what it connects to. * [Install and Upgrade](https://documentation.gravitee.io/apim/4.11/alert-engine/install-and-upgrade-guides.md): Install Alert Engine in your environment alongside API Management 4.11. Browse the guides for the deployment method you use. * [Sizing requirements](https://documentation.gravitee.io/apim/4.11/alert-engine/install-and-upgrade-guides/sizing-requirements.md): Resource planning and optimization advice for an Alert Engine install alongside API Management 4.11. Learn what to allow for. * [Install via .ZIP file](https://documentation.gravitee.io/apim/4.11/alert-engine/install-and-upgrade-guides/install-via-.zip-file.md): Install Alert Engine from the distribution bundle alongside API Management 4.11. Check the prerequisites before you start. * [Install via Docker](https://documentation.gravitee.io/apim/4.11/alert-engine/install-and-upgrade-guides/install-via-docker.md): Run Alert Engine images in Docker alongside API Management 4.11. Follow the steps if you are already familiar with Docker. * [Install via Kubernetes](https://documentation.gravitee.io/apim/4.11/alert-engine/install-and-upgrade-guides/install-via-kubernetes.md): Deploy Alert Engine in Kubernetes alongside API Management 4.11. Follow the steps if you are already familiar with Kubernetes. * [Upgrade guide](https://documentation.gravitee.io/apim/4.11/alert-engine/install-and-upgrade-guides/upgrade-guide.md): Upgrading Alert Engine alongside API Management 4.11 changes only internals between the 1.6 and 2.0 lines. Learn what to check. * [Configuration](https://documentation.gravitee.io/apim/4.11/alert-engine/configuration.md): Configure Alert Engine and its internal API alongside API Management 4.11. Browse the configuration guides that apply to you. * [Configure Alert Engine](https://documentation.gravitee.io/apim/4.11/alert-engine/configuration/configure-alert-engine.md): Three methods configure Alert Engine in an API Management 4.11 platform. Compare them and follow the steps for the one you use. * [Configure the Internal API](https://documentation.gravitee.io/apim/4.11/alert-engine/configuration/configure-the-internal-api.md): Alert Engine exposes an internal API for monitoring the component alongside API Management 4.11. Follow the steps to configure it. * [Alerts and Conditions](https://documentation.gravitee.io/apim/4.11/alert-engine/alerts-and-conditions.md): Alert Engine sends alerts when conditions are met across your API Management 4.11 platform. Learn how an alert is structured. * [Dampening](https://documentation.gravitee.io/apim/4.11/alert-engine/dampening.md): Dampening stops Alert Engine flooding users when a condition triggers repeatedly in API Management 4.11. Learn how to configure it. * [Notifications](https://documentation.gravitee.io/apim/4.11/alert-engine/notifications.md): Choose the channel Alert Engine notifies you through when an alert fires in API Management 4.11. Compare the providers available. * [Integration set up](https://documentation.gravitee.io/apim/4.11/alert-engine/integration-set-up.md): Alert Engine bolts on to your API Management 4.11 platform and to third-party backends. Compare the integrations available. * [Gravitee API Management](https://documentation.gravitee.io/apim/4.11/alert-engine/integration-set-up/gravitee-api-management.md): Integrate Alert Engine with API Management 4.11 so API teams get advanced monitoring. Learn what the integration provides. * [Installation](https://documentation.gravitee.io/apim/4.11/alert-engine/integration-set-up/gravitee-api-management/installation.md): Install the Alert Engine integration for API Management 4.11. Follow the steps, or skip them if you run Enterprise Docker images. * [Configure Notifications](https://documentation.gravitee.io/apim/4.11/alert-engine/integration-set-up/gravitee-api-management/configure-notifications.md): Use Alert Engine and API Management 4.11 together to configure notifications for your alerts. Follow the steps to set them up. * [Gravitee API Management Alerts Dashboard](https://documentation.gravitee.io/apim/4.11/alert-engine/integration-set-up/gravitee-api-management/gravitee-api-management-alerts-dashboard.md): The Alerts dashboard sits in the API Management 4.11 Console under Analytics. Learn what Alert Engine surfaces there for you. * [Gravitee Access Management](https://documentation.gravitee.io/apim/4.11/alert-engine/integration-set-up/gravitee-access-management.md): Integrate Alert Engine with Access Management alongside API Management 4.11. Browse the installation and configuration guides. * [Installation](https://documentation.gravitee.io/apim/4.11/alert-engine/integration-set-up/gravitee-access-management/installation.md): Install the Alert Engine integration for Access Management alongside API Management 4.11. Follow the steps, or skip them on Enterprise images. * [Configuration](https://documentation.gravitee.io/apim/4.11/alert-engine/integration-set-up/gravitee-access-management/configuration.md): Access Management ships an Alert Engine integration used alongside API Management 4.11. Follow the steps to configure it. * [Azure regions for SaaS and Hybrid Deployments](https://documentation.gravitee.io/apim/4.11/alert-engine/azure-regions-for-saas-and-hybrid-deployments.md): The Azure regions Gravitee supports for SaaS and hybrid Alert Engine deployments with API Management 4.11. Find your region. * [Changelog](https://documentation.gravitee.io/apim/4.11/alert-engine/page-6.md): Release notes for Changelog. * [AI Agent Management](https://documentation.gravitee.io/apim/4.11/ai-agent-management.md): AI Agent Management governs and protects AI use cases across API Management 4.11, from the Agent Gateway to LLM and A2A proxies. Learn what it covers. * [Set Up an AI Agent (A2A) Proxy](https://documentation.gravitee.io/apim/4.11/ai-agent-management/create-an-a2a-proxy.md): As organizations adopt AI agents, an API Management 4.11 A2A proxy connects them securely. Follow the steps to create one and configure the gateway. * [Discover and Catalog AI Agents (A2A)](https://documentation.gravitee.io/apim/4.11/ai-agent-management/add-agents-to-your-agent-catalog.md): Add AI agents to your API Management 4.11 Agent Catalog by importing or discovering their Agent Cards. Follow the steps to create an integration. * [Convert REST APIS to an MCP Server](https://documentation.gravitee.io/apim/4.11/ai-agent-management/convert-your-apis-to-mcp-servers.md): Deploy an API Management 4.11 REST API as an MCP Server so AI agents can discover and invoke it. Follow the steps to deploy your API. * [LLM proxy](https://documentation.gravitee.io/apim/4.11/ai-agent-management/llm-proxy.md): An LLM Proxy sits between an LLM consumer and provider in API Management 4.11. Learn what it solves and which providers are supported. * [Proxy your LLMs](https://documentation.gravitee.io/apim/4.11/ai-agent-management/llm-proxy/proxy-your-llms.md): An API Management 4.11 LLM proxy exposes an OpenAI-compatible API you can plug into any compatible client. Follow the steps to proxy your LLM. * [Accepted request formats](https://documentation.gravitee.io/apim/4.11/ai-agent-management/llm-proxy/accepted-request-formats.md): The API Management 4.11 LLM Proxy accepts OpenAI, Anthropic Messages, and Gemini request formats. Compare the supported endpoints. * [Add the Token Rate Limit policy to your LLM proxy](https://documentation.gravitee.io/apim/4.11/ai-agent-management/llm-proxy/add-the-token-rate-limit-policy-to-your-llm-proxy.md): The Token Rate Limit policy caps inbound and outbound tokens on an API Management 4.11 LLM proxy. Follow the steps to add and verify it. * [Add the Guard Rails policy to your LLM proxy](https://documentation.gravitee.io/apim/4.11/ai-agent-management/llm-proxy/add-the-guard-rails-policy-to-your-llm-proxy.md): The Guard Rails policy evaluates prompts on an API Management 4.11 LLM proxy for unsafe content. Follow the steps to add it and create a resource. * [Consume your LLM proxy with the OpenAI Python SDK](https://documentation.gravitee.io/apim/4.11/ai-agent-management/llm-proxy/consume-your-llm-proxy-with-the-openai-python-sdk.md): Consume an API Management 4.11 LLM proxy with the OpenAI Python SDK. Follow the steps to point the SDK at your proxy and verify the calls. * [Secure MCP Proxy with OAuth2](https://documentation.gravitee.io/apim/4.11/ai-agent-management/secure-mcp-proxy-with-oauth2.md): Secure an MCP proxy API in API Management 4.11 with an OAuth2 plan and Access Management. Learn the use cases and how the flow works. * [AI Resources](https://documentation.gravitee.io/apim/4.11/ai-agent-management/ai-resources.md): The resources that support AI-powered policies in API Management 4.11, covering model inference and vector storage. Compare what each provides. * [AI - Model Text Classification - Overview and Model Selection](https://documentation.gravitee.io/apim/4.11/ai-agent-management/ai-resources/ai-model-text-classification-overview-and-model-selection.md): AI Model Text Classification detects toxic content and prompt injection in API Management 4.11 traffic. Compare the detection models available. * [AI - Model Text Classification - Configuration and Usage](https://documentation.gravitee.io/apim/4.11/ai-agent-management/ai-resources/ai-model-text-classification-configuration-and-usage.md): Configure an API Management 4.11 text classification policy by choosing a model and input sources. Follow the steps and see the known limitations. * [Terraform](https://documentation.gravitee.io/apim/4.11/terraform.md): Terraform manages your API Management 4.11 infrastructure from configuration files. Check the compatibility matrix before you start. * [Quick Start Guide](https://documentation.gravitee.io/apim/4.11/terraform/quick-start-guide.md): Manage API Management 4.11 entities with Terraform instead of manual Console updates. Follow the steps to install the Gravitee provider. * [Define an APIM service account for Terraform](https://documentation.gravitee.io/apim/4.11/terraform/define-an-apim-service-account-for-terraform.md): Terraform authenticates to API Management 4.11 as a user of the instance. Follow the steps to create a Terraform service account. * [Gravitee Resources](https://documentation.gravitee.io/apim/4.11/terraform/example-resource-configurations.md): The Gravitee resources Terraform can create and manage in API Management 4.11. Compare the resources and the features each release adds. * [Kafka Gateway](https://documentation.gravitee.io/apim/4.11/kafka-gateway.md): The Kafka Gateway applies API Management 4.11 capabilities directly to native Kafka. Learn what it addresses for security and control. * [Configure the Kafka Client & Gateway](https://documentation.gravitee.io/apim/4.11/kafka-gateway/configure-the-kafka-client-and-gateway.md): Configure the Kafka Gateway and a Kafka client so API Management 4.11 can proxy your Kafka cluster. Follow the steps for both sides. * [Deploy a Kafka Gateway with Gravitee Cloud](https://documentation.gravitee.io/apim/4.11/kafka-gateway/deploy-a-kafka-gateway-with-gravitee-cloud.md): Use Gravitee Cloud to deploy an API Management 4.11 Gateway that supports the Kafka protocol. Follow the steps to deploy it. * [Produce and Consume Kafka Messages with Gravitee Cloud](https://documentation.gravitee.io/apim/4.11/kafka-gateway/produce-and-consume-kafka-messages-with-gravitee-cloud.md): Produce and consume Kafka messages through Gravitee Cloud with API Management 4.11. Follow the steps to send your first messages. * [Create & Configure Kafka APIs](https://documentation.gravitee.io/apim/4.11/kafka-gateway/create-and-configure-kafka-apis.md): Creating and configuring a Kafka API in API Management 4.11, from the Console. Browse the articles covering each part of the process. * [Create Kafka APIs](https://documentation.gravitee.io/apim/4.11/kafka-gateway/create-and-configure-kafka-apis/create-kafka-apis.md): Kafka APIs apply API Management 4.11 capabilities directly to the Kafka protocol. Follow the steps to create a Kafka API of your own. * [Configure Kafka APIs](https://documentation.gravitee.io/apim/4.11/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis.md): Configure Kafka APIs from the API Management 4.11 Console, a UI for creating and amending them. Learn what you can change there. * [Configuration](https://documentation.gravitee.io/apim/4.11/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/configuration.md): The Configuration section manages high-level settings for a Kafka API in API Management 4.11. Learn what you can customize. * [Entrypoint Connect phase](https://documentation.gravitee.io/apim/4.11/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/entrypoint-connect-phase.md): The Entrypoint Connect phase runs when a client opens a Kafka connection in API Management 4.11, before authentication. Learn what runs. * [Connection interruption in Entrypoint Connect phase](https://documentation.gravitee.io/apim/4.11/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/connection-interruption.md): Policies in the Entrypoint Connect phase can interrupt a Kafka connection in API Management 4.11. Learn the Expression Language variables. * [Console UI changes for multi-tenant Kafka endpoints](https://documentation.gravitee.io/apim/4.11/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/console_ui_changes_for_multi-tenant_kafka_endpoints.md): The API Management 4.11 Console endpoint table shows a Tenants column for multi-tenant Kafka endpoints. Learn what changed in the UI. * [Entrypoints](https://documentation.gravitee.io/apim/4.11/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/entrypoints.md): Entrypoints define the protocol and settings consumers use to reach a Kafka API in API Management 4.11. Learn how to configure them. * [Endpoints](https://documentation.gravitee.io/apim/4.11/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/endpoints.md): Endpoints define the protocol and settings a Kafka API uses to reach its backend in API Management 4.11. Learn how to configure them. * [mTLS plans for Kafka native APIs](https://documentation.gravitee.io/apim/4.11/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/mtls-plans.md): mTLS plans authenticate Kafka native API clients with X.509 certificates in API Management 4.11. Learn how subscriptions resolve. * [Policies](https://documentation.gravitee.io/apim/4.11/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/policies.md): Policies are customizable rules the Gateway runs during a Kafka API transaction in API Management 4.11. Learn how they change behaviour. * [Consumers](https://documentation.gravitee.io/apim/4.11/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/consumers.md): The Consumers section manages how a Kafka API is consumed in API Management 4.11, through plans and subscriptions. Learn what it covers. * [Documentation](https://documentation.gravitee.io/apim/4.11/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/documentation.md): The Documentation section creates Developer Portal pages for a Kafka API in API Management 4.11. Learn how to inform consumers. * [Deployment](https://documentation.gravitee.io/apim/4.11/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/deployment.md): The Deployment section manages sharding tags and tracks changes to a Kafka API in API Management 4.11. Learn what it records. * [Create and Configure Kafka Clusters](https://documentation.gravitee.io/apim/4.11/kafka-gateway/create-and-configure-kafka-clusters.md): Create and manage Kafka clusters from the Kafka UI in the API Management 4.11 Console. Follow the steps to configure a cluster. * [Configure and Deploy Kafka Console](https://documentation.gravitee.io/apim/4.11/kafka-gateway/configure-and-deploy-kafka-console.md): The Kafka Console is a standalone UI that integrates with API Management 4.11 to manage Kafka clusters. Follow the steps to deploy it. * [Plans](https://documentation.gravitee.io/apim/4.11/kafka-gateway/plans.md): A plan is the service and access layer over a Kafka API in API Management 4.11, setting limits and validation. Learn the options. * [Applications](https://documentation.gravitee.io/apim/4.11/kafka-gateway/applications.md): Consumers register an application and subscribe to a plan to reach Kafka APIs in API Management 4.11. Learn what applications do. * [Subscriptions](https://documentation.gravitee.io/apim/4.11/kafka-gateway/subscriptions.md): A subscription is the contract between a Kafka API publisher and consumer in API Management 4.11. Learn how one is created. * [Other Ways Gravitee Supports Kafka](https://documentation.gravitee.io/apim/4.11/kafka-gateway/other-ways-gravitee-supports-kafka.md): Gravitee connects to Kafka through protocol mediation or native Kafka APIs in API Management 4.11. Compare the two approaches. * [Expose Metrics to Prometheus](https://documentation.gravitee.io/apim/4.11/kafka-gateway/expose-metrics-to-prometheus.md): Expose the API Management 4.11 Gateway internal API metrics to Prometheus. Follow the steps and verify the metrics arrive. * [Expose Metrics to Elasticsearch](https://documentation.gravitee.io/apim/4.11/kafka-gateway/expose-metrics-to-elasticsearch.md): Configure the Elasticsearch reporter to store runtime metrics from an API Management 4.11 Kafka Gateway. Follow the steps to set it up. * [Prepare a Production Environment](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment.md): Preparing an API Management 4.11 environment for production, from sizing through to best practices. Browse the articles you need. * [Gateway Resource Sizing](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/gateway-resource-sizing-guidelines.md): Resource recommendations for an API Management 4.11 Gateway instance, based on traffic and deployment context. Learn how to size it. * [Production Best Practices](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/production-best-practices.md): Default settings from an API Management 4.11 install suit testing, not production. Browse the best practices before you go live. * [Internal APIs](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/production-best-practices/internal-apis.md): API Management 4.11 enables internal APIs on the Management API and Gateway by default. Learn what they expose and how to secure them. * [Deployments](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/production-best-practices/deployments.md): The API Management 4.11 Management API exposes both the Console and Developer Portal REST APIs. Learn how to deploy them safely. * [Authentication](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/production-best-practices/authentication.md): Authenticate API Management 4.11 users against an LDAP server or another provider in production. Learn the options available. * [Protections](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/production-best-practices/protections.md): A brute-force attack submits a high volume of authentication requests. Learn how API Management 4.11 protects against them. * [General Recommendations](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/production-best-practices/general-recommendations.md): Generalized recommendations for API Management 4.11 production settings and practices. Browse the articles in this section. * [Default APIM Settings](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/production-best-practices/general-recommendations/default-apim-settings.md): Update the most common default settings in the API Management 4.11 Console before going live. Follow the steps for each one. * [API Design](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/production-best-practices/general-recommendations/api-design.md): There is no single rule for designing and exposing API Management 4.11 APIs. Learn the considerations that shape your design. * [API Review and Quality](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/production-best-practices/general-recommendations/api-review-and-quality.md): Enable API review and quality in API Management 4.11 to avoid unexpected exposure on the Developer Portal. Learn how to turn it on. * [Property Encryption](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/production-best-practices/general-recommendations/property-encryption.md): API Management 4.11 can store encrypted property values on an API. Learn how property encryption works and how to set it up. * [Documentation Sanitizer](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/production-best-practices/general-recommendations/documentation-sanitizer.md): API Management 4.11 can sanitize published API documentation pages. Learn what the sanitizer removes and why that matters. * [Notifiers](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/production-best-practices/general-recommendations/notifiers.md): API publishers can send notifications about their APIs in API Management 4.11. Learn what notifiers do and how to restrict them. * [Default Nginx Security Config](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/production-best-practices/general-recommendations/default-nginx-security-config.md): The default Nginx security configuration the API Management 4.11 Console uses. Browse it before you harden your deployment. * [Cache](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/cache.md): Caches store different types of data in API Management 4.11. Compare the cache managers available and how each one is configured. * [Repositories](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/repositories.md): API Management 4.11 stores data in repositories configured in gravitee.yml or elsewhere. Compare the repository types available. * [MongoDB](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/repositories/mongodb.md): The MongoDB plugin ships in the default API Management 4.11 distribution. Follow the steps to configure MongoDB as your repository. * [ElasticSearch](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/repositories/elasticsearch.md): The Elasticsearch connector for API Management 4.11 uses the HTTP API that Elasticsearch instances expose. Learn how to configure it. * [JDBC](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/repositories/jdbc.md): API Management 4.11 can use a JDBC repository for its configuration database. Follow the steps to install the driver and configure it. * [Redis](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/repositories/redis.md): The Redis repository plugin connects API Management 4.11 to Redis for the rate limit feature. Follow the steps to configure it. * [Configure your HTTP Server](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/configure-your-http-server.md): Configure the API Management 4.11 Gateway HTTP server properties. Follow the steps in the tab that matches your deployment. * [Sensitive Data Management](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/sensitive-data-management.md): Protecting sensitive information in API Management 4.11, from API secrets to configuration secrets. Browse the articles you need. * [Configure Secrets](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/sensitive-data-management/configure-secrets.md): API Management 4.11 integrates with secret managers for configuration-level secrets. Learn how that integration works in practice. * [Quick Start](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/sensitive-data-management/configure-secrets/quick-start.md): Configure configuration-level secrets in API Management 4.11. Follow the quick start steps to reference your first secret. * [Configuration](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/sensitive-data-management/configure-secrets/configuration.md): Configure a secret manager so you can reference secrets from API Management 4.11 configuration files. Follow the steps to set it up. * [Reference Secrets in Configurations](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/sensitive-data-management/configure-secrets/reference-secrets-in-configurations.md): Reference secret manager values from your API Management 4.11 configuration files. Follow the steps to use them safely in production. * [API Secrets](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/sensitive-data-management/api-secrets.md): API Management 4.11 integrates with secret managers so the values inside your APIs stay hidden. Learn how API secrets work in practice. * [Quick Start](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/sensitive-data-management/api-secrets/quick-start.md): Configure access to a secret manager and reference a secret from an API Management 4.11 API. Follow the quick start steps. * [Configuration](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/sensitive-data-management/api-secrets/configuration.md): Configure a secret manager to hide values inside your API Management 4.11 APIs. Follow the steps to set the integration up. * [Reference Secrets in APIs](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/sensitive-data-management/api-secrets/reference-secrets-in-apis.md): Reference secret manager values from within an API Management 4.11 API to hide sensitive data. Follow the steps to use them. * [Plugin support](https://documentation.gravitee.io/apim/4.11/prepare-a-production-environment/sensitive-data-management/plugin-support.md): Which API Management 4.11 plugins support referencing secrets. Browse the support table before you configure a secret in one. * [Plugins](https://documentation.gravitee.io/apim/4.11/plugins.md): Plugins expand what the API Management 4.11 Gateway, Management API, and other components can do. Compare the types of plugin available. * [Deployment](https://documentation.gravitee.io/apim/4.11/plugins/deployment.md): Deploy an API Management 4.11 plugin by copying its archive into the plugins directory. Follow the steps, including for air-gapped clusters. * [Customization](https://documentation.gravitee.io/apim/4.11/plugins/customization.md): API Management 4.11 plugins extend and customize component behaviour. Learn the common structure a plugin shares before you build one. * [Context-Aware Logging in Plugins](https://documentation.gravitee.io/apim/4.11/plugins/customization/context-aware-logging.md): Use the context-aware logging API when developing API Management 4.11 Gateway plugins. Follow the steps for request-scoped logging. * [Policies for the Entrypoint Connect phase](https://documentation.gravitee.io/apim/4.11/plugins/customization/entrypoint-connect-phase-policies.md): The Entrypoint Connect phase runs when a client opens a native Kafka connection to the API Management 4.11 Gateway. Learn how to interrupt one. * [Enforce Logging Rules with ArchUnit Maven Plugin](https://documentation.gravitee.io/apim/4.11/plugins/customization/archunit-maven-plugin.md): The ArchUnit Maven plugin enforces context-aware logging rules at build time for API Management 4.11 plugins. Follow the steps to configure it. * [Gravitee Expression Language](https://documentation.gravitee.io/apim/4.11/gravitee-expression-language.md): Gravitee Expression Language queries object graphs to configure API Management 4.11 policies dynamically. Learn the syntax and expression markers. * [Management API Reference](https://documentation.gravitee.io/apim/4.11/management-api-reference.md): The Gravitee Management API is the programmatic interface to the API Management 4.11 backend. Browse the reference for its two sub-APIs. * [Expose APIM as an MCP Server](https://documentation.gravitee.io/apim/4.11/expose-apim-as-an-mcp-server.md): Install the API Management 4.11 MCP Server so AI clients can call your platform. Follow the steps to install it and create a service account token. * [Release Information](https://documentation.gravitee.io/apim/4.11/release-information.md): Information about release information. * [Release Notes](https://documentation.gravitee.io/apim/4.11/release-information/release-notes.md): An overview about release notes. * [APIM 4.11](https://documentation.gravitee.io/apim/4.11/release-information/release-notes/apim-4.11.md) * [Changelog](https://documentation.gravitee.io/apim/4.11/release-information/changelog.md): An overview about changelog. * [APIM 4.11.x](https://documentation.gravitee.io/apim/4.11/release-information/changelog/apim-4.11.x.md) * [Breaking Changes and Deprecations](https://documentation.gravitee.io/apim/4.11/release-information/breaking-changes-and-deprecations.md): Information about breaking changes and deprecations. * [Release Types](https://documentation.gravitee.io/apim/4.11/release-information/release-types.md): Gravitee's approach to software development and deployment * [Release schedule](https://documentation.gravitee.io/apim/4.11/release-information/release-schedule.md): Overview of the Release schedule * [Support Model](https://documentation.gravitee.io/apim/4.11/release-information/support-model.md): Gravitee's approach to software support * [Support for v1 APIs](https://documentation.gravitee.io/apim/4.11/release-information/support-model/support-for-v1-apis.md): This page details the go-forward strategy for supporting v1 APIs in APIM - [Introduction](https://documentation.gravitee.io/apim/4.10/readme.md): API Management 4.10 accelerates and streamlines the governance and delivery of your APIs. Learn what the platform offers and where to start. - [Core Concepts](https://documentation.gravitee.io/apim/4.10/readme/core-concepts.md): The core concepts behind API Management 4.10, from architecture to component configuration. Learn how the pieces fit together. - [Enterprise Edition](https://documentation.gravitee.io/apim/4.10/readme/enterprise-edition.md): The Enterprise Edition of API Management 4.10 can include Event Management and AI Agent Management. Compare the global enterprise features. - [Integrations](https://documentation.gravitee.io/apim/4.10/readme/integrations.md): The major integrations API Management 4.10 offers with event brokers, observability tools, and service discovery. Compare what is supported. - [Community Forum](https://documentation.gravitee.io/apim/4.10/readme/community-forum.md): What to expect from the Gravitee community forum as an API Management 4.10 user. See how to ask a question others can find later. - [Contribute to APIM](https://documentation.gravitee.io/apim/4.10/readme/contribute-to-apim.md): Set up a local environment to contribute to API Management 4.10 development. Follow the steps to clone the project and prepare the UIs. - [Getting Started](https://documentation.gravitee.io/apim/4.10/getting-started.md): Start with API Management 4.10 on Gravitee Cloud, hybrid, or fully self-hosted. Compare the deployment options before you install. - [Fully self-hosted installation with Vanilla Kubernetes](https://documentation.gravitee.io/apim/4.10/getting-started/vanilla-kubernetes.md): Install a fully self-hosted API Management 4.10 platform on Kubernetes with Helm charts. Follow the steps and review the components first. - [Fully self-hosted installation with Docker](https://documentation.gravitee.io/apim/4.10/getting-started/local-install-with-docker.md): Install a fully self-hosted API Management 4.10 with Docker Compose. Follow the steps to download the compose file and verify the stack. - [Create & Publish Your First API](https://documentation.gravitee.io/apim/4.10/getting-started/create-and-publish-your-first-api.md): Create and publish your first API Management 4.10 API, step by step. Follow the articles in order from creation through to publication. - [Create an API](https://documentation.gravitee.io/apim/4.10/getting-started/create-and-publish-your-first-api/create-an-api.md): Create your first API with API Management 4.10, using the Console. Follow the steps to build it, test it, and move to the next stage. - [Add Security](https://documentation.gravitee.io/apim/4.10/getting-started/create-and-publish-your-first-api/add-security.md): Secure your first API Management 4.10 API with an API Key plan. Follow the steps to add the plan and check it is enforced. - [Add a Policy](https://documentation.gravitee.io/apim/4.10/getting-started/create-and-publish-your-first-api/add-a-policy.md): Add the Rate Limit policy to your first API Management 4.10 API. Follow the steps to apply it and verify the limit is enforced. - [Add API Documentation](https://documentation.gravitee.io/apim/4.10/getting-started/create-and-publish-your-first-api/add-api-documentation.md): Add documentation to your first API Management 4.10 API so consumers can read it. Follow the steps to attach and verify a page. - [Publish your API](https://documentation.gravitee.io/apim/4.10/getting-started/create-and-publish-your-first-api/publish-your-api.md): Publish your first API Management 4.10 API so consumers can find it. Follow the steps to publish it and verify it is live. - [Hybrid Installation & Configuration Guides](https://documentation.gravitee.io/apim/4.10/hybrid-installation-and-configuration-guides.md): A hybrid Gateway architecture mixes self-hosted and cloud API Management 4.10 components. Browse the guides for your deployment stack. - [Next-Gen Cloud](https://documentation.gravitee.io/apim/4.10/hybrid-installation-and-configuration-guides/next-gen-cloud.md): A Next-Gen Cloud hybrid API Management 4.10 deployment needs the Gateway and Redis as a minimum. Browse the installation guides. - [Docker](https://documentation.gravitee.io/apim/4.10/hybrid-installation-and-configuration-guides/next-gen-cloud/docker.md): Run a Next-Gen Cloud hybrid API Management 4.10 deployment in Docker. Browse the guides for the CLI and Compose approaches. - [Docker CLI](https://documentation.gravitee.io/apim/4.10/hybrid-installation-and-configuration-guides/next-gen-cloud/docker/docker-cli.md): Install the API Management 4.10 Data Plane with Docker CLI commands for a Next-Gen Cloud hybrid. Follow the steps to run it. - [Docker Compose](https://documentation.gravitee.io/apim/4.10/hybrid-installation-and-configuration-guides/next-gen-cloud/docker/docker-compose.md): Next-Gen Cloud supports hybrid API Management 4.10 deployments through Docker Compose. Follow the steps to configure the compose file. - [Kubernetes](https://documentation.gravitee.io/apim/4.10/hybrid-installation-and-configuration-guides/next-gen-cloud/kubernetes.md): Install the self-hosted components of a hybrid API Management 4.10 deployment on Kubernetes. Browse the guides for your provider. - [Vanilla Kubernetes](https://documentation.gravitee.io/apim/4.10/hybrid-installation-and-configuration-guides/next-gen-cloud/kubernetes/vanilla-kubernetes.md): Install a hybrid API Management 4.10 Gateway on Kubernetes and connect it to Next-Gen Cloud. Follow the steps to deploy it. - [AWS EKS](https://documentation.gravitee.io/apim/4.10/hybrid-installation-and-configuration-guides/next-gen-cloud/kubernetes/aws-eks.md): Install a hybrid API Management 4.10 Gateway on Amazon EKS and connect it to Gravitee Cloud. Follow the steps to deploy it. - [Azure AKS](https://documentation.gravitee.io/apim/4.10/hybrid-installation-and-configuration-guides/next-gen-cloud/kubernetes/azure-aks.md): Install a hybrid API Management 4.10 Gateway on Azure Kubernetes Service and connect it to Gravitee Cloud. Follow the steps to deploy. - [OpenShift](https://documentation.gravitee.io/apim/4.10/hybrid-installation-and-configuration-guides/next-gen-cloud/kubernetes/openshift.md): Install a hybrid API Management 4.10 Gateway on OpenShift and connect it to Gravitee Cloud. Follow the steps to deploy it. - [RPM](https://documentation.gravitee.io/apim/4.10/hybrid-installation-and-configuration-guides/next-gen-cloud/rpm.md): Install a hybrid API Management 4.10 Gateway from the RPM package. Follow the steps for the Linux distribution you are running. - [.ZIP](https://documentation.gravitee.io/apim/4.10/hybrid-installation-and-configuration-guides/next-gen-cloud/.zip.md): Install a Next-Gen Cloud hybrid API Management 4.10 deployment from the binary distribution. Follow the steps to set it up. - [Generate a New Cloud Token](https://documentation.gravitee.io/apim/4.10/hybrid-installation-and-configuration-guides/next-gen-cloud/generate-a-new-cloud-token.md): Revoking a cloud token breaks the link between Gravitee Cloud and your hybrid API Management 4.10 Gateway. Follow the steps to replace it. - [Delete a Hybrid Gateway](https://documentation.gravitee.io/apim/4.10/hybrid-installation-and-configuration-guides/next-gen-cloud/delete-a-hybrid-gateway.md): Delete a hybrid API Management 4.10 Gateway you no longer need to keep your environment controlled. Follow the steps to remove it. - [Link to a Hybrid Gateway](https://documentation.gravitee.io/apim/4.10/hybrid-installation-and-configuration-guides/next-gen-cloud/link-to-a-hybrid-gateway.md): Link a new cloud token to an existing hybrid API Management 4.10 Gateway. Follow the steps to restore the Cloud connection. - [Classic Cloud](https://documentation.gravitee.io/apim/4.10/hybrid-installation-and-configuration-guides/classic-cloud.md): The technology stacks and deployment methods for a Classic Cloud hybrid API Management 4.10 install. Compare the options available. - [Docker](https://documentation.gravitee.io/apim/4.10/hybrid-installation-and-configuration-guides/classic-cloud/docker.md): Run a Classic Cloud hybrid API Management 4.10 deployment in Docker. Browse the guides for the CLI and Compose approaches. - [Docker Compose](https://documentation.gravitee.io/apim/4.10/hybrid-installation-and-configuration-guides/classic-cloud/docker/docker-compose.md): A sample compose file that sets up a Classic Cloud hybrid API Management 4.10 configuration. Follow the steps to adapt it. - [Kubernetes](https://documentation.gravitee.io/apim/4.10/hybrid-installation-and-configuration-guides/classic-cloud/kubernetes.md): Deploy a Classic Cloud hybrid API Management 4.10 Gateway on Kubernetes. Browse the guides for the cloud provider you use. - [GCP GKE](https://documentation.gravitee.io/apim/4.10/hybrid-installation-and-configuration-guides/classic-cloud/kubernetes/gcp-gke.md): Install an API Management 4.10 Gateway on Kubernetes with GCP GKE. Follow the steps to complete a Classic Cloud hybrid deployment. - [.ZIP](https://documentation.gravitee.io/apim/4.10/hybrid-installation-and-configuration-guides/classic-cloud/.zip.md): Install a Classic Cloud hybrid API Management 4.10 deployment from the .zip distribution. Follow the steps after installing the platform. - [Cloud Certificate Renewal](https://documentation.gravitee.io/apim/4.10/hybrid-installation-and-configuration-guides/classic-cloud/cloud-certificate-renewal.md): Renew the certificate that keeps your self-hosted API Management 4.10 instance connected to Gravitee Cloud. Follow the steps to replace it. - [Proxy Configuration](https://documentation.gravitee.io/apim/4.10/hybrid-installation-and-configuration-guides/proxy-configuration.md): Hybrid API Management 4.10 components often reach Gravitee Cloud through a corporate proxy. Browse the proxy configuration guides. - [Hybrid Gateway Proxy Configuration](https://documentation.gravitee.io/apim/4.10/hybrid-installation-and-configuration-guides/proxy-configuration/hybrid-gateway-proxy-configuration.md): Configure a hybrid API Management 4.10 Gateway that connects to a remote Management API through a proxy. Follow the steps to set it up. - [System Proxy for Backend APIs](https://documentation.gravitee.io/apim/4.10/hybrid-installation-and-configuration-guides/proxy-configuration/system-proxy-for-backend-apis.md): Configure a system proxy so a hybrid API Management 4.10 Gateway can reach your backend APIs. Follow the steps to set it up. - [Self-Hosted Installation Guides](https://documentation.gravitee.io/apim/4.10/self-hosted-installation-guides.md): Self-hosted architecture means you host every API Management 4.10 component on your own infrastructure. Browse the installation guides. - [Docker](https://documentation.gravitee.io/apim/4.10/self-hosted-installation-guides/docker.md): The Docker installation architecture common to each API Management 4.10 install method. Compare the methods available to you. - [Docker Compose](https://documentation.gravitee.io/apim/4.10/self-hosted-installation-guides/docker/docker-compose.md): Install API Management 4.10 with Docker Compose, the quickest self-hosted route. Follow the steps and see what the deployment includes. - [Docker CLI](https://documentation.gravitee.io/apim/4.10/self-hosted-installation-guides/docker/docker-cli.md): Install API Management 4.10 with the Docker CLI, persisting data and plugins in your own directories. Follow the steps to set it up. - [Customize your Installation](https://documentation.gravitee.io/apim/4.10/self-hosted-installation-guides/docker/customize-your-installation.md): Customize an API Management 4.10 Docker Compose installation through the gateway environment section. Follow the steps to change it. - [Kubernetes](https://documentation.gravitee.io/apim/4.10/self-hosted-installation-guides/kubernetes.md): Install a self-hosted API Management 4.10 platform on Kubernetes using the Helm chart. Browse the guides for your target platform. - [Vanilla Kubernetes](https://documentation.gravitee.io/apim/4.10/self-hosted-installation-guides/kubernetes/vanilla-kubernetes.md): Deploy a complete self-hosted API Management 4.10 platform on Kubernetes using Helm charts. Follow the steps to install the platform. - [AWS EKS](https://documentation.gravitee.io/apim/4.10/self-hosted-installation-guides/kubernetes/aws-eks.md): Deploy a complete self-hosted API Management 4.10 platform on Amazon Elastic Kubernetes Service. Follow the steps to install with Helm. - [Azure AKS](https://documentation.gravitee.io/apim/4.10/self-hosted-installation-guides/kubernetes/azure-aks.md): Deploy a complete self-hosted API Management 4.10 platform on Azure Kubernetes Service. Follow the steps to install with Helm. - [OpenShift](https://documentation.gravitee.io/apim/4.10/self-hosted-installation-guides/kubernetes/openshift.md): Install API Management 4.10 within OpenShift. Follow the steps to deploy the platform on an OpenShift cluster of your own. - [RPM](https://documentation.gravitee.io/apim/4.10/self-hosted-installation-guides/rpm.md): Install API Management 4.10 on RPM-based Linux such as Red Hat, CentOS, or Oracle. Follow the steps for your distribution. - [Troubleshooting](https://documentation.gravitee.io/apim/4.10/self-hosted-installation-guides/rpm/troubleshooting.md): An SELinux issue can stop Nginx opening ports 8084 and 8085 for API Management 4.10 on RPM installs. Follow the steps to correct it. - [.ZIP](https://documentation.gravitee.io/apim/4.10/self-hosted-installation-guides/.zip.md): Install API Management 4.10 from the .zip distribution. Follow the steps for a self-hosted deployment on your own machine. - [Multi-tenancy](https://documentation.gravitee.io/apim/4.10/self-hosted-installation-guides/multi-tenancy.md): Multi-tenancy in API Management 4.10 Enterprise lets one installation serve several tenants. Learn what the packages include. - [Proxy Configuration](https://documentation.gravitee.io/apim/4.10/self-hosted-installation-guides/proxy-configuration.md): API Management 4.10 components often need to reach the internet through a corporate proxy. Browse the proxy configuration guides. - [System Proxy for Backend APIs](https://documentation.gravitee.io/apim/4.10/self-hosted-installation-guides/proxy-configuration/system-proxy-for-backend-apis.md): Configure a system proxy so the API Management 4.10 Gateway can reach backend APIs. Follow the steps to set the proxy up. - [Upgrade Guides](https://documentation.gravitee.io/apim/4.10/upgrade-guides.md): Release notes and changelogs sit alongside these API Management 4.10 upgrade guides. Browse the articles for the version you are moving to. - [Update the Connection to Cloud](https://documentation.gravitee.io/apim/4.10/upgrade-guides/update-the-connection-to-cloud.md): Multi-tenancy changed how an API Management 4.10 installation connects to Cloud. Learn what to update for connected Consoles and Portals. - [APIM 4.4.+ & Hybrid Gateways](https://documentation.gravitee.io/apim/4.10/upgrade-guides/apim-4.4.+-and-hybrid-gateways.md): From the 4.4 release, API Management 4.10 gateways must explicitly disable certificate checks. Learn what changed and what you must set. - [Upgrade with RPM](https://documentation.gravitee.io/apim/4.10/upgrade-guides/upgrade-with-rpm.md): Upgrade an API Management 4.10 installation that was installed with RPM packages. Follow the steps to back up your configuration first. - [MongoDB Index Management](https://documentation.gravitee.io/apim/4.10/upgrade-guides/mongodb-index-management.md): The MongoDB indexes that improve query performance on large API Management 4.10 datasets. Follow the steps to create them manually. - [APIM 4.9 Elasticsearch Index Template Changes](https://documentation.gravitee.io/apim/4.10/upgrade-guides/apim-4.9-elasticsearch-index-template-changes.md): New Elasticsearch index templates enable extra analytics for API Management 4.10 v2 and v4 APIs. Learn which templates are updated. - [How-To Guides](https://documentation.gravitee.io/apim/4.10/how-to-guides.md): Gravitee how-to guides for API Management 4.10, from your first API to advanced use cases. Browse the tutorials that match your goal. - [Use Case Tutorials](https://documentation.gravitee.io/apim/4.10/how-to-guides/use-case-tutorials.md): Detailed use case tutorials for the API Management 4.10 platform. Browse the articles that match the problem you are solving. - [Rate Limit REST APIs](https://documentation.gravitee.io/apim/4.10/how-to-guides/use-case-tutorials/rate-limit-rest-apis.md): Rate limiting protects API Management 4.10 REST APIs and keeps performance predictable. Follow the tutorial through the main use cases. - [Configure JWT Security](https://documentation.gravitee.io/apim/4.10/how-to-guides/use-case-tutorials/configure-jwt-security.md): Apply JSON Web Token security to your API Management 4.10 APIs. Follow the steps to configure the gateway APIs and the plan. - [Add RBAC to your JWT Plan](https://documentation.gravitee.io/apim/4.10/how-to-guides/use-case-tutorials/add-rbac-to-your-jwt-plan.md): The Role-based Access Control policy adds authorization on top of an API Management 4.10 JWT plan. Follow the steps to configure your IdP. - [Aggregating multiple responses](https://documentation.gravitee.io/apim/4.10/how-to-guides/use-case-tutorials/aggregating-multiple-responses.md): Initiate multiple backend calls from API Management 4.10 and aggregate them into a single response. Follow the steps to build the API. - [Configure DCR](https://documentation.gravitee.io/apim/4.10/how-to-guides/use-case-tutorials/configure-dcr.md): Configure Dynamic Client Registration between API Management 4.10 and Access Management. Follow the steps to set up both sides. - [Secure and Expose gRPC Services](https://documentation.gravitee.io/apim/4.10/how-to-guides/use-case-tutorials/secure-and-expose-grpc-services.md): Use API Management 4.10 as a central place to secure and manage your gRPC APIs. Follow the steps to run the samples with Docker. - [Expose SOAP Webservices as REST APIs](https://documentation.gravitee.io/apim/4.10/how-to-guides/use-case-tutorials/expose-soap-webservices-as-rest-apis.md): Transform a SOAP endpoint and expose it as a REST service with API Management 4.10. Follow the steps in the Gravitee policy studio. - [Create and Publish an API Using the Management API](https://documentation.gravitee.io/apim/4.10/how-to-guides/use-case-tutorials/create-and-publish-an-api-using-the-management-api.md): Create and publish an HTTP proxy API through the Management API in API Management 4.10. Follow the steps from access token to published API. - [Create Applications and Subscriptions Using the Management API](https://documentation.gravitee.io/apim/4.10/how-to-guides/use-case-tutorials/create-applications-and-subscriptions-using-the-management-api.md): Create applications and subscriptions with the Management API in API Management 4.10. Follow the steps to change an API's security first. - [Connect to an Endpoint Using SSE](https://documentation.gravitee.io/apim/4.10/how-to-guides/use-case-tutorials/connect-to-an-endpoint-using-sse.md): Establish a Server-Sent Events channel and consume messages through API Management 4.10. Follow the steps to identify and connect an endpoint. - [Implement BFF pattern (with a Shared Policy Group)](https://documentation.gravitee.io/apim/4.10/how-to-guides/use-case-tutorials/implement-bff-pattern-with-a-shared-policy-group.md): Implement the backend-for-frontend pattern for single-page apps with an API Management 4.10 shared policy group. Learn what it handles. - [Configure & Manage the Platform](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform.md): Configuring and managing the API Management 4.10 platform, split into three sections. Browse the area you need to change. - [Gravitee Gateway](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/gravitee-gateway.md): Configure the general settings of your API Management 4.10 Gateway. Browse the guides covering each part of the configuration. - [Proxy](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/gravitee-gateway/proxy.md): Define specific proxies for specific use cases in API Management 4.10. Learn where proxy configurations can be applied to it. - [Services](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/gravitee-gateway/services.md): Update the default values for API Management 4.10 Gateway services, which are all enabled by default. Follow the steps to change them. - [Dictionaries](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/gravitee-gateway/dictionaries.md): Dictionaries let platform administrators manage values across API Management 4.10 APIs, beyond per-API properties. Learn how they work. - [Alerts](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/gravitee-gateway/alerts.md): Set alerting conditions for the API Management 4.10 Gateway from the platform settings. Follow the steps to configure them. - [Notifications](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/gravitee-gateway/notifications.md): Set up alerts and notifications based on events the API Management 4.10 Gateway recognizes. Learn what you can be notified about. - [Gateway Internal API](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/gravitee-gateway/gateway-internal-api.md): The API Management 4.10 Gateway exposes an internal API for monitoring the component. Follow the steps to configure and secure it. - [Sharding Tags](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/gravitee-gateway/sharding-tags.md): Sharding tags tag API Management 4.10 Gateways so specific APIs deploy to a particular gateway. Learn how the tags work in practice. - [Tenants](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/gravitee-gateway/tenants.md): Tenants let an API Management 4.10 API select a backend endpoint per deployment. Learn how the multi-endpoint capability works. - [Header IDs](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/gravitee-gateway/header-ids.md): The API Management 4.10 Gateway generates an id for every request and sets it in a header. Learn how to change the header names. - [Gateway Cluster sync with Redis](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/gravitee-gateway/gateway-cluster-sync-with-redis.md): Enable and configure Gateway Cluster sync with Redis in API Management 4.10. Follow the steps to set the synchronization up. - [Gateway Cluster sync with Redis using Docker](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/gravitee-gateway/gateway-cluster-sync-with-redis/gateway-cluster-sync-with-redis-using-docker.md): Gateway Cluster sync uses Redis to synchronize API Management 4.10 state across gateways. Follow the steps to configure it with Docker. - [Gateway Cluster sync with Redis using Kubernetes (Helm)](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/gravitee-gateway/gateway-cluster-sync-with-redis/gateway-cluster-sync-with-redis-using-kubernetes-helm.md): Gateway Cluster sync uses Redis to synchronize API Management 4.10 state across gateways. Follow the steps to configure it with Helm. - [Management API](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/management-api.md): Configure general API Management 4.10 Management API settings in the gravitee.yaml file. Browse the configuration guides you need. - [MAPI Internal API](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/management-api/mapi-internal-api.md): The API Management 4.10 Management API exposes its own internal API for monitoring. Follow the steps to configure and secure it. - [Settings](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/management-api/settings.md): Configure management settings from the Settings page of the API Management 4.10 Console. Learn what each setting controls. - [Cleanup Services](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/management-api/cleanup-services.md): API Management 4.10 stores event and audit data that grows over time. Learn how the cleanup services trim those collections. - [Manage Organizations & Environments](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/manage-organizations-and-environments.md): An organization is a logical part of a company sharing settings in API Management 4.10, containing environments. Learn the model. - [Authentication](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/manage-organizations-and-environments/authentication.md): API Management 4.10 natively supports several authentication types for the Console. Compare the options before you configure one. - [Gravitee Access Management](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/manage-organizations-and-environments/authentication/gravitee-access-management.md): Gravitee offers Access Management alongside API Management 4.10 for full identity handling. Learn how the two products relate. - [Authentication Providers](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/manage-organizations-and-environments/authentication/authentication-providers.md): Configure in-memory users, LDAP, or Active Directory authentication for API Management 4.10. Follow the steps for your provider. - [Social Providers](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/manage-organizations-and-environments/authentication/social-providers.md): Let users sign in to API Management 4.10 with a GitHub OAuth application or another social provider. Follow the steps to configure it. - [OpenID Connect](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/manage-organizations-and-environments/authentication/openid-connect.md): OpenID Connect is an authentication protocol built on OAuth 2.0, supported by API Management 4.10. Follow the steps to configure it. - [Microsoft Entra ID](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/manage-organizations-and-environments/authentication/microsoft-entra-id.md): Set up API Management 4.9 Console authentication with Microsoft Entra ID. Follow the steps to configure the identity provider. - [Roles and Groups Mapping](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/manage-organizations-and-environments/authentication/roles-and-groups-mapping.md): Assign roles to API Management 4.10 users through groups rather than individually. Learn how group and role mapping works. - [User Management](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/manage-organizations-and-environments/user-management.md): Set up and manage roles, scopes, permissions and users in API Management 4.10. Follow the steps to configure your organization. - [Applications](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/manage-organizations-and-environments/applications.md): An application represents a consumer of your API Management 4.10 APIs and holds its subscriptions. Learn how applications work. - [APIM Console](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/manage-organizations-and-environments/apim-console.md): The API Management 4.10 Console is the graphical interface for configuring gateways and creating APIs. Learn what it lets you do. - [Developer Portal](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/manage-organizations-and-environments/developer-portal.md): The Developer Portal gives API consumers a simplified interface onto your API Management 4.10 APIs. Learn how to configure it. - [SMTP Configuration](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/manage-organizations-and-environments/smtp-configuration.md): The SMTP configuration API Management 4.10 uses for sending email notifications. Follow the steps to point it at your mail server. - [CORS Configuration](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/manage-organizations-and-environments/cors-configuration.md): CORS lets a web page request resources from another domain in API Management 4.10. Follow the steps to configure it for your organization. - [Support](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/manage-organizations-and-environments/support.md): Gravitee encourages you to engage your team first if your API Management 4.10 installation has issues. Learn what support covers. - [Debug Logging](https://documentation.gravitee.io/apim/4.10/configure-and-manage-the-platform/debug-logging.md): API Management 4.10 supports standard Java logging per component, plus debug logging for specific areas. Learn how to enable it. - [Create & Configure APIs](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis.md): Creating and configuring API Management 4.10 APIs, split into five sections from definitions to v2 and v4 configuration. Browse what you need. - [Gravitee API Definitions](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/gravitee-api-definitions.md): Gravitee v2 and v4 API definitions describe the Gateway APIs consumers call in API Management 4.10. Compare the two definitions. - [v2 and v4 API Comparison](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/gravitee-api-definitions/v2-and-v4-api-comparison.md): v2 and v4 API Management 4.10 APIs differ in functionality and supported features. Compare them before you choose a definition. - [Execution Engine](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/gravitee-api-definitions/execution-engine.md): The execution engine is the Gateway runtime that executes API Management 4.10 APIs and policy flows. Learn its improvements and policy support. - [Create APIs](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/create-apis.md): Create or import v2 and v4 APIs in API Management 4.10. Browse the articles covering each creation and import path available. - [v4 API Creation Wizard](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/create-apis/v4-api-creation-wizard.md): Create a v4 API with the API Management 4.10 creation wizard, from API details through to entrypoints. Follow the steps in order. - [v2 API Creation Wizard](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/create-apis/v2-api-creation-wizard.md): The v2 API definition is a JSON representation of your Gateway API. Follow the API Management 4.10 creation wizard step by step. - [Import APIs](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/create-apis/import-apis.md): Import an API into API Management 4.10 as a Gravitee definition or an OpenAPI specification. Follow the steps to import an OpenAPI spec. - [Migrate APIs](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/create-apis/4.9-migrate-apis.md): Migrate existing v2 APIs to v4 with the API Management 4.10 Migration feature. Follow the prerequisites and steps to migrate them. - [Search for APIs in the Console](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/create-apis/search-for-apis-in-the-console.md): Filter the list of APIs that appear in the API Management 4.10 Console. Follow the steps to search, and see the worked search examples. - [Promote APIs](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/create-apis/promote-apis.md): Promote an API Management 4.10 API from one environment to another. Follow the steps to request and then approve a promotion. - [Configure v4 APIs](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v4-apis.md): The articles covering how to configure a v4 API in API Management 4.10, from endpoints to response templates. Browse what you need. - [General Settings](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v4-apis/general-settings.md): Every v4 API in API Management 4.10 has general settings on its Configuration page. Learn what you can view and change there. - [API Lifecycle States](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v4-apis/api-lifecycle-states.md): A v4 API lifecycle state controls its visibility on the API Management 4.10 Developer Portal. Learn the allowed transitions and retirement flow. - [Entrypoints](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v4-apis/entrypoints.md): Entrypoints define how consumers reach a v4 API Management 4.10 API, for proxy or message APIs. Compare the entrypoint types. - [HTTP GET](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v4-apis/entrypoints/http-get.md): Configure the HTTP GET entrypoint parameters for a v4 API Management 4.10 API. Follow the steps to set them for your own API. - [HTTP POST](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v4-apis/entrypoints/http-post.md): Configure the HTTP POST entrypoint parameters for a v4 API Management 4.10 API. Follow the steps to set them for your own API. - [Server-Sent Events](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v4-apis/entrypoints/server-sent-events.md): Configure the Server-Sent Events entrypoint for a v4 API Management 4.10 API, including quality of service. Follow the steps to set it. - [Webhook](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v4-apis/entrypoints/webhook.md): Declare the webhook identifier to use the Webhook entrypoint on a v4 API Management 4.10 API. Follow the steps to configure it. - [WebSocket](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v4-apis/entrypoints/websocket.md): Configure the WebSocket entrypoint parameters for a v4 API Management 4.10 API. Follow the steps to set them for your API. - [Endpoints](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v4-apis/endpoints.md): Endpoints connect a v4 API Management 4.10 API to its backend, for proxy or message APIs. Compare the endpoint types available. - [Azure Service Bus](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v4-apis/endpoints/azure-service-bus.md): Configure the Azure Service Bus endpoint for a v4 message API in API Management 4.10. Follow the steps through the initial settings. - [Kafka](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v4-apis/endpoints/kafka.md): The Kafka endpoint mediates between a Kafka cluster and an HTTP client in API Management 4.10. Follow the steps to set the bootstrap servers. - [Mock](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v4-apis/endpoints/mock.md): The Mock endpoint emulates a backend HTTP server so you can test an API Management 4.10 v4 API. Follow the steps to configure it. - [MQTT5](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v4-apis/endpoints/mqtt5.md): Configure the MQTT5 endpoint for a v4 message API in API Management 4.10. Learn the server information it needs and how it works. - [Solace](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v4-apis/endpoints/solace.md): Configure the Solace endpoint for a v4 message API in API Management 4.10. Learn the configuration it needs and how it is implemented. - [RabbitMQ](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v4-apis/endpoints/rabbitmq.md): Configure the RabbitMQ endpoint for a v4 message API in API Management 4.10. Follow the steps through the initial settings. - [User Permissions](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v4-apis/user-permissions.md): Configure user and group access to your API Management 4.10 APIs. Follow the steps to add members and set their permissions. - [Quality of Service](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v4-apis/quality-of-service.md): Quality of Service sets the delivery guarantee for an asynchronous API Management 4.10 API. Compare the QoS levels and their compatibility. - [Response Templates](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v4-apis/response-templates.md): Change the default values in an API Management 4.10 response with a response template. Follow the steps to create one of your own. - [CORS](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v4-apis/cors.md): CORS lets a web page request resources from another domain through your API Management 4.10 v4 API. Follow the steps to configure it. - [Health-checks](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v4-apis/health-checks.md): Health checks monitor the availability of endpoints behind a v4 HTTP proxy API in API Management 4.10. Follow the steps to configure them. - [Documentation](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v4-apis/documentation.md): Add documentation to a v4 API from the API Management 4.10 Console so consumers know how to use it. Follow the steps to add pages and folders. - [Audit Logs](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v4-apis/audit-logs.md): View and filter the audit logs and events recorded for a v4 API in API Management 4.10. Follow the steps to access and filter them. - [Version History](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v4-apis/version-history.md): Version History shows a v4 API's deployment history and the JSON definition of each version in API Management 4.10. Follow the steps to view it. - [Configure v2 APIs](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v2-apis.md): The articles covering how to configure a v2 API in API Management 4.10, from proxy settings through to access. Browse what you need. - [General Settings](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v2-apis/general-settings.md): The general settings for a v2 API Management 4.10 API, grouped into three sections. Follow the steps to access and edit them. - [Proxy Settings](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v2-apis/proxy-settings.md): Configure the proxy settings of a v2 API Management 4.10 API, covering entrypoints and CORS. Follow the steps to change them. - [Load-balancing, Failover, & Health-checks](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v2-apis/load-balancing-failover-and-health-checks.md): API Management 4.10 provides load balancing, failover, and health checks for v2 API backends. Compare the three backend services. - [Service Discovery](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v2-apis/service-discovery.md): Bind the backend endpoints of an API Management 4.10 API to a HashiCorp Consul service. Follow the steps to configure discovery. - [User and Group Access](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v2-apis/user-and-group-access.md): Configure user and group access to your v2 API Management 4.10 APIs. Follow the steps to add members and set their permissions. - [Documentation](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/configure-v2-apis/documentation.md): Create, import, and add metadata to v2 API documentation from the API Management 4.10 Console. Follow the steps to publish it. - [Apply Policies](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies.md): Policies are customizable rules the API Management 4.10 Gateway runs during an API transaction. Compare policy support across v2 and v4 APIs. - [v4 API Policy Studio](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/v4-api-policy-studio.md): The v4 Policy Studio designs flows for APIs using the v4 API Management 4.10 definition. Follow the example to create a flow and add a policy. - [v2 API Policy Studio](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/v2-api-policy-studio.md): The v2 Policy Studio designs flows for APIs using the v2 API Management 4.10 definition. Follow the steps to design and configure flow mode. - [Debug Mode](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/debug-mode.md): Debug mode diagnoses v2 and v4 proxy API flows in API Management 4.10. Learn how to read the debug timeline and the inspector. - [Shared Policy Groups](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/shared-policy-groups.md): Define a collection of API Management 4.10 policies centrally and reuse them across APIs. Follow the steps to create and add a group. - [Resources](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/resources.md): Resources supply reusable configuration to API Management 4.10 policies. Compare the resource types and follow the steps to create one. - [Custom Policies](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/custom-policies.md): Policies act as a proxy controller in the API Management 4.10 Gateway. Follow the steps to generate a policy skeleton and apply your own. - [Policy Reference](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference.md): Every policy you can apply to a Gravitee API in API Management 4.10, linked to its own reference page. Find the policy you need. - [AI - MCP ACL](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/ai-mcp-acl.md): The MCP ACL policy controls access to MCP server functionality in API Management 4.10 with an access control list. Learn how to configure it. - [AI - Prompt Guard Rails](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/ai-prompt-guard-rails.md): The Prompt Guard Rails policy evaluates prompts for inappropriate or malicious content in API Management 4.10. Learn what it detects. - [AI - Prompt Token Tracking](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/ai-prompt-token-tracking.md): The Prompt Token Tracking policy counts tokens sent to and received from an AI API in API Management 4.10. Learn how to configure it. - [AI - Token Rate Limit](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/ai-token-rate-limit.md): The Token Rate Limit policy caps inbound and outbound tokens over a period in API Management 4.10. Learn how to configure the limits. - [API Key](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/api-key.md): The API Key policy checks API keys during request processing so only approved apps reach your API Management 4.10 API. Learn how to set it. - [Assign Attributes](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/assign-attributes.md): The Assign Attributes policy sets request and execution context attributes in API Management 4.10. Learn how to configure the variables. - [Assign Content](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/assign-content.md): The Assign Content policy changes or transforms request and response bodies in API Management 4.10. Learn how to configure the transformation. - [Assign Metrics](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/assign-metrics.md): The Assign Metrics policy pushes extra metrics alongside the native request metrics in API Management 4.10. Learn how to configure it. - [Avro to JSON](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/avro-to-json.md): The Avro to JSON policy applies a transformation to request, response, or message content in API Management 4.10. Learn how to configure it. - [Avro to Protobuf](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/avro-to-protobuf.md): The Avro to Protobuf policy applies a transformation to request, response, or message content in API Management 4.10. Learn how to set it. - [AWS Lambda](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/aws-lambda.md): The AWS Lambda policy invokes a Lambda function during API Management 4.10 proxy or message requests. Learn how the response is returned. - [Basic Authentication](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/basic-authentication.md): The Basic Authentication policy manages basic auth headers on API Management 4.10 calls and compares credentials. Learn how to configure it. - [Cache](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/cache.md): The Cache policy stores upstream responses in API Management 4.10 so repeat calls skip the backend. Learn how to configure the cache. - [Circuit Breaker](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/circuit-breaker.md): The Circuit Breaker policy switches backend or fails with 503 on errors or latency in API Management 4.10. Learn the guarantees it gives. - [CloudEvents](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/cloudevents.md): The CloudEvents policy builds a CloudEvents JSON object from messages in API Management 4.10. Learn how the data content type is set. - [Custom Query Parameters Parser](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/custom-query-parameters-parser.md): The Custom Query Parameters Parser policy controls how API Management 4.10 reads query parameters. Learn what you can configure with it. - [Data Cache](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/data-cache.md): The Data Cache policy gets, sets, and expires key-value pairs in an API Management 4.10 cache resource. Learn how to configure it. - [Data Logging Masking](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/data-logging-masking.md): The Data Logging Masking policy conceals sensitive data in API Management 4.10 logs using JSONPath rules. Learn how to configure it. - [Dynamic Routing](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/dynamic-routing.md): The Dynamic Routing policy dispatches calls to different targets or rewrites URIs in API Management 4.10. Learn how to configure it. - [Generate HTTP Signature](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/generate-http-signature.md): The Generate HTTP Signature policy adds HTTP Signature authentication to API Management 4.10 calls. Learn how to configure the signature. - [Generate JWT](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/generate-jwt.md): The Generate JWT policy issues a signed JWT with configurable claims for API Management 4.10 to forward to a backend. Learn how to set it. - [GeoIP Filtering](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/geoip-filtering.md): The GeoIP Filtering policy controls access to an API Management 4.10 API by IP address, country, or distance. Learn how to configure it. - [GraphQL Rate Limit](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/graphql-rate-limit.md): The GraphQL Rate Limit policy applies basic rate limiting to GraphQL queries in API Management 4.10. Learn how to configure the limits. - [Groovy](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/4.9-groovy.md): The Groovy policy runs a Groovy script at any stage of request processing on the API Management 4.10 Gateway. Learn how to configure it. - [HTML to JSON](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/html-to-json.md): The HTML to JSON transformation policy converts response content in API Management 4.10. Learn how to configure the mapping it applies. - [HTTP Callout](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/http-callout.md): The HTTP Callout policy invokes an external URL and stores the response in API Management 4.10 variables. Learn how to configure it. - [HTTP Redirect](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/http-redirect.md): The HTTP Redirect policy sends RFC 7231 redirect responses to clients from API Management 4.10. Learn how to configure the redirect. - [HTTP Signature](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/http-signature.md): The HTTP Signature policy enforces signature-based authentication on API Management 4.10 calls. Learn how to configure the signature. - [InterOPS](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/interops.md): InterOPS is a French interoperability standard establishing trust between organizations, supported by API Management 4.10. Learn how it applies. - [Interrupt](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/interrupt.md): The Interrupt policy breaks request processing in API Management 4.10 when a condition is met. Learn how to configure the condition. - [IP Filtering](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/ip-filtering.md): The IP Filtering policy allows or denies specific IP addresses on an API Management 4.10 API. Learn how to configure the filters. - [JavaScript](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/javascript.md): The JavaScript policy runs scripts at any stage of API Management 4.10 Gateway processing. Learn how to configure the policy. - [JSON to JSON](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/json-to-json.md): The JSON to JSON policy applies a transformation to request, response, or message content in API Management 4.10. Learn how to set it. - [JSON to XML](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/json-to-xml.md): The JSON to XML policy converts JSON payloads to XML before API Management 4.10 sends or returns them. Learn how to configure it. - [JSON Threat Protection](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/json-threat-protection.md): The JSON Threat Protection policy validates a request body against structural limits in API Management 4.10. Learn how to set the limits. - [JSON Validation](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/json-validation.md): The JSON Validation policy validates payloads against a JSON schema in API Management 4.10. Learn how to configure the schema it uses. - [JWS Validator](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/jws-validator.md): The JWS Validator policy checks token signature, certificate, and expiry before API Management 4.10 calls the backend. Learn how to set it. - [JWT Validator](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/4.9-jwt-validator.md): The JWT policy validates a token's signature and expiry before API Management 4.10 calls the backend. Learn how to configure it. - [Kafka ACL](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/kafka-acl.md): The Kafka ACL policy defines access control lists on cluster resources proxied by API Management 4.10. Learn how to configure them. - [Kafka Message Filtering](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/kafka-message-filtering.md): The Kafka Message Filtering policy controls which Kafka messages reach consumers through API Management 4.10. Learn how to configure it. - [Kafka Offloading](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/kafka-offloading.md): The Kafka Offloading policy controls how message content is offloaded to storage in API Management 4.10. Learn how to configure it. - [Kafka Quota](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/kafka-quota.md): The Kafka Quota policy enforces limits on the data Kafka clients exchange through API Management 4.10. Learn how to configure quotas. - [Kafka Topic Mapping](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/kafka-topic-mapping.md): The Kafka Topic Mapping policy maps one topic name to another so clients can use their own in API Management 4.10. Learn how to set it. - [Kafka Transform Key](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/kafka-transform-key.md): The Kafka Transform Key policy adds a custom message key in API Management 4.10 so you can control partitioning. Learn how to set it. - [Keyless](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/keyless.md): The Keyless security policy treats every request to an API Management 4.10 API as valid and blocks none. Learn when to use it. - [Latency](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/latency.md): The Latency policy adds artificial delay to a request or a response in API Management 4.10. Learn how to configure the delay. - [Maven Archetype](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/maven-archetype.md): A policy is a step in the API Management 4.10 request and response proxy chain. Learn how to generate one with the Maven archetype. - [Message Filtering](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/message-filtering.md): The Message Filtering policy lets a publisher control which messages are streamed to subscribers in API Management 4.10. Learn how to set it. - [Metrics Reporter](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/metrics-reporter.md): The Metrics Reporter policy pushes request metrics to a custom endpoint from API Management 4.10. Learn how to configure the reporter. - [Mock](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/mock.md): The Mock policy returns mock responses from API Management 4.10 so you can test without a backend. Learn how to configure the mock. - [mTLS](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/mtls.md): The mTLS policy verifies that a client certificate is present on an API Management 4.10 request. Learn how to configure the policy. - [OAS Validation](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/oas-validation.md): The OAS Validation policy checks requests and responses against an embedded OpenAPI specification in API Management 4.10. Learn how. - [OAuth2](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/oauth2.md): The OAuth2 policy checks access token validity through introspection in API Management 4.10. Learn how to configure the policy. - [Generic OAuth2 Authorization Server](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/oauth2/generic-oauth2-authorization-server.md): The Generic OAuth2 Authorization Server resource introspects an access token for API Management 4.10. Learn how to configure it. - [Gravitee.io AM Authorization Server](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/oauth2/gravitee.io-am-authorization-server.md): The Access Management authorization server resource introspects a token issued by Gravitee for API Management 4.10. Learn how to set it. - [OpenID Connect UserInfo](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/openid-connect-userinfo.md): The OpenID Connect UserInfo policy fetches user information from an OAuth2 resource in API Management 4.10. Learn how to configure it. - [Override HTTP Method](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/override-http-method.md): The Override HTTP Method policy replaces the method sent by the consumer in API Management 4.10. Learn how to configure the override. - [Protobuf to JSON](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/protobuf-to-json.md): The Protobuf to JSON policy applies a transformation to request, response, or message content in API Management 4.10. Learn how to set it. - [Rate Limit](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/rate-limit.md): API Management 4.10 offers three rate limit policies for capping request volume. Compare them and learn how to configure each one. - [Regex Threat Protection](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/regex-threat-protection.md): The Regex Threat Protection policy inspects request headers, path, parameters, and body in API Management 4.10. Learn how to configure it. - [Request Content Limit](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/request-content-limit.md): The Request Content Limit policy caps the request content length API Management 4.10 accepts. Learn how to configure the maximum. - [Request Validation](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/request-validation.md): The Request Validation policy validates incoming HTTP requests against rules in API Management 4.10. Learn how to define the rules. - [Resource Filtering](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/resource-filtering.md): The Resource Filtering policy restricts or allows access to specific REST resources in API Management 4.10. Learn how to configure it. - [REST to SOAP](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/rest-to-soap.md): The REST to SOAP policy exposes a SOAP backend as a REST API through API Management 4.10. Learn how the SOAP envelope is passed on. - [Retry](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/retry.md): The Retry policy replays requests in API Management 4.10 when the backend fails or a condition matches. Learn how to configure it. - [Role-based Access Control (RBAC)](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/role-based-access-control-rbac.md): The Role-based Access Control policy restricts a resource to the roles you specify in API Management 4.10. Learn how to configure it. - [SSL Enforcement](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/ssl-enforcement.md): The SSL Enforcement policy restricts access to requests meeting your SSL criteria in API Management 4.10. Learn how to configure it. - [Status Code Transformation](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/status-code-transformation.md): The Status Code Transformation policy rewrites the upstream response status code in API Management 4.10. Learn how to configure it. - [Template](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/template.md): A policy template to fork as a quick starter for your own API Management 4.10 policy. Learn what the skeleton gives you to build on. - [Traffic Shadowing](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/traffic-shadowing.md): The Traffic Shadowing policy asynchronously copies API Management 4.10 traffic to another service. Learn how to configure the copy. - [Transform Headers](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/transform-headers.md): The Transform Headers policy overrides headers on incoming or outgoing API Management 4.10 traffic. Learn how to configure it. - [Transform Query Parameters](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/transform-query-parameters.md): The Transform Query Parameters policy overrides incoming query parameters in API Management 4.10. Learn how to configure the override. - [URL Rewriting](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/url-rewriting.md): The URL Rewriting policy rewrites URLs in an API Management 4.10 response header or response body. Learn how to configure it. - [WS Security Authentication](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/ws-security-authentication.md): The WS Security Authentication policy secures SOAP API calls in API Management 4.10 by comparing credentials. Learn how to configure it. - [WS Security Sign](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/ws-security-sign.md): The WS Security Sign policy signs SOAP messages in API Management 4.10 to guarantee integrity. Learn how to configure the signature. - [XML to JSON](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/xml-to-json.md): The XML to JSON policy transforms XML content into JSON content in API Management 4.10. Learn how to configure the transformation. - [XML Threat Protection](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/xml-threat-protection.md): The XML Threat Protection policy validates an XML request body against structural limits in API Management 4.10. Learn how to set them. - [XML Validation](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/xml-validation.md): The XML Validation policy validates XML against an XSD schema in API Management 4.10, rejecting bad requests. Learn how to configure it. - [XSLT](https://documentation.gravitee.io/apim/4.10/create-and-configure-apis/apply-policies/policy-reference/xslt.md): The XSLT policy applies an XSL transformation to an XML request or response body in API Management 4.10. Learn how to configure it. - [Secure & Expose APIs](https://documentation.gravitee.io/apim/4.10/secure-and-expose-apis.md): Plans, applications, and subscriptions govern how an API Management 4.10 API is exposed to consumers. Learn how the three fit together. - [Plans](https://documentation.gravitee.io/apim/4.10/secure-and-expose-apis/plans.md): A plan is the service and access layer an API Management 4.10 API needs before you expose it. Compare the plan types available. - [Keyless](https://documentation.gravitee.io/apim/4.10/secure-and-expose-apis/plans/keyless.md): A keyless plan allows public access to an API Management 4.10 API with no authentication. Learn what it offers and when to use it. - [API Key](https://documentation.gravitee.io/apim/4.10/secure-and-expose-apis/plans/api-key.md): The API Key plan verifies keys during request processing so only approved applications reach your API Management 4.10 API. Learn how. - [OAuth2](https://documentation.gravitee.io/apim/4.10/secure-and-expose-apis/plans/oauth2.md): An OAuth 2.0 plan gives client applications secure, delegated access to an API Management 4.10 API. Learn how the standard works. - [JWT](https://documentation.gravitee.io/apim/4.10/secure-and-expose-apis/plans/jwt.md): A JWT plan secures an API Management 4.10 API with signed claims passed between two parties. Learn how the token is validated. - [Push](https://documentation.gravitee.io/apim/4.10/secure-and-expose-apis/plans/push.md): A Push plan suits an API Management 4.10 API with an entrypoint that sends message payloads, such as Webhook. Learn when to use it. - [mTLS](https://documentation.gravitee.io/apim/4.10/secure-and-expose-apis/plans/mtls.md): An mTLS plan requires a client certificate when connecting to an API Management 4.10 API. Learn how the certificate is used. - [Applications](https://documentation.gravitee.io/apim/4.10/secure-and-expose-apis/applications.md): Consumers register an application and subscribe to a published plan to reach API Management 4.10 APIs. Learn what applications do. - [Create an Application](https://documentation.gravitee.io/apim/4.10/secure-and-expose-apis/applications/create-an-application.md): Create an application in the API Management 4.10 Console so a consumer can subscribe to a plan. Follow the steps to set one up. - [Global Settings](https://documentation.gravitee.io/apim/4.10/secure-and-expose-apis/applications/global-settings.md): An application's global settings hold its details and a danger zone for destructive actions in API Management 4.10. Learn what each does. - [User and Group Access](https://documentation.gravitee.io/apim/4.10/secure-and-expose-apis/applications/user-and-group-access.md): Manage user and group access to an individual API Management 4.10 application. Follow the steps to add and remove members. - [Subscriptions](https://documentation.gravitee.io/apim/4.10/secure-and-expose-apis/subscriptions.md): A subscription is how an API Management 4.10 publisher controls who uses their API and on what terms. Learn how subscriptions work. - [Subscription Requests](https://documentation.gravitee.io/apim/4.10/secure-and-expose-apis/subscriptions/subscription-requests.md): A subscription is a contract between an API Management 4.10 publisher and a consumer. Learn how requests are made and approved. - [Manage Subscriptions](https://documentation.gravitee.io/apim/4.10/secure-and-expose-apis/subscriptions/manage-subscriptions.md): Find and manage an application's subscriptions from the API Management 4.10 Console. Follow the steps to review and change them. - [Transfer Subscriptions](https://documentation.gravitee.io/apim/4.10/secure-and-expose-apis/subscriptions/transfer-subscriptions.md): Transfer an active API Management 4.10 subscription to another plan with the same security type. Follow the steps to move it. - [Developer Portal](https://documentation.gravitee.io/apim/4.10/developer-portal.md): The Developer Portal 4.10 is the web application where consumers discover and consume your APIs. Learn what the portal offers. - [New Developer Portal](https://documentation.gravitee.io/apim/4.10/developer-portal/new-developer-portal.md): The features and functionality of the New Developer Portal 4.10. Browse the tiles to find the area you want to configure. - [Catalog](https://documentation.gravitee.io/apim/4.10/developer-portal/new-developer-portal/catalog.md): The Catalog lets consumers discover the APIs published in the New Developer Portal 4.10. Learn how discovery works for them. - [Create an Application](https://documentation.gravitee.io/apim/4.10/developer-portal/new-developer-portal/create-an-application.md): Create an application in the New Developer Portal 4.10 and subscribe it to a plan. Follow the steps unless the API is keyless. - [Enable the New Developer Portal](https://documentation.gravitee.io/apim/4.10/developer-portal/new-developer-portal/configure-the-new-portal.md): The New Developer Portal 4.10 has an updated interface and more customization. Follow the steps to enable it for your environment. - [Layout and Theme](https://documentation.gravitee.io/apim/4.10/developer-portal/new-developer-portal/layout-and-theme.md): Set the layout and theme of the New Developer Portal 4.10, and browse the catalog by category. Learn what you can change. - [Customize the homepage](https://documentation.gravitee.io/apim/4.10/developer-portal/new-developer-portal/customize-the-homepage.md): Customize the New Developer Portal 4.10 homepage with standard Markdown. Follow the steps to change what consumers see first. - [Customize the navigation](https://documentation.gravitee.io/apim/4.10/developer-portal/new-developer-portal/customize-the-navigation.md): Customize New Developer Portal 4.10 navigation and manage which APIs appear in it. Follow the steps to organize the portal. - [Gravitee Markdown components](https://documentation.gravitee.io/apim/4.10/developer-portal/new-developer-portal/gravitee-markdown-components.md): Customize the New Developer Portal 4.10 with Gravitee Markdown components. Learn what the components give you to work with. - [Application Logs](https://documentation.gravitee.io/apim/4.10/developer-portal/new-developer-portal/application-logs.md): API subscribers view paginated logs for every API their application subscribes to in the Developer Portal 4.10. Learn how to read them. - [Configure Webhook Subscriptions](https://documentation.gravitee.io/apim/4.10/developer-portal/new-developer-portal/configure-webhook-subscriptions.md): Configure a webhook subscription from the Developer Portal 4.10 catalog. Follow the steps to set it up for your application. - [Configure Authentication](https://documentation.gravitee.io/apim/4.10/developer-portal/new-developer-portal/configure-authentication.md): Configure authentication for the New Developer Portal 4.10 so only authorized users reach it. Browse the authentication options. - [Configure authentication with Login and password](https://documentation.gravitee.io/apim/4.10/developer-portal/new-developer-portal/configure-authentication/configure-authentication-with-login-and-password.md): Require a username and password to sign in to the New Developer Portal 4.10. Follow the steps to configure the login method. - [Configure authentication with SSO](https://documentation.gravitee.io/apim/4.10/developer-portal/new-developer-portal/configure-authentication/configure-authentication-with-sso.md): Require a single sign-on login before users can reach the New Developer Portal 4.10. Follow the steps to configure SSO access. - [Enforce User Authentication](https://documentation.gravitee.io/apim/4.10/developer-portal/new-developer-portal/configure-authentication/enforce-user-authentication.md): Enforce user authentication so only signed-in users can reach your New Developer Portal 4.10. Follow the steps to enable it. - [Manage subscriptions](https://documentation.gravitee.io/apim/4.10/developer-portal/new-developer-portal/manage-subscriptions.md): Subscribe to APIs and manage your subscriptions in the New Developer Portal 4.10. Follow the steps unless the API is keyless. - [Classic Developer Portal](https://documentation.gravitee.io/apim/4.10/developer-portal/classic-developer-portal.md): The features and functionality of the classic Developer Portal 4.10. Browse the tiles to find the area you need to change. - [Configuration File](https://documentation.gravitee.io/apim/4.10/developer-portal/classic-developer-portal/configuration-file.md): The Developer Portal 4.10 configuration file is assets/config.json. Browse the default configuration and what you can change in it. - [Portal Settings](https://documentation.gravitee.io/apim/4.10/developer-portal/classic-developer-portal/portal-settings.md): Reach the Developer Portal 4.10 settings from the Management Console sidebar. Follow the steps to open and change the settings. - [Layout and Theme](https://documentation.gravitee.io/apim/4.10/developer-portal/classic-developer-portal/layout-and-theme.md): Administrators can change the layout and theme of the Developer Portal 4.10 to control how APIs are presented. Learn what you can customize. - [Manage Users](https://documentation.gravitee.io/apim/4.10/developer-portal/classic-developer-portal/manage-users.md): Users reaching the Developer Portal 4.10 from the Management Console are signed in automatically. Learn how user management works. - [Webhook Subscriptions](https://documentation.gravitee.io/apim/4.10/developer-portal/classic-developer-portal/webhook-subscriptions.md): API consumers configure their webhook subscriptions from the Developer Portal 4.10. Learn what the configuration involves for them. - [Create an Application](https://documentation.gravitee.io/apim/4.10/developer-portal/classic-developer-portal/create-an-application.md): Unless an API has a keyless plan, a consumer registers an application in the Developer Portal 4.10 and subscribes. Follow the steps. - [API Documentation](https://documentation.gravitee.io/apim/4.10/developer-portal/classic-developer-portal/api-documentation.md): Administrators use site-wide documentation in the Developer Portal 4.10 to share best practices and configure pages. Learn what you can set. - [Govern APIs](https://documentation.gravitee.io/apim/4.10/govern-apis.md): The API governance features API Management 4.10 offers, from scoring through to federation. Browse what is available to you. - [Federation](https://documentation.gravitee.io/apim/4.10/govern-apis/federation.md): Federation brings APIs from other gateways and brokers into API Management 4.10 for a single catalogue. Learn how it works. - [Integrations](https://documentation.gravitee.io/apim/4.10/govern-apis/federation/integrations.md): Integrations connect Gravitee to third-party API gateways and event brokers for API Management 4.10. Learn what they provide. - [Discovery](https://documentation.gravitee.io/apim/4.10/govern-apis/federation/discovery.md): Discovery is how an integration connects to a third-party management API and finds its assets for API Management 4.10. Learn the process. - [Federated APIs](https://documentation.gravitee.io/apim/4.10/govern-apis/federation/federated-apis.md): Federated APIs are one of the three main v4 Gravitee API types in API Management 4.10. Learn what they can and cannot do. - [Federation Agent Service Account](https://documentation.gravitee.io/apim/4.10/govern-apis/federation/federation-agent-service-account.md): Create a service account so the federation agent can authenticate to your API Management 4.10 installation. Follow the steps. - [3rd-Party Providers](https://documentation.gravitee.io/apim/4.10/govern-apis/federation/3rd-party-providers.md): Each third-party API gateway or event broker has its own integration for federating APIs into API Management 4.10. Compare the providers. - [Apigee X](https://documentation.gravitee.io/apim/4.10/govern-apis/federation/3rd-party-providers/apigee-x.md): Federate APIs from Apigee X, Google Cloud's API management solution, into API Management 4.10. Learn how the integration works. - [AWS API Gateway](https://documentation.gravitee.io/apim/4.10/govern-apis/federation/3rd-party-providers/aws-api-gateway.md): Federate APIs from AWS API Gateway, the built-in AWS solution, into API Management 4.10. Learn how the integration works for you. - [Multi-Account and Multi-Region AWS API Gateway Federation](https://documentation.gravitee.io/apim/4.10/govern-apis/federation/3rd-party-providers/aws-api-gateway/multi-account-and-multi-region-aws-api-gateway-federation.md): Configure the AWS API Gateway federation agent to ingest APIs across accounts and regions into API Management 4.10. Follow the steps. - [AWS IAM Role-Based Authentication](https://documentation.gravitee.io/apim/4.10/govern-apis/federation/3rd-party-providers/aws-api-gateway/aws-iam-role-based-authentication.md): IAM role-based authentication lets the AWS federation agent work without static keys in API Management 4.10. Learn how to configure it. - [Azure API Management](https://documentation.gravitee.io/apim/4.10/govern-apis/federation/3rd-party-providers/azure-api-management.md): API Management 4.10 federates APIs from Azure API Management, Azure's built-in solution. Learn how the integration works for you. - [Confluent Platform](https://documentation.gravitee.io/apim/4.10/govern-apis/federation/3rd-party-providers/confluent-platform.md): Federate APIs from Confluent Platform, the event streaming platform built on Kafka, into API Management 4.10. Learn how it works. - [IBM API Connect](https://documentation.gravitee.io/apim/4.10/govern-apis/federation/3rd-party-providers/ibm-api-connect.md): Federate APIs from IBM API Connect, cloud or on-premise, into API Management 4.10. Learn how the integration works for you. - [Mulesoft Anypoint](https://documentation.gravitee.io/apim/4.10/govern-apis/federation/3rd-party-providers/mulesoft-anypoint.md): Federate APIs from the Mulesoft Anypoint Platform into API Management 4.10. Learn how the integration discovers and ingests them. - [Solace](https://documentation.gravitee.io/apim/4.10/govern-apis/federation/3rd-party-providers/solace.md): Federate event APIs from the Solace Event Portal into API Management 4.10. Learn how the integration works with an event mesh. - [Edge Stack](https://documentation.gravitee.io/apim/4.10/govern-apis/federation/3rd-party-providers/edge-stack.md): Edge Stack is a cloud native API gateway running in Kubernetes, federated into API Management 4.10. Learn how the integration works. - [API Score](https://documentation.gravitee.io/apim/4.10/govern-apis/api-score.md): API Score is the automated governance capability in API Management 4.10, scoring APIs on criteria like security. Learn how it works. - [Enable API Score](https://documentation.gravitee.io/apim/4.10/govern-apis/api-score/enable-api-score.md): API Score is available in Gravitee Cloud; a self-hosted API Management 4.10 install needs it enabled. Follow the steps to turn it on. - [View API Scores](https://documentation.gravitee.io/apim/4.10/govern-apis/api-score/view-api-scores.md): High-level API Score statistics appear on the API Score page in API Management 4.10. Follow the steps to reach your dashboard. - [Rulesets and Functions](https://documentation.gravitee.io/apim/4.10/govern-apis/api-score/rulesets-and-functions.md): API Score rulesets hold the rules that rate an API in API Management 4.10. Learn how rulesets and their functions are built. - [Types of Assets](https://documentation.gravitee.io/apim/4.10/govern-apis/api-score/types-of-assets.md): API Score analyses different parts of an API Management 4.10 API against rulesets. Learn which assets are checked and how. - [Analyze & Monitor APIs](https://documentation.gravitee.io/apim/4.10/analyze-and-monitor-apis.md): Analysing and monitoring API Management 4.10 APIs, across dashboards, logging, and quality. Browse the sections that matter to you. - [Dashboards](https://documentation.gravitee.io/apim/4.10/analyze-and-monitor-apis/dashboards.md): The dashboards available in API Management 4.10, from the overview through to LLM and MCP usage. Browse the dashboard you need. - [Overview dashboard](https://documentation.gravitee.io/apim/4.10/analyze-and-monitor-apis/dashboards/overview-dashboard.md): The Overview Dashboard shows API performance and traffic patterns across your API Management 4.10 environment. Learn the available metrics. - [V4 Proxy API traffic dashboard](https://documentation.gravitee.io/apim/4.10/analyze-and-monitor-apis/dashboards/4.9-api-proxy-dashboard.md): Access and interpret the v4 proxy API traffic dashboard in API Management 4.10. Follow the steps to read what the dashboard reports. - [V4 API analytics dashboard](https://documentation.gravitee.io/apim/4.10/analyze-and-monitor-apis/dashboards/v4-api-analytics-dashboard.md): The v4 API analytics dashboard shows performance and traffic patterns for an API Management 4.10 v4 API. Learn the metrics it reports. - [V2 API analytics dashboards](https://documentation.gravitee.io/apim/4.10/analyze-and-monitor-apis/dashboards/v2-api-analytics-dashboards.md): The v2 API analytics dashboard shows performance and traffic patterns for an API Management 4.10 v2 API. Follow the steps to access it. - [API Quality](https://documentation.gravitee.io/apim/4.10/analyze-and-monitor-apis/api-quality.md): API Quality assigns customizable governance scores to your API Management 4.10 APIs. Follow the steps to configure and review them. - [Audit Trail](https://documentation.gravitee.io/apim/4.10/analyze-and-monitor-apis/audit-trail.md): The Audit Trail table and filters let you audit API consumption and activity in API Management 4.10. Follow the steps to use it. - [Reporters](https://documentation.gravitee.io/apim/4.10/analyze-and-monitor-apis/reporters.md): Reporters record events from the API Management 4.10 Gateway and send them onward. Compare the reporters available to you. - [Elasticsearch Reporter](https://documentation.gravitee.io/apim/4.10/analyze-and-monitor-apis/reporters/elasticsearch-reporter.md): Send API Management 4.10 Gateway events to Elasticsearch with the Elasticsearch reporter. Find the configuration details you need. - [File Reporter](https://documentation.gravitee.io/apim/4.10/analyze-and-monitor-apis/reporters/file-reporter.md): Write API Management 4.10 Gateway events to a file with the file reporter. Browse the configuration parameters it accepts. - [TCP Reporter](https://documentation.gravitee.io/apim/4.10/analyze-and-monitor-apis/reporters/tcp-reporter.md): Stream API Management 4.10 Gateway events over TCP with the TCP reporter. Browse the configuration parameters it accepts. - [Datadog Reporter](https://documentation.gravitee.io/apim/4.10/analyze-and-monitor-apis/reporters/datadog-reporter.md): Send API Management 4.10 Gateway events to Datadog with the Datadog reporter plugin. Follow the steps to download and configure it. - [Logging](https://documentation.gravitee.io/apim/4.10/analyze-and-monitor-apis/logging.md): Enable and configure logging at Gateway and API level in API Management 4.10, then view the detail. Browse the logging guides. - [Configure Gateway-level Logs](https://documentation.gravitee.io/apim/4.10/analyze-and-monitor-apis/logging/configure-gateway-level-logs.md): Gateway logging applies to all v4 API Management 4.10 APIs by default. Follow the steps to enable and configure the logging you need. - [Configure API-level Logs](https://documentation.gravitee.io/apim/4.10/analyze-and-monitor-apis/logging/configure-api-level-logs.md): Collect runtime logs for v4 proxy and message APIs in API Management 4.10, including webhook logs. Follow the steps to configure them. - [View API Logs](https://documentation.gravitee.io/apim/4.10/analyze-and-monitor-apis/logging/view-api-logs.md): Collect and view runtime logs for v4 proxy and message APIs in API Management 4.10, plus webhook logs. Follow the steps to read them. - [Expose Metrics to Prometheus](https://documentation.gravitee.io/apim/4.10/analyze-and-monitor-apis/logging/expose-metrics-to-prometheus.md): Expose API Management 4.10 metrics to Prometheus. Follow the configuration steps needed to make the metrics available to scrape. - [OpenTelemetry](https://documentation.gravitee.io/apim/4.10/analyze-and-monitor-apis/opentelemetry.md): Trace every request the API Management 4.10 Gateway handles with the Gravitee OpenTelemetry feature. Learn how tracing is set up. - [Execution Transparency Analytics](https://documentation.gravitee.io/apim/4.10/analyze-and-monitor-apis/execution-transparency-analytics.md): Execution transparency analytics gives actionable diagnostics when an API Management 4.10 call fails. Learn what the components report. - [AI Agent Management](https://documentation.gravitee.io/apim/4.10/agent-mesh.md): AI Agent Management governs and protects AI use cases across API Management 4.10, from the Agent Gateway to LLM and A2A proxies. Learn what it covers. - [Set Up an AI Agent (A2A) Proxy](https://documentation.gravitee.io/apim/4.10/agent-mesh/create-an-a2a-proxy.md): As organizations adopt AI agents, an API Management 4.10 A2A proxy connects them securely. Follow the steps to create a proxy of your own. - [Discover and Catalog AI Agents (A2A)](https://documentation.gravitee.io/apim/4.10/agent-mesh/add-agents-to-your-agent-catalog.md): Add AI agents to your API Management 4.10 Agent Catalog by importing or discovering their Agent Cards. Follow the steps to create an integration. - [Convert REST APIS to an MCP Server](https://documentation.gravitee.io/apim/4.10/agent-mesh/convert-your-apis-to-mcp-servers.md): Deploy an API Management 4.10 REST API as an MCP Server so AI agents can discover and invoke it. Follow the steps to deploy your API. - [LLM proxy](https://documentation.gravitee.io/apim/4.10/agent-mesh/llm-proxy.md): An LLM Proxy sits between an LLM consumer and provider in API Management 4.10. Learn what it solves and which providers are supported. - [Proxy your LLMs](https://documentation.gravitee.io/apim/4.10/agent-mesh/llm-proxy/proxy-your-llms.md): An API Management 4.10 LLM proxy exposes an OpenAI-compatible API you can plug into any compatible client. Follow the steps to proxy your LLM. - [Add the Token Rate Limit policy to your LLM proxy](https://documentation.gravitee.io/apim/4.10/agent-mesh/llm-proxy/add-the-token-rate-limit-policy-to-your-llm-proxy.md): The Token Rate Limit policy caps inbound and outbound tokens on an API Management 4.10 LLM proxy. Follow the steps to add and verify it. - [Add the Guard Rails policy to your LLM proxy](https://documentation.gravitee.io/apim/4.10/agent-mesh/llm-proxy/add-the-guard-rails-policy-to-your-llm-proxy.md): The Guard Rails policy evaluates prompts on an API Management 4.10 LLM proxy for unsafe content. Follow the steps to add it and create a resource. - [Consume your LLM proxy with the OpenAI Python SDK](https://documentation.gravitee.io/apim/4.10/agent-mesh/llm-proxy/consume-your-llm-proxy-with-the-openai-python-sdk.md): Consume an API Management 4.10 LLM proxy with the OpenAI Python SDK. Follow the steps to point the SDK at your proxy and verify the calls. - [Secure MCP Proxy with OAuth2](https://documentation.gravitee.io/apim/4.10/agent-mesh/secure-mcp-proxy-with-oauth2.md): Secure an MCP proxy API in API Management 4.10 with an OAuth2 plan and Access Management. Learn the use cases and how the flow works. - [Terraform](https://documentation.gravitee.io/apim/4.10/terraform.md): Terraform manages your API Management 4.10 infrastructure from configuration files. Learn what the Gravitee provider can manage. - [Quick Start Guide](https://documentation.gravitee.io/apim/4.10/terraform/quick-start-guide.md): Manage API Management 4.10 entities with Terraform instead of manual Console updates. Follow the steps to install the Gravitee provider. - [Define an APIM service account for Terraform](https://documentation.gravitee.io/apim/4.10/terraform/define-an-apim-service-account-for-terraform.md): Terraform authenticates to API Management 4.10 as a user of the instance. Follow the steps to create a Terraform service account. - [Gravitee Resources](https://documentation.gravitee.io/apim/4.10/terraform/example-resource-configurations.md): The Gravitee resources Terraform can create and manage in API Management 4.10. Compare the resources and their known limitations. - [Kafka Gateway](https://documentation.gravitee.io/apim/4.10/kafka-gateway.md): The Kafka Gateway applies API Management 4.10 capabilities directly to native Kafka. Learn what it addresses for security and control. - [Configure the Kafka Client & Gateway](https://documentation.gravitee.io/apim/4.10/kafka-gateway/configure-the-kafka-client-and-gateway.md): Configure the Kafka Gateway and a Kafka client so API Management 4.10 can proxy your Kafka cluster. Follow the steps for both sides. - [Deploy a Kafka Gateway with Gravitee Cloud](https://documentation.gravitee.io/apim/4.10/kafka-gateway/deploy-a-kafka-gateway-with-gravitee-cloud.md): Use Gravitee Cloud to deploy an API Management 4.10 Gateway that supports the Kafka protocol. Follow the steps to deploy it. - [Produce and Consume Kafka Messages with Gravitee Cloud](https://documentation.gravitee.io/apim/4.10/kafka-gateway/produce-and-consume-kafka-messages-with-gravitee-cloud.md): Produce and consume Kafka messages through Gravitee Cloud with API Management 4.10. Follow the steps to send your first messages. - [Create & Configure Kafka APIs](https://documentation.gravitee.io/apim/4.10/kafka-gateway/create-and-configure-kafka-apis.md): Creating and configuring a Kafka API in API Management 4.10, from the Console. Browse the articles covering each part of the process. - [Create Kafka APIs](https://documentation.gravitee.io/apim/4.10/kafka-gateway/create-and-configure-kafka-apis/create-kafka-apis.md): Kafka APIs apply API Management 4.10 capabilities directly to the Kafka protocol. Follow the steps to create a Kafka API of your own. - [Configure Kafka APIs](https://documentation.gravitee.io/apim/4.10/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis.md): Configure Kafka APIs from the API Management 4.10 Console, a UI for creating and amending them. Learn what you can change there. - [Configuration](https://documentation.gravitee.io/apim/4.10/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/configuration.md): The Configuration section manages high-level settings for a Kafka API in API Management 4.10. Learn what you can customize. - [Entrypoints](https://documentation.gravitee.io/apim/4.10/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/entrypoints.md): Entrypoints define the protocol and settings consumers use to reach a Kafka API in API Management 4.10. Learn how to configure them. - [Endpoints](https://documentation.gravitee.io/apim/4.10/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/endpoints.md): Endpoints define the protocol and settings a Kafka API uses to reach its backend in API Management 4.10. Learn how to configure them. - [Policies](https://documentation.gravitee.io/apim/4.10/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/policies.md): Policies are customizable rules the Gateway runs during a Kafka API transaction in API Management 4.10. Learn how they change behaviour. - [Consumers](https://documentation.gravitee.io/apim/4.10/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/consumers.md): The Consumers section manages how a Kafka API is consumed in API Management 4.10, through plans and subscriptions. Learn what it covers. - [Documentation](https://documentation.gravitee.io/apim/4.10/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/documentation.md): The Documentation section creates Developer Portal pages for a Kafka API in API Management 4.10. Learn how to inform consumers. - [Deployment](https://documentation.gravitee.io/apim/4.10/kafka-gateway/create-and-configure-kafka-apis/configure-kafka-apis/deployment.md): The Deployment section manages sharding tags and tracks changes to a Kafka API in API Management 4.10. Learn what it records. - [Create and Configure Kafka Clusters](https://documentation.gravitee.io/apim/4.10/kafka-gateway/create-and-configure-kafka-clusters.md): Create and manage Kafka clusters from the Kafka UI in the API Management 4.10 Console. Follow the steps to configure a cluster. - [Configure and Deploy Kafka Console](https://documentation.gravitee.io/apim/4.10/kafka-gateway/configure-and-deploy-kafka-console.md): The Kafka Console is a standalone UI that integrates with API Management 4.10 to manage Kafka clusters. Follow the steps to deploy it. - [Plans](https://documentation.gravitee.io/apim/4.10/kafka-gateway/plans.md): A plan is the service and access layer over a Kafka API in API Management 4.10, setting limits and validation. Learn the options. - [Applications](https://documentation.gravitee.io/apim/4.10/kafka-gateway/applications.md): Consumers register an application and subscribe to a plan to reach Kafka APIs in API Management 4.10. Learn what applications do. - [Subscriptions](https://documentation.gravitee.io/apim/4.10/kafka-gateway/subscriptions.md): A subscription is the contract between a Kafka API publisher and consumer in API Management 4.10. Learn how one is created. - [Other Ways Gravitee Supports Kafka](https://documentation.gravitee.io/apim/4.10/kafka-gateway/other-ways-gravitee-supports-kafka.md): Gravitee connects to Kafka through protocol mediation or native Kafka APIs in API Management 4.10. Compare the two approaches. - [Expose Metrics to Prometheus](https://documentation.gravitee.io/apim/4.10/kafka-gateway/expose-metrics-to-prometheus.md): Expose the API Management 4.10 Gateway internal API metrics to Prometheus. Follow the steps and verify the metrics arrive. - [Expose Metrics to Elasticsearch](https://documentation.gravitee.io/apim/4.10/kafka-gateway/expose-metrics-to-elasticsearch.md): Configure the Elasticsearch reporter to store runtime metrics from an API Management 4.10 Kafka Gateway. Follow the steps to set it up. - [Prepare a Production Environment](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment.md): Preparing an API Management 4.10 environment for production, from sizing through to best practices. Browse the articles you need. - [Gateway Resource Sizing](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/gateway-resource-sizing-guidelines.md): Resource recommendations for an API Management 4.10 Gateway instance, based on traffic and deployment context. Learn how to size it. - [Production Best Practices](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/production-best-practices.md): Default settings from an API Management 4.10 install suit testing, not production. Browse the best practices before you go live. - [Internal APIs](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/production-best-practices/internal-apis.md): API Management 4.10 enables internal APIs on the Management API and Gateway by default. Learn what they expose and how to secure them. - [Deployments](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/production-best-practices/deployments.md): The API Management 4.10 Management API exposes both the Console and Developer Portal REST APIs. Learn how to deploy them safely. - [Authentication](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/production-best-practices/authentication.md): Authenticate API Management 4.10 users against an LDAP server or another provider in production. Learn the options available. - [Protections](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/production-best-practices/protections.md): A brute-force attack submits a high volume of authentication requests. Learn how API Management 4.10 protects against them. - [General Recommendations](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/production-best-practices/general-recommendations.md): Generalized recommendations for API Management 4.10 production settings and practices. Browse the articles in this section. - [Default APIM Settings](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/production-best-practices/general-recommendations/default-apim-settings.md): Update the most common default settings in the API Management 4.10 Console before going live. Follow the steps for each one. - [API Design](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/production-best-practices/general-recommendations/api-design.md): There is no single rule for designing and exposing API Management 4.10 APIs. Learn the considerations that shape your design. - [API Review and Quality](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/production-best-practices/general-recommendations/api-review-and-quality.md): Enable API review and quality in API Management 4.10 to avoid unexpected exposure on the Developer Portal. Learn how to turn it on. - [Property Encryption](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/production-best-practices/general-recommendations/property-encryption.md): API Management 4.10 can store encrypted property values on an API. Learn how property encryption works and how to set it up. - [Documentation Sanitizer](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/production-best-practices/general-recommendations/documentation-sanitizer.md): API Management 4.10 can sanitize published API documentation pages. Learn what the sanitizer removes and why that matters. - [Notifiers](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/production-best-practices/general-recommendations/notifiers.md): API publishers can send notifications about their APIs in API Management 4.10. Learn what notifiers do and how to restrict them. - [Default Nginx Security Config](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/production-best-practices/general-recommendations/default-nginx-security-config.md): The default Nginx security configuration the API Management 4.10 Console uses. Browse it before you harden your deployment. - [Cache](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/cache.md): Caches store different types of data in API Management 4.10. Compare the cache managers available and how each one is configured. - [Repositories](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/repositories.md): API Management 4.10 stores data in repositories configured in gravitee.yml. Compare the repository types available to you. - [MongoDB](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/repositories/mongodb.md): The MongoDB plugin ships in the default API Management 4.10 distribution. Follow the steps to configure MongoDB as your repository. - [ElasticSearch](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/repositories/elasticsearch.md): The Elasticsearch connector for API Management 4.10 uses the HTTP API that Elasticsearch instances expose. Learn how to configure it. - [JDBC](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/repositories/jdbc.md): API Management 4.10 can use a JDBC repository for its configuration database. Follow the steps to install the driver and configure it. - [Redis](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/repositories/redis.md): The Redis repository plugin connects API Management 4.10 to Redis for the rate limit feature. Follow the steps to configure it. - [Configure your HTTP Server](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/configure-your-http-server.md): Configure the API Management 4.10 HTTP server in the gravitee.yaml file. Follow the steps to set the properties you need. - [Sensitive Data Management](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/sensitive-data-management.md): Protecting sensitive information in API Management 4.10, from API secrets to configuration secrets. Browse the articles you need. - [Configure Secrets](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/sensitive-data-management/configure-secrets.md): API Management 4.10 integrates with secret managers for configuration-level secrets. Learn how that integration works in practice. - [Quick Start](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/sensitive-data-management/configure-secrets/quick-start.md): Configure configuration-level secrets in API Management 4.10. Follow the quick start steps to reference your first secret. - [Configuration](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/sensitive-data-management/configure-secrets/configuration.md): Configure a secret manager so you can reference secrets from API Management 4.10 configuration files. Follow the steps to set it up. - [Reference Secrets in Configurations](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/sensitive-data-management/configure-secrets/reference-secrets-in-configurations.md): Reference secret manager values from your API Management 4.10 configuration files. Follow the steps to use them safely in production. - [API Secrets](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/sensitive-data-management/api-secrets.md): API Management 4.10 integrates with secret managers so the values inside your APIs stay hidden. Learn how API secrets work in practice. - [Quick Start](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/sensitive-data-management/api-secrets/quick-start.md): Configure access to a secret manager and reference a secret from an API Management 4.10 API. Follow the quick start steps. - [Configuration](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/sensitive-data-management/api-secrets/configuration.md): Configure a secret manager to hide values inside your API Management 4.10 APIs. Follow the steps to set the integration up. - [Reference Secrets in APIs](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/sensitive-data-management/api-secrets/reference-secrets-in-apis.md): Reference secret manager values from within an API Management 4.10 API to hide sensitive data. Follow the steps to use them. - [Plugin support](https://documentation.gravitee.io/apim/4.10/prepare-a-production-environment/sensitive-data-management/plugin-support.md): Which API Management 4.10 plugins support referencing secrets. Browse the support table before you configure a secret in one. - [Plugins](https://documentation.gravitee.io/apim/4.10/plugins.md): Plugins expand what the API Management 4.10 Gateway, Management API, and other components can do. Compare the types of plugin available. - [Deployment](https://documentation.gravitee.io/apim/4.10/plugins/deployment.md): Deploy an API Management 4.10 plugin by copying its archive into the plugins directory. Learn how plugins are discovered and then loaded. - [Customization](https://documentation.gravitee.io/apim/4.10/plugins/customization.md): API Management 4.10 plugins extend and customize component behaviour. Learn the common structure a plugin shares before you build one. - [Gravitee Expression Language](https://documentation.gravitee.io/apim/4.10/gravitee-expression-language.md): Gravitee Expression Language queries object graphs to configure API Management 4.10 policies dynamically. Learn the basics and use the EL Assistant. - [Management API Reference](https://documentation.gravitee.io/apim/4.10/management-api-reference.md): The Gravitee Management API is the programmatic interface to the API Management 4.10 backend. Browse the reference for its two sub-APIs. - [Expose APIM as an MCP Server](https://documentation.gravitee.io/apim/4.10/4.9-expose-apim-as-an-mcp-server.md): Install the API Management 4.10 MCP Server so AI clients can call your platform. Follow the steps to install it and create a service account token. - [Release Information](https://documentation.gravitee.io/apim/4.10/release-information.md): Information about release information. - [Release Notes](https://documentation.gravitee.io/apim/4.10/release-information/release-notes.md): An overview about release notes. - [APIM 4.10](https://documentation.gravitee.io/apim/4.10/release-information/release-notes/apim-4.10.md) - [Changelog](https://documentation.gravitee.io/apim/4.10/release-information/changelog.md): An overview about changelog. - [APIM 4.10.x](https://documentation.gravitee.io/apim/4.10/release-information/changelog/apim-4.10.x.md) - [Breaking Changes and Deprecations](https://documentation.gravitee.io/apim/4.10/release-information/breaking-changes-and-deprecations.md): Information about breaking changes and deprecations. * [Introduction](https://documentation.gravitee.io/apim/4.9/readme.md): API Management 4.9 accelerates and streamlines the governance and delivery of your APIs. Learn what the platform offers and where to start. * [Core Concepts](https://documentation.gravitee.io/apim/4.9/readme/core-concepts.md): The core concepts behind API Management 4.9, from architecture to component configuration. Learn how the pieces fit together. * [Enterprise Edition](https://documentation.gravitee.io/apim/4.9/readme/enterprise-edition.md): What the Enterprise Edition adds to open source API Management 4.9, from features to plugins and endpoints. Compare the two distributions. * [Integrations](https://documentation.gravitee.io/apim/4.9/readme/integrations.md): The major integrations API Management 4.9 offers with event brokers, observability tools, and service discovery. Compare what is supported. * [Community Forum](https://documentation.gravitee.io/apim/4.9/readme/community-forum.md): What to expect from the Gravitee community forum as an API Management 4.9 user. See how to ask a question others can find later. * [Contribute to APIM](https://documentation.gravitee.io/apim/4.9/readme/contribute-to-apim.md): Set up a local environment to contribute to API Management 4.9 development. Follow the steps to clone the project and prepare the UIs. * [Getting Started](https://documentation.gravitee.io/apim/4.9/getting-started.md): Start with API Management 4.9 on Gravitee Cloud, hybrid, or fully self-hosted. Compare the deployment options before you install. * [Fully self-hosted installation with Vanilla Kubernetes](https://documentation.gravitee.io/apim/4.9/getting-started/vanilla-kubernetes.md): Install a fully self-hosted API Management 4.9 platform on Kubernetes with Helm charts. Follow the steps and review the components first. * [Fully self-hosted installation with Docker](https://documentation.gravitee.io/apim/4.9/getting-started/local-install-with-docker.md): Install a fully self-hosted API Management 4.9 with Docker Compose. Follow the steps to download the compose file and verify the stack. * [Create & Publish Your First API](https://documentation.gravitee.io/apim/4.9/getting-started/create-and-publish-your-first-api.md): Create and publish your first API Management 4.9 API, step by step. Follow the articles in order from creation through to publication. * [Create an API](https://documentation.gravitee.io/apim/4.9/getting-started/create-and-publish-your-first-api/create-an-api.md): Create your first API with API Management 4.9, using the Console. Follow the steps to build it, test it, and move to the next stage. * [Add Security](https://documentation.gravitee.io/apim/4.9/getting-started/create-and-publish-your-first-api/add-security.md): Secure your first API Management 4.9 API with an API Key plan. Follow the steps to add the plan and check it is enforced. * [Add a Policy](https://documentation.gravitee.io/apim/4.9/getting-started/create-and-publish-your-first-api/add-a-policy.md): Add the Rate Limit policy to your first API Management 4.9 API. Follow the steps to apply it and verify the limit is enforced. * [Add API Documentation](https://documentation.gravitee.io/apim/4.9/getting-started/create-and-publish-your-first-api/add-api-documentation.md): Add documentation to your first API Management 4.9 API so consumers can read it. Follow the steps to attach and verify a page. * [Publish your API](https://documentation.gravitee.io/apim/4.9/getting-started/create-and-publish-your-first-api/publish-your-api.md): Publish your first API Management 4.9 API so consumers can find it. Follow the steps to publish it and verify it is live. * [Hybrid Installation & Configuration Guides](https://documentation.gravitee.io/apim/4.9/hybrid-installation-and-configuration-guides.md): A hybrid Gateway architecture mixes self-hosted and cloud API Management 4.9 components. Browse the guides for your deployment stack. * [Next-Gen Cloud](https://documentation.gravitee.io/apim/4.9/hybrid-installation-and-configuration-guides/next-gen-cloud.md): A Next-Gen Cloud hybrid API Management 4.9 deployment needs the Gateway and Redis as a minimum. Browse the installation guides. * [Docker](https://documentation.gravitee.io/apim/4.9/hybrid-installation-and-configuration-guides/next-gen-cloud/docker.md): Run a Next-Gen Cloud hybrid API Management 4.9 deployment in Docker. Browse the guides for the CLI and Compose approaches. * [Docker CLI](https://documentation.gravitee.io/apim/4.9/hybrid-installation-and-configuration-guides/next-gen-cloud/docker/docker-cli.md): Install the API Management 4.9 Data Plane with Docker CLI commands for a Next-Gen Cloud hybrid. Follow the steps to run it. * [Docker Compose](https://documentation.gravitee.io/apim/4.9/hybrid-installation-and-configuration-guides/next-gen-cloud/docker/docker-compose.md): Next-Gen Cloud supports hybrid API Management 4.9 deployments through Docker Compose. Follow the steps to configure the compose file. * [Kubernetes](https://documentation.gravitee.io/apim/4.9/hybrid-installation-and-configuration-guides/next-gen-cloud/kubernetes.md): Install the self-hosted components of a hybrid API Management 4.9 deployment on Kubernetes. Browse the guides for your provider. * [Vanilla Kubernetes](https://documentation.gravitee.io/apim/4.9/hybrid-installation-and-configuration-guides/next-gen-cloud/kubernetes/vanilla-kubernetes.md): Install a hybrid API Management 4.9 Gateway on Kubernetes and connect it to Next-Gen Cloud. Follow the steps to deploy it. * [AWS EKS](https://documentation.gravitee.io/apim/4.9/hybrid-installation-and-configuration-guides/next-gen-cloud/kubernetes/aws-eks.md): Install a hybrid API Management 4.9 Gateway on Amazon EKS and connect it to Gravitee Cloud. Follow the steps to deploy it. * [Azure AKS](https://documentation.gravitee.io/apim/4.9/hybrid-installation-and-configuration-guides/next-gen-cloud/kubernetes/azure-aks.md): Install a hybrid API Management 4.9 Gateway on Azure Kubernetes Service and connect it to Gravitee Cloud. Follow the steps to deploy. * [OpenShift](https://documentation.gravitee.io/apim/4.9/hybrid-installation-and-configuration-guides/next-gen-cloud/kubernetes/openshift.md): Install a hybrid API Management 4.9 Gateway on OpenShift and connect it to Gravitee Cloud. Follow the steps to deploy it. * [RPM](https://documentation.gravitee.io/apim/4.9/hybrid-installation-and-configuration-guides/next-gen-cloud/rpm.md): Install a hybrid API Management 4.9 Gateway from the RPM package. Follow the steps for the Linux distribution you are running. * [.ZIP](https://documentation.gravitee.io/apim/4.9/hybrid-installation-and-configuration-guides/next-gen-cloud/.zip.md): Install a Next-Gen Cloud hybrid API Management 4.9 deployment from the binary distribution. Follow the steps to set it up. * [Generate a New Cloud Token](https://documentation.gravitee.io/apim/4.9/hybrid-installation-and-configuration-guides/next-gen-cloud/generate-a-new-cloud-token.md): Revoking a cloud token breaks the link between Gravitee Cloud and your hybrid API Management 4.9 Gateway. Follow the steps to replace it. * [Delete a Hybrid Gateway](https://documentation.gravitee.io/apim/4.9/hybrid-installation-and-configuration-guides/next-gen-cloud/delete-a-hybrid-gateway.md): Delete a hybrid API Management 4.9 Gateway you no longer need to keep your environment controlled. Follow the steps to remove it. * [Link to a Hybrid Gateway](https://documentation.gravitee.io/apim/4.9/hybrid-installation-and-configuration-guides/next-gen-cloud/link-to-a-hybrid-gateway.md): Link a new cloud token to an existing hybrid API Management 4.9 Gateway. Follow the steps to restore the Cloud connection. * [Classic Cloud](https://documentation.gravitee.io/apim/4.9/hybrid-installation-and-configuration-guides/classic-cloud.md): The technology stacks and deployment methods for a Classic Cloud hybrid API Management 4.9 install. Compare the options available. * [Docker](https://documentation.gravitee.io/apim/4.9/hybrid-installation-and-configuration-guides/classic-cloud/docker.md): Run a Classic Cloud hybrid API Management 4.9 deployment in Docker. Browse the guides for the CLI and Compose approaches. * [Docker Compose](https://documentation.gravitee.io/apim/4.9/hybrid-installation-and-configuration-guides/classic-cloud/docker/docker-compose.md): A sample compose file that sets up a Classic Cloud hybrid API Management 4.9 configuration. Follow the steps to adapt it. * [Kubernetes](https://documentation.gravitee.io/apim/4.9/hybrid-installation-and-configuration-guides/classic-cloud/kubernetes.md): Deploy a Classic Cloud hybrid API Management 4.9 Gateway on Kubernetes. Browse the guides for the cloud provider you use. * [GCP GKE](https://documentation.gravitee.io/apim/4.9/hybrid-installation-and-configuration-guides/classic-cloud/kubernetes/gcp-gke.md): Install an API Management 4.9 Gateway on Kubernetes with GCP GKE. Follow the steps to complete a Classic Cloud hybrid deployment. * [.ZIP](https://documentation.gravitee.io/apim/4.9/hybrid-installation-and-configuration-guides/classic-cloud/.zip.md): Install a Classic Cloud hybrid API Management 4.9 deployment from the .zip distribution. Follow the steps after installing the platform. * [Cloud Certificate Renewal](https://documentation.gravitee.io/apim/4.9/hybrid-installation-and-configuration-guides/classic-cloud/cloud-certificate-renewal.md): Renew the certificate that keeps your self-hosted API Management 4.9 instance connected to Gravitee Cloud. Follow the steps to replace it. * [Self-Hosted Installation Guides](https://documentation.gravitee.io/apim/4.9/self-hosted-installation-guides.md): Self-hosted architecture means you host every API Management 4.9 component on your own infrastructure. Browse the installation guides. * [Docker](https://documentation.gravitee.io/apim/4.9/self-hosted-installation-guides/docker.md): The Docker installation architecture common to each API Management 4.9 install method. Compare the methods available to you. * [Docker Compose](https://documentation.gravitee.io/apim/4.9/self-hosted-installation-guides/docker/docker-compose.md): Install API Management 4.9 with Docker Compose, the quickest self-hosted route. Follow the steps and see what the deployment includes. * [Docker CLI](https://documentation.gravitee.io/apim/4.9/self-hosted-installation-guides/docker/docker-cli.md): Install API Management 4.9 with the Docker CLI, persisting data and plugins in your own directories. Follow the steps to set it up. * [Customize your Installation](https://documentation.gravitee.io/apim/4.9/self-hosted-installation-guides/docker/customize-your-installation.md): Customize an API Management 4.9 Docker Compose installation through the gateway environment section. Follow the steps to change it. * [Kubernetes](https://documentation.gravitee.io/apim/4.9/self-hosted-installation-guides/kubernetes.md): Install a self-hosted API Management 4.9 platform on Kubernetes using the Helm chart. Browse the guides for your target platform. * [Vanilla Kubernetes](https://documentation.gravitee.io/apim/4.9/self-hosted-installation-guides/kubernetes/vanilla-kubernetes.md): Deploy a complete self-hosted API Management 4.9 platform on Kubernetes using Helm charts. Follow the steps to install the platform. * [AWS EKS](https://documentation.gravitee.io/apim/4.9/self-hosted-installation-guides/kubernetes/aws-eks.md): Deploy a complete self-hosted API Management 4.9 platform on Amazon Elastic Kubernetes Service. Follow the steps to install with Helm. * [Azure AKS](https://documentation.gravitee.io/apim/4.9/self-hosted-installation-guides/kubernetes/azure-aks.md): Deploy a complete self-hosted API Management 4.9 platform on Azure Kubernetes Service. Follow the steps to install with Helm. * [OpenShift](https://documentation.gravitee.io/apim/4.9/self-hosted-installation-guides/kubernetes/openshift.md): Install API Management 4.9 within OpenShift. Follow the steps to deploy the platform on an OpenShift cluster of your own. * [RPM](https://documentation.gravitee.io/apim/4.9/self-hosted-installation-guides/rpm.md): Install API Management 4.9 on RPM-based Linux such as Red Hat, CentOS, or Oracle. Follow the steps for your distribution. * [Troubleshooting](https://documentation.gravitee.io/apim/4.9/self-hosted-installation-guides/rpm/troubleshooting.md): An SELinux issue can stop Nginx opening ports 8084 and 8085 for API Management 4.9 on RPM installs. Follow the steps to correct it. * [.ZIP](https://documentation.gravitee.io/apim/4.9/self-hosted-installation-guides/.zip.md): Install API Management 4.9 from the .zip distribution. Follow the steps for a self-hosted deployment on your own machine. * [Multi-tenancy](https://documentation.gravitee.io/apim/4.9/self-hosted-installation-guides/multi-tenancy.md): Multi-tenancy in API Management 4.9 Enterprise lets one installation serve several tenants. Learn what the packages include. * [Upgrade Guides](https://documentation.gravitee.io/apim/4.9/upgrade-guides.md): Release notes and changelogs sit alongside these API Management 4.9 upgrade guides. Browse the articles for the version you are moving to. * [Update the Connection to Cloud](https://documentation.gravitee.io/apim/4.9/upgrade-guides/update-the-connection-to-cloud.md): Multi-tenancy changed how an API Management 4.9 installation connects to Cloud. Learn what to update for connected Consoles and Portals. * [APIM 4.4.+ & Hybrid Gateways](https://documentation.gravitee.io/apim/4.9/upgrade-guides/apim-4.4.+-and-hybrid-gateways.md): From the 4.4 release, API Management 4.9 gateways must explicitly disable certificate checks. Learn what changed and what you must set. * [Upgrade with RPM](https://documentation.gravitee.io/apim/4.9/upgrade-guides/upgrade-with-rpm.md): Upgrade an API Management 4.9 installation that was installed with RPM packages. Follow the steps to back up your configuration first. * [MongoDB Index Management](https://documentation.gravitee.io/apim/4.9/upgrade-guides/mongodb-index-management.md): The MongoDB indexes that improve query performance on large API Management 4.9 datasets. Follow the steps to create them manually. * [APIM 4.9 Elasticsearch Index Template Changes](https://documentation.gravitee.io/apim/4.9/upgrade-guides/apim-4.9-elasticsearch-index-template-changes.md): New Elasticsearch index templates enable extra analytics for API Management 4.9 v2 and v4 APIs. Learn which templates are updated. * [How-To Guides](https://documentation.gravitee.io/apim/4.9/how-to-guides.md): Gravitee how-to guides for API Management 4.9, from your first API to advanced use cases. Browse the tutorials that match your goal. * [Use Case Tutorials](https://documentation.gravitee.io/apim/4.9/how-to-guides/use-case-tutorials.md): Detailed use case tutorials for the API Management 4.9 platform. Browse the articles that match the problem you are solving. * [Rate Limit REST APIs](https://documentation.gravitee.io/apim/4.9/how-to-guides/use-case-tutorials/rate-limit-rest-apis.md): Rate limiting protects API Management 4.9 REST APIs and keeps performance predictable. Follow the tutorial through the main use cases. * [Configure JWT Security](https://documentation.gravitee.io/apim/4.9/how-to-guides/use-case-tutorials/configure-jwt-security.md): Apply JSON Web Token security to your API Management 4.9 APIs. Follow the steps to configure the gateway APIs and the plan. * [Add RBAC to your JWT Plan](https://documentation.gravitee.io/apim/4.9/how-to-guides/use-case-tutorials/add-rbac-to-your-jwt-plan.md): The Role-based Access Control policy adds authorization on top of an API Management 4.9 JWT plan. Follow the steps to configure your IdP. * [Configure DCR](https://documentation.gravitee.io/apim/4.9/how-to-guides/use-case-tutorials/configure-dcr.md): Configure Dynamic Client Registration between API Management 4.9 and Access Management. Follow the steps to set up both sides. * [Secure and Expose gRPC Services](https://documentation.gravitee.io/apim/4.9/how-to-guides/use-case-tutorials/secure-and-expose-grpc-services.md): Use API Management 4.9 as a central place to secure and manage your gRPC APIs. Follow the steps to run the samples with Docker. * [Expose SOAP Webservices as REST APIs](https://documentation.gravitee.io/apim/4.9/how-to-guides/use-case-tutorials/expose-soap-webservices-as-rest-apis.md): Transform a SOAP endpoint and expose it as a REST service with API Management 4.9. Follow the steps in the Gravitee policy studio. * [Create and Publish an API Using the Management API](https://documentation.gravitee.io/apim/4.9/how-to-guides/use-case-tutorials/create-and-publish-an-api-using-the-management-api.md): Create and publish an HTTP proxy API through the Management API in API Management 4.9. Follow the steps from access token to published API. * [Create Applications and Subscriptions Using the Management API](https://documentation.gravitee.io/apim/4.9/how-to-guides/use-case-tutorials/create-applications-and-subscriptions-using-the-management-api.md): Create applications and subscriptions with the Management API in API Management 4.9. Follow the steps to change an API's security first. * [Connect to an Endpoint Using SSE](https://documentation.gravitee.io/apim/4.9/how-to-guides/use-case-tutorials/connect-to-an-endpoint-using-sse.md): Establish a Server-Sent Events channel and consume messages through API Management 4.9. Follow the steps to identify and connect an endpoint. * [Configure & Manage the Platform](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform.md): Configuring and managing the API Management 4.9 platform, split into three sections. Browse the area you need to change. * [Gravitee Gateway](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/gravitee-gateway.md): Configure the general settings of your API Management 4.9 Gateway. Browse the guides covering each part of the configuration. * [Proxy](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/gravitee-gateway/proxy.md): Define specific proxies for specific use cases in API Management 4.9. Learn where proxy configurations can be applied to it. * [Services](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/gravitee-gateway/services.md): Update the default values for API Management 4.9 Gateway services, which are all enabled by default. Follow the steps to change them. * [Dictionaries](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/gravitee-gateway/dictionaries.md): Use dictionaries in a multi-tenancy API Management 4.9 deployment. Learn what dictionaries provide and where they apply. * [Alerts](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/gravitee-gateway/alerts.md): Set alerting conditions for the API Management 4.9 Gateway from the platform settings. Follow the steps to configure them. * [Notifications](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/gravitee-gateway/notifications.md): Set up alerts and notifications based on events the API Management 4.9 Gateway recognizes. Learn what you can be notified about. * [Gateway Internal API](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/gravitee-gateway/gateway-internal-api.md): The API Management 4.9 Gateway exposes an internal API for monitoring the component. Follow the steps to configure and secure it. * [Sharding Tags](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/gravitee-gateway/sharding-tags.md): Sharding tags tag API Management 4.9 Gateways so specific APIs deploy to a particular gateway. Learn how the tags work in practice. * [Tenants](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/gravitee-gateway/tenants.md): Tenants use the API Management 4.9 multi-endpoint capability to route to different backends. Learn what tenants provide. * [Header IDs](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/gravitee-gateway/header-ids.md): The API Management 4.9 Gateway generates an id for every request and sets it in a header. Learn how to change the header names. * [Management API](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/management-api.md): Configure general API Management 4.9 Management API settings in the gravitee.yaml file. Browse the configuration guides you need. * [MAPI Internal API](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/management-api/mapi-internal-api.md): The API Management 4.9 Management API exposes its own internal API for monitoring. Follow the steps to configure and secure it. * [Settings](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/management-api/settings.md): Configure management settings from the Settings page of the API Management 4.9 Console. Learn what each setting controls. * [Manage Organizations & Environments](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/manage-organizations-and-environments.md): An organization is a logical part of a company sharing settings in API Management 4.9, containing environments. Learn the model. * [Authentication](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/manage-organizations-and-environments/authentication.md): API Management 4.9 natively supports several authentication types for the Console. Compare the options before you configure one. * [Gravitee Access Management](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/manage-organizations-and-environments/authentication/gravitee-access-management.md): Gravitee offers Access Management alongside API Management 4.9 for full identity handling. Learn how the two products relate. * [Authentication Providers](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/manage-organizations-and-environments/authentication/authentication-providers.md): Configure in-memory users, LDAP, or Active Directory authentication for API Management 4.9. Follow the steps for your provider. * [Social Providers](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/manage-organizations-and-environments/authentication/social-providers.md): Let users sign in to API Management 4.9 with a GitHub OAuth application or another social provider. Follow the steps to configure it. * [OpenID Connect](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/manage-organizations-and-environments/authentication/openid-connect.md): OpenID Connect is an authentication protocol built on OAuth 2.0, supported by API Management 4.9. Follow the steps to configure it. * [Microsoft Entra ID](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/manage-organizations-and-environments/authentication/microsoft-entra-id.md): Set up API Management 4.9 Console authentication with Microsoft Entra ID. Follow the steps to configure the identity provider. * [Roles and Groups Mapping](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/manage-organizations-and-environments/authentication/roles-and-groups-mapping.md): Assign roles to API Management 4.9 users through groups rather than individually. Learn how group and role mapping works. * [User Management](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/manage-organizations-and-environments/user-management.md): Set up and manage roles, scopes, permissions and users in API Management 4.9. Follow the steps to configure your organization. * [Applications](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/manage-organizations-and-environments/applications.md): An application represents a consumer of your API Management 4.9 APIs and holds its subscriptions. Learn how applications work. * [APIM Console](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/manage-organizations-and-environments/apim-console.md): The API Management 4.9 Console is the graphical interface for configuring gateways and creating APIs. Learn what it lets you do. * [Developer Portal](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/manage-organizations-and-environments/developer-portal.md): The Developer Portal gives API consumers a simplified interface onto your API Management 4.9 APIs. Learn how to configure it. * [SMTP Configuration](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/manage-organizations-and-environments/smtp-configuration.md): The SMTP configuration API Management 4.9 uses for sending email notifications. Follow the steps to point it at your mail server. * [CORS Configuration](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/manage-organizations-and-environments/cors-configuration.md): CORS lets a web page request resources from another domain in API Management 4.9. Follow the steps to configure it for your organization. * [Support](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/manage-organizations-and-environments/support.md): Gravitee encourages you to engage your team first if your API Management 4.9 installation has issues. Learn what support covers. * [Debug Logging](https://documentation.gravitee.io/apim/4.9/configure-and-manage-the-platform/debug-logging.md): API Management 4.9 supports standard Java logging per component, plus debug logging for specific areas. Learn how to enable it. * [Create & Configure APIs](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis.md): Creating and configuring API Management 4.9 APIs, split into five sections from definitions to v2 and v4 configuration. Browse what you need. * [Gravitee API Definitions](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/gravitee-api-definitions.md): Gravitee v2 and v4 API definitions describe the Gateway APIs consumers call in API Management 4.9. Compare the two definitions. * [v2 and v4 API Comparison](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/gravitee-api-definitions/v2-and-v4-api-comparison.md): v2 and v4 API Management 4.9 APIs differ in functionality and supported features. Compare them before you choose a definition. * [Execution Engine](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/gravitee-api-definitions/execution-engine.md): The execution engine is the Gateway runtime that executes API Management 4.9 APIs and policy flows. Learn its improvements and policy support. * [Create APIs](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/create-apis.md): Create or import v2 and v4 APIs in API Management 4.9. Browse the articles covering each creation and import path available. * [v4 API Creation Wizard](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/create-apis/v4-api-creation-wizard.md): Create a v4 API with the API Management 4.9 creation wizard, from API details through to entrypoints. Follow the steps in order. * [v2 API Creation Wizard](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/create-apis/v2-api-creation-wizard.md): The v2 API definition is a JSON representation of your Gateway API. Follow the API Management 4.9 creation wizard step by step. * [Import APIs](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/create-apis/import-apis.md): Import an API into API Management 4.9 as a Gravitee definition or an OpenAPI specification. Follow the steps to import an OpenAPI spec. * [Migrate APIs](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/create-apis/4.9-migrate-apis.md): Migrate existing v2 APIs to v4 with the API Management 4.9 Migration feature. Follow the prerequisites and steps to migrate them. * [Search for APIs in the Console](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/create-apis/search-for-apis-in-the-console.md): Filter the list of APIs that appear in the API Management 4.9 Console. Follow the steps to search, and see the worked search examples. * [Configure v4 APIs](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v4-apis.md): The articles covering how to configure a v4 API in API Management 4.9, from endpoints to response templates. Browse what you need. * [General Settings](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v4-apis/general-settings.md): Every v4 API in API Management 4.9 has general settings on its Configuration page. Learn what you can view and change there. * [Entrypoints](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v4-apis/entrypoints.md): Entrypoints define how consumers reach a v4 API Management 4.9 API, for proxy or message APIs. Compare the entrypoint types. * [HTTP GET](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v4-apis/entrypoints/http-get.md): Configure the HTTP GET entrypoint parameters for a v4 API Management 4.9 API. Follow the steps to set them for your own API. * [HTTP POST](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v4-apis/entrypoints/http-post.md): Configure the HTTP POST entrypoint parameters for a v4 API Management 4.9 API. Follow the steps to set them for your own API. * [Server-Sent Events](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v4-apis/entrypoints/server-sent-events.md): Configure the Server-Sent Events entrypoint for a v4 API Management 4.9 API, including quality of service. Follow the steps to set it. * [Webhook](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v4-apis/entrypoints/webhook.md): Declare the webhook identifier to use the Webhook entrypoint on a v4 API Management 4.9 API. Follow the steps to configure it. * [WebSocket](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v4-apis/entrypoints/websocket.md): Configure the WebSocket entrypoint parameters for a v4 API Management 4.9 API. Follow the steps to set them for your API. * [Endpoints](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v4-apis/endpoints.md): Endpoints connect a v4 API Management 4.9 API to its backend, for proxy or message APIs. Compare the endpoint types available. * [Azure Service Bus](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v4-apis/endpoints/azure-service-bus.md): Configure the Azure Service Bus endpoint for a v4 message API in API Management 4.9. Follow the steps through the initial settings. * [Kafka](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v4-apis/endpoints/kafka.md): The Kafka endpoint mediates between a Kafka cluster and an HTTP client in API Management 4.9. Follow the steps to set the bootstrap servers. * [Mock](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v4-apis/endpoints/mock.md): The Mock endpoint emulates a backend HTTP server so you can test an API Management 4.9 v4 API. Follow the steps to configure it. * [MQTT5](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v4-apis/endpoints/mqtt5.md): Configure the MQTT5 endpoint for a v4 message API in API Management 4.9. Learn the server information it needs and how it works. * [Solace](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v4-apis/endpoints/solace.md): Configure the Solace endpoint for a v4 message API in API Management 4.9. Learn the configuration it needs and how it is implemented. * [RabbitMQ](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v4-apis/endpoints/rabbitmq.md): Configure the RabbitMQ endpoint for a v4 message API in API Management 4.9. Follow the steps through the initial settings. * [User Permissions](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v4-apis/user-permissions.md): Configure user and group access to your API Management 4.9 APIs. Follow the steps to add members and set their permissions. * [Quality of Service](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v4-apis/quality-of-service.md): Quality of Service sets the delivery guarantee for an asynchronous API Management 4.9 API. Compare the QoS levels and their compatibility. * [Response Templates](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v4-apis/response-templates.md): Response templates override the default values API Management 4.9 sends back to consumers. Follow the steps to configure one. * [CORS](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v4-apis/cors.md): CORS lets a web page request resources from another domain through your API Management 4.9 v4 API. Follow the steps to configure it. * [Health-checks](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v4-apis/health-checks.md): Health checks monitor the availability of endpoints behind a v4 HTTP proxy API in API Management 4.9. Follow the steps to configure them. * [Documentation](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v4-apis/documentation.md): Add documentation to a v4 API from the API Management 4.9 Console so consumers know how to use it. Follow the steps to add pages and folders. * [Audit Logs](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v4-apis/audit-logs.md): View and filter the audit logs and events recorded for a v4 API in API Management 4.9. Follow the steps to access and filter them. * [Version History](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v4-apis/version-history.md): Version History shows a v4 API's deployment history and the JSON definition of each version in API Management 4.9. Follow the steps to view it. * [Configure v2 APIs](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v2-apis.md): The articles covering how to configure a v2 API in API Management 4.9, from proxy settings through to access. Browse what you need. * [General Settings](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v2-apis/general-settings.md): The general settings for a v2 API Management 4.9 API, grouped into three sections. Follow the steps to access and edit them. * [Proxy Settings](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v2-apis/proxy-settings.md): Configure the proxy settings of a v2 API Management 4.9 API, covering entrypoints and CORS. Follow the steps to change them. * [Load-balancing, Failover, & Health-checks](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v2-apis/load-balancing-failover-and-health-checks.md): API Management 4.9 provides load balancing, failover, and health checks for v2 API backends. Compare the three backend services. * [Service Discovery](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v2-apis/service-discovery.md): Bind the backend endpoints of an API Management 4.9 API to a HashiCorp Consul service. Follow the steps to configure discovery. * [User and Group Access](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v2-apis/user-and-group-access.md): Configure user and group access to your v2 API Management 4.9 APIs. Follow the steps to add members and set their permissions. * [Documentation](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/configure-v2-apis/documentation.md): Create, import, and add metadata to v2 API documentation from the API Management 4.9 Console. Follow the steps to publish it. * [Apply Policies](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies.md): Policies are customizable rules the API Management 4.9 Gateway runs during an API transaction. Compare policy support across v2 and v4 APIs. * [v4 API Policy Studio](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/v4-api-policy-studio.md): The v4 Policy Studio designs flows for APIs using the v4 API Management 4.9 definition. Follow the example to create a flow and add a policy. * [v2 API Policy Studio](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/v2-api-policy-studio.md): The v2 Policy Studio designs flows for APIs using the v2 API Management 4.9 definition. Follow the steps to design and configure flow mode. * [Debug Mode](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/debug-mode.md): Debug mode diagnoses v2 and v4 proxy API flows in API Management 4.9. Learn how to read the debug timeline and the inspector. * [Shared Policy Groups](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/shared-policy-groups.md): Define a collection of API Management 4.9 policies centrally and reuse them across APIs. Follow the steps to create and add a group. * [Resources](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/resources.md): Resources supply reusable configuration to API Management 4.9 policies. Compare the resource types and follow the steps to create one. * [Custom Policies](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/custom-policies.md): Policies act as a proxy controller in the API Management 4.9 Gateway. Follow the steps to generate a policy skeleton and apply your own. * [Policy Reference](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference.md): Every policy you can apply to a Gravitee API in API Management 4.9, linked to its own reference page. Find the policy you need. * [AI - Prompt Guard Rails](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/ai-prompt-guard-rails.md): The Prompt Guard Rails policy evaluates prompts for inappropriate or malicious content in API Management 4.9. Learn what it detects. * [AI - Prompt Token Tracking](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/ai-prompt-token-tracking.md): The Prompt Token Tracking policy counts tokens sent to and received from an AI API in API Management 4.9. Learn how to configure it. * [API Key](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/api-key.md): The API Key policy checks API keys during request processing so only approved apps reach your API Management 4.9 API. Learn how to set it. * [Assign Attributes](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/assign-attributes.md): The Assign Attributes policy sets request and execution context attributes in API Management 4.9. Learn how to configure the variables. * [Assign Content](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/assign-content.md): The Assign Content policy changes or transforms request and response bodies in API Management 4.9. Learn how to configure the transformation. * [Assign Metrics](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/assign-metrics.md): The Assign Metrics policy pushes extra metrics alongside the native request metrics in API Management 4.9. Learn how to configure it. * [Avro to JSON](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/avro-to-json.md): The Avro to JSON policy applies a transformation to request, response, or message content in API Management 4.9. Learn how to configure it. * [Avro to Protobuf](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/avro-to-protobuf.md): The Avro to Protobuf policy applies a transformation to request, response, or message content in API Management 4.9. Learn how to set it. * [AWS Lambda](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/aws-lambda.md): The AWS Lambda policy calls a Lambda instead of or alongside the backend in API Management 4.9. Learn how to configure the policy. * [Basic Authentication](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/basic-authentication.md): The Basic Authentication policy manages basic auth headers on API Management 4.9 calls and compares credentials. Learn how to configure it. * [Cache](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/cache.md): The Cache policy stores upstream responses in API Management 4.9 so repeat calls skip the backend. Learn how to configure the cache. * [Circuit Breaker](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/circuit-breaker.md): The Circuit Breaker policy switches backend or fails with 503 on errors or latency in API Management 4.9. Learn the guarantees it gives. * [CloudEvents](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/cloudevents.md): The CloudEvents policy builds a CloudEvents JSON object from messages in API Management 4.9. Learn how the data content type is set. * [Custom Query Parameters Parser](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/custom-query-parameters-parser.md): The Custom Query Parameters Parser policy controls how API Management 4.9 reads query parameters. Learn what you can configure with it. * [Data Cache](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/data-cache.md): The Data Cache policy gets, sets, and expires key-value pairs in an API Management 4.9 cache resource. Learn how to configure it. * [Data Logging Masking](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/data-logging-masking.md): The Data Logging Masking policy conceals sensitive data in API Management 4.9 logs using JSONPath rules. Learn how to configure it. * [Dynamic Routing](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/dynamic-routing.md): The Dynamic Routing policy dispatches calls to different targets or rewrites URIs in API Management 4.9. Learn how to configure it. * [Generate HTTP Signature](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/generate-http-signature.md): The Generate HTTP Signature policy adds HTTP Signature authentication to API Management 4.9 calls. Learn how to configure the signature. * [Generate JWT](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/generate-jwt.md): The Generate JWT policy issues a signed JWT with configurable claims for API Management 4.9 to forward to a backend. Learn how to set it. * [GeoIP Filtering](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/geoip-filtering.md): The GeoIP Filtering policy controls access to an API Management 4.9 API by IP address, country, or distance. Learn how to configure it. * [GraphQL Rate Limit](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/graphql-rate-limit.md): The GraphQL Rate Limit policy applies basic rate limiting to GraphQL queries in API Management 4.9. Learn how to configure the limits. * [Groovy](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/4.9-groovy.md): The Groovy policy runs a Groovy script at any stage of request processing on the API Management 4.9 Gateway. Learn how to configure it. * [HTML to JSON](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/html-to-json.md): The HTML to JSON transformation policy converts response content in API Management 4.9. Learn how to configure the mapping it applies. * [HTTP Callout](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/http-callout.md): The HTTP Callout policy invokes an external URL and stores the response in API Management 4.9 variables. Learn how to configure it. * [HTTP Redirect](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/http-redirect.md): The HTTP Redirect policy sends RFC 7231 redirect responses to clients from API Management 4.9. Learn how to configure the redirect. * [HTTP Signature](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/http-signature.md): The HTTP Signature policy enforces signature-based authentication on API Management 4.9 calls. Learn how to configure the signature. * [InterOPS](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/interops.md): InterOPS is a French interoperability standard establishing trust between organizations, supported by API Management 4.9. Learn how it applies. * [Interrupt](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/interrupt.md): The Interrupt policy breaks request processing in API Management 4.9 when a condition is met. Learn how to configure the condition. * [IP Filtering](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/ip-filtering.md): The IP Filtering policy allows or denies specific IP addresses on an API Management 4.9 API. Learn how to configure the filters. * [JavaScript](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/javascript.md): The JavaScript policy runs scripts at any stage of API Management 4.9 Gateway processing. Learn how to configure the policy. * [JSON to JSON](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/json-to-json.md): The JSON to JSON policy applies a transformation to request, response, or message content in API Management 4.9. Learn how to set it. * [JSON to XML](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/json-to-xml.md): The JSON to XML policy converts JSON payloads to XML before API Management 4.9 sends or returns them. Learn how to configure it. * [JSON Threat Protection](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/json-threat-protection.md): The JSON Threat Protection policy validates a request body against structural limits in API Management 4.9. Learn how to set the limits. * [JSON Validation](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/json-validation.md): The JSON Validation policy validates payloads against a JSON schema in API Management 4.9. Learn how to configure the schema it uses. * [JWS Validator](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/jws-validator.md): The JWS Validator policy checks token signature, certificate, and expiry before API Management 4.9 calls the backend. Learn how to set it. * [JWT Validator](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/4.9-jwt-validator.md): The JWT policy validates a token's signature and expiry before API Management 4.9 calls the backend. Learn how to configure it. * [Kafka ACL](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/kafka-acl.md): The Kafka ACL policy defines access control lists on cluster resources proxied by API Management 4.9. Learn how to configure them. * [Kafka Message Filtering](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/kafka-message-filtering.md): The Kafka Message Filtering policy controls which Kafka messages reach consumers through API Management 4.9. Learn how to configure it. * [Kafka Offloading](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/kafka-offloading.md): The Kafka Offloading policy controls how message content is offloaded to storage in API Management 4.9. Learn how to configure it. * [Kafka Quota](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/kafka-quota.md): The Kafka Quota policy enforces limits on the data Kafka clients exchange through API Management 4.9. Learn how to configure quotas. * [Kafka Topic Mapping](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/kafka-topic-mapping.md): The Kafka Topic Mapping policy maps one topic name to another so clients can use their own in API Management 4.9. Learn how to set it. * [Kafka Transform Key](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/kafka-transform-key.md): The Kafka Transform Key policy adds a custom message key in API Management 4.9 so you can control partitioning. Learn how to set it. * [Keyless](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/keyless.md): The Keyless security policy treats every request to an API Management 4.9 API as valid and blocks none. Learn when to use it. * [Latency](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/latency.md): The Latency policy adds artificial delay to a request or a response in API Management 4.9. Learn how to configure the delay. * [Maven Archetype](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/maven-archetype.md): A policy is a step in the API Management 4.9 request and response proxy chain. Learn how to generate one with the Maven archetype. * [Message Filtering](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/message-filtering.md): The Message Filtering policy lets a publisher control which messages are streamed to subscribers in API Management 4.9. Learn how to set it. * [Metrics Reporter](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/metrics-reporter.md): The Metrics Reporter policy pushes request metrics to a custom endpoint from API Management 4.9. Learn how to configure the reporter. * [Mock](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/mock.md): The Mock policy returns mock responses from API Management 4.9 so you can test without a backend. Learn how to configure the mock. * [mTLS](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/mtls.md): The mTLS policy verifies that a client certificate is present on an API Management 4.9 request. Learn how to configure the policy. * [OAS Validation](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/oas-validation.md): The OAS Validation policy checks requests and responses against an embedded OpenAPI specification in API Management 4.9. Learn how. * [OAuth2](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/oauth2.md): The OAuth2 policy checks access token validity through introspection in API Management 4.9. Learn how to configure the policy. * [Generic OAuth2 Authorization Server](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/oauth2/generic-oauth2-authorization-server.md): The Generic OAuth2 Authorization Server resource introspects an access token for API Management 4.9. Learn how to configure it. * [Gravitee.io AM Authorization Server](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/oauth2/gravitee.io-am-authorization-server.md): The Access Management authorization server resource introspects a token issued by Gravitee for API Management 4.9. Learn how to set it. * [OpenID Connect UserInfo](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/openid-connect-userinfo.md): The OpenID Connect UserInfo policy fetches user information from an OAuth2 resource in API Management 4.9. Learn how to configure it. * [Override HTTP Method](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/override-http-method.md): The Override HTTP Method policy replaces the method sent by the consumer in API Management 4.9. Learn how to configure the override. * [Protobuf to JSON](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/protobuf-to-json.md): The Protobuf to JSON policy applies a transformation to request, response, or message content in API Management 4.9. Learn how to set it. * [Rate Limit](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/rate-limit.md): API Management 4.9 offers three rate limit policies for capping request volume. Compare them and learn how to configure each one. * [Regex Threat Protection](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/regex-threat-protection.md): The Regex Threat Protection policy inspects request headers, path, parameters, and body in API Management 4.9. Learn how to configure it. * [Request Content Limit](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/request-content-limit.md): The Request Content Limit policy caps the request content length API Management 4.9 accepts. Learn how to configure the maximum. * [Request Validation](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/request-validation.md): The Request Validation policy validates incoming HTTP requests against rules in API Management 4.9. Learn how to define the rules. * [Resource Filtering](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/resource-filtering.md): The Resource Filtering policy restricts or allows access to specific REST resources in API Management 4.9. Learn how to configure it. * [REST to SOAP](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/rest-to-soap.md): The REST to SOAP policy exposes a SOAP backend as a REST API through API Management 4.9. Learn how the SOAP envelope is passed on. * [Retry](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/retry.md): The Retry policy replays requests in API Management 4.9 when the backend fails or a condition matches. Learn how to configure it. * [Role-based Access Control (RBAC)](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/role-based-access-control-rbac.md): The Role-based Access Control policy restricts a resource to the roles you specify in API Management 4.9. Learn how to configure it. * [SSL Enforcement](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/ssl-enforcement.md): The SSL Enforcement policy restricts access to requests meeting your SSL criteria in API Management 4.9. Learn how to configure it. * [Status Code Transformation](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/status-code-transformation.md): The Status Code Transformation policy rewrites the upstream response status code in API Management 4.9. Learn how to configure it. * [Template](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/template.md): A policy template to fork as a quick starter for your own API Management 4.9 policy. Learn what the skeleton gives you to build on. * [Traffic Shadowing](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/traffic-shadowing.md): The Traffic Shadowing policy asynchronously copies API Management 4.9 traffic to another service. Learn how to configure the copy. * [Transform Headers](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/transform-headers.md): The Transform Headers policy overrides headers on incoming or outgoing API Management 4.9 traffic. Learn how to configure it. * [Transform Query Parameters](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/transform-query-parameters.md): The Transform Query Parameters policy overrides incoming query parameters in API Management 4.9. Learn how to configure the override. * [URL Rewriting](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/url-rewriting.md): The URL Rewriting policy rewrites URLs in an API Management 4.9 response header or response body. Learn how to configure it. * [WS Security Authentication](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/ws-security-authentication.md): The WS Security Authentication policy secures SOAP API calls in API Management 4.9 by comparing credentials. Learn how to configure it. * [WS Security Sign](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/ws-security-sign.md): The WS Security Sign policy signs SOAP messages in API Management 4.9 to guarantee integrity. Learn how to configure the signature. * [XML to JSON](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/xml-to-json.md): The XML to JSON policy transforms XML content into JSON content in API Management 4.9. Learn how to configure the transformation. * [XML Threat Protection](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/xml-threat-protection.md): The XML Threat Protection policy validates an XML request body against structural limits in API Management 4.9. Learn how to set them. * [XML Validation](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/xml-validation.md): The XML Validation policy validates XML against an XSD schema in API Management 4.9, rejecting bad requests. Learn how to configure it. * [XSLT](https://documentation.gravitee.io/apim/4.9/create-and-configure-apis/apply-policies/policy-reference/xslt.md): The XSLT policy applies an XSL transformation to an XML request or response body in API Management 4.9. Learn how to configure it. * [Secure & Expose APIs](https://documentation.gravitee.io/apim/4.9/secure-and-expose-apis.md): Plans, applications, and subscriptions govern how an API Management 4.9 API is exposed to consumers. Learn how the three fit together. * [Plans](https://documentation.gravitee.io/apim/4.9/secure-and-expose-apis/plans.md): A plan is the service and access layer an API Management 4.9 API needs before you expose it. Compare the plan types available. * [Keyless](https://documentation.gravitee.io/apim/4.9/secure-and-expose-apis/plans/keyless.md): A keyless plan allows public access to an API Management 4.9 API with no authentication. Learn what it offers and when to use it. * [API Key](https://documentation.gravitee.io/apim/4.9/secure-and-expose-apis/plans/api-key.md): The API Key plan verifies keys during request processing so only approved applications reach your API Management 4.9 API. Learn how. * [OAuth2](https://documentation.gravitee.io/apim/4.9/secure-and-expose-apis/plans/oauth2.md): An OAuth 2.0 plan gives client applications secure, delegated access to an API Management 4.9 API. Learn how the standard works. * [JWT](https://documentation.gravitee.io/apim/4.9/secure-and-expose-apis/plans/jwt.md): A JWT plan secures an API Management 4.9 API with signed claims passed between two parties. Learn how the token is validated. * [Push](https://documentation.gravitee.io/apim/4.9/secure-and-expose-apis/plans/push.md): A Push plan suits an API Management 4.9 API with an entrypoint that sends message payloads, such as Webhook. Learn when to use it. * [mTLS](https://documentation.gravitee.io/apim/4.9/secure-and-expose-apis/plans/mtls.md): An mTLS plan requires a client certificate when connecting to an API Management 4.9 API. Learn how the certificate is used. * [Applications](https://documentation.gravitee.io/apim/4.9/secure-and-expose-apis/applications.md): Consumers register an application and subscribe to a published plan to reach API Management 4.9 APIs. Learn what applications do. * [Create an Application](https://documentation.gravitee.io/apim/4.9/secure-and-expose-apis/applications/create-an-application.md): Create an application in the API Management 4.9 Console so a consumer can subscribe to a plan. Follow the steps to set one up. * [Global Settings](https://documentation.gravitee.io/apim/4.9/secure-and-expose-apis/applications/global-settings.md): An application's global settings hold its details and a danger zone for destructive actions in API Management 4.9. Learn what each does. * [User and Group Access](https://documentation.gravitee.io/apim/4.9/secure-and-expose-apis/applications/user-and-group-access.md): Manage user and group access to an individual API Management 4.9 application. Follow the steps to add and remove members. * [Subscriptions](https://documentation.gravitee.io/apim/4.9/secure-and-expose-apis/subscriptions.md): A subscription is how an API Management 4.9 publisher controls who uses their API and on what terms. Learn how subscriptions work. * [Subscription Requests](https://documentation.gravitee.io/apim/4.9/secure-and-expose-apis/subscriptions/subscription-requests.md): A subscription is a contract between an API Management 4.9 publisher and a consumer. Learn how requests are made and approved. * [Manage Subscriptions](https://documentation.gravitee.io/apim/4.9/secure-and-expose-apis/subscriptions/manage-subscriptions.md): Find and manage an application's subscriptions from the API Management 4.9 Console. Follow the steps to review and change them. * [Transfer Subscriptions](https://documentation.gravitee.io/apim/4.9/secure-and-expose-apis/subscriptions/transfer-subscriptions.md): Transfer an active API Management 4.9 subscription to another plan with the same security type. Follow the steps to move it. * [Developer Portal](https://documentation.gravitee.io/apim/4.9/developer-portal.md): The Developer Portal 4.9 is the web application where consumers discover and consume your APIs. Learn what the portal offers. * [New Developer Portal](https://documentation.gravitee.io/apim/4.9/developer-portal/new-developer-portal.md): The features and functionality of the New Developer Portal 4.9. Browse the tiles to find the area you want to configure. * [Enable the New Developer Portal](https://documentation.gravitee.io/apim/4.9/developer-portal/new-developer-portal/configure-the-new-portal.md): The New Developer Portal 4.9 has an updated interface and more customization. Follow the steps to enable it for your environment. * [Layout and Theme](https://documentation.gravitee.io/apim/4.9/developer-portal/new-developer-portal/layout-and-theme.md): Set the layout and theme of the New Developer Portal 4.9, and browse the catalog by category. Learn what you can change. * [Customize the homepage](https://documentation.gravitee.io/apim/4.9/developer-portal/new-developer-portal/customize-the-homepage.md): Customize the New Developer Portal 4.9 homepage with standard Markdown. Follow the steps to change what consumers see first. * [Application Logs](https://documentation.gravitee.io/apim/4.9/developer-portal/new-developer-portal/application-logs.md): API subscribers view paginated logs for every API their application subscribes to in the Developer Portal 4.9. Learn how to read them. * [Configure Webhook Subscriptions](https://documentation.gravitee.io/apim/4.9/developer-portal/new-developer-portal/configure-webhook-subscriptions.md): Configure a webhook subscription from the Developer Portal 4.9 catalog. Follow the steps to set it up for your application. * [Classic Developer Portal](https://documentation.gravitee.io/apim/4.9/developer-portal/classic-developer-portal.md): The features and functionality of the classic Developer Portal 4.9. Browse the tiles to find the area you need to change. * [Configuration File](https://documentation.gravitee.io/apim/4.9/developer-portal/classic-developer-portal/configuration-file.md): The Developer Portal 4.9 configuration file is assets/config.json. Browse the default configuration and what you can change in it. * [Portal Settings](https://documentation.gravitee.io/apim/4.9/developer-portal/classic-developer-portal/portal-settings.md): Reach the Developer Portal 4.9 settings from the Management Console sidebar. Follow the steps to open and change the settings. * [Layout and Theme](https://documentation.gravitee.io/apim/4.9/developer-portal/classic-developer-portal/layout-and-theme.md): Administrators can change the layout and theme of the Developer Portal 4.9 to control how APIs are presented. Learn what you can customize. * [Manage Users](https://documentation.gravitee.io/apim/4.9/developer-portal/classic-developer-portal/manage-users.md): Users reaching the Developer Portal 4.9 from the Management Console are signed in automatically. Learn how user management works. * [Webhook Subscriptions](https://documentation.gravitee.io/apim/4.9/developer-portal/classic-developer-portal/webhook-subscriptions.md): API consumers configure their webhook subscriptions from the Developer Portal 4.9. Learn what the configuration involves for them. * [Create an Application](https://documentation.gravitee.io/apim/4.9/developer-portal/classic-developer-portal/create-an-application.md): Unless an API has a keyless plan, a consumer registers an application in the Developer Portal 4.9 and subscribes. Follow the steps. * [API Documentation](https://documentation.gravitee.io/apim/4.9/developer-portal/classic-developer-portal/api-documentation.md): Administrators use site-wide documentation in the Developer Portal 4.9 to share best practices and configure pages. Learn what you can set. * [Govern APIs](https://documentation.gravitee.io/apim/4.9/govern-apis.md): The API governance features API Management 4.9 offers, from scoring through to federation. Browse what is available to you. * [Federation](https://documentation.gravitee.io/apim/4.9/govern-apis/federation.md): Federation brings APIs from other gateways and brokers into API Management 4.9 for a single catalogue. Learn how it works. * [Integrations](https://documentation.gravitee.io/apim/4.9/govern-apis/federation/integrations.md): Integrations connect Gravitee to third-party API gateways and event brokers for API Management 4.9. Learn what they provide. * [Discovery](https://documentation.gravitee.io/apim/4.9/govern-apis/federation/discovery.md): Discovery is how an integration connects to a third-party management API and finds its assets for API Management 4.9. Learn the process. * [Federated APIs](https://documentation.gravitee.io/apim/4.9/govern-apis/federation/federated-apis.md): Federated APIs are one of the three main v4 Gravitee API types in API Management 4.9. Learn what they can and cannot do. * [Federation Agent Service Account](https://documentation.gravitee.io/apim/4.9/govern-apis/federation/federation-agent-service-account.md): Create a service account so the federation agent can authenticate to your API Management 4.9 installation. Follow the steps. * [3rd-Party Providers](https://documentation.gravitee.io/apim/4.9/govern-apis/federation/3rd-party-providers.md): Each third-party API gateway or event broker has its own integration for federating APIs into API Management 4.9. Compare the providers. * [Apigee X](https://documentation.gravitee.io/apim/4.9/govern-apis/federation/3rd-party-providers/apigee-x.md): Federate APIs from Apigee X, Google Cloud's API management solution, into API Management 4.9. Learn how the integration works. * [AWS API Gateway](https://documentation.gravitee.io/apim/4.9/govern-apis/federation/3rd-party-providers/aws-api-gateway.md): Federate APIs from AWS API Gateway, the built-in AWS solution, into API Management 4.9. Learn how the integration works for you. * [Multi-Account and Multi-Region AWS API Gateway Federation](https://documentation.gravitee.io/apim/4.9/govern-apis/federation/3rd-party-providers/aws-api-gateway/4.9-multi-account-and-multi-region-aws-api-gateway-federation.md): Configure the AWS API Gateway federation agent to ingest APIs across accounts and regions into API Management 4.9. Follow the steps. * [Azure API Management](https://documentation.gravitee.io/apim/4.9/govern-apis/federation/3rd-party-providers/azure-api-management.md): API Management 4.9 federates APIs from Azure API Management, Azure's built-in solution. Learn how the integration works for you. * [Confluent Platform](https://documentation.gravitee.io/apim/4.9/govern-apis/federation/3rd-party-providers/confluent-platform.md): Federate APIs from Confluent Platform, the event streaming platform built on Kafka, into API Management 4.9. Learn how it works. * [IBM API Connect](https://documentation.gravitee.io/apim/4.9/govern-apis/federation/3rd-party-providers/ibm-api-connect.md): Federate APIs from IBM API Connect, cloud or on-premise, into API Management 4.9. Learn how the integration works for you. * [Mulesoft Anypoint](https://documentation.gravitee.io/apim/4.9/govern-apis/federation/3rd-party-providers/mulesoft-anypoint.md): Federate APIs from the Mulesoft Anypoint Platform into API Management 4.9. Learn how the integration discovers and ingests them. * [Solace](https://documentation.gravitee.io/apim/4.9/govern-apis/federation/3rd-party-providers/solace.md): Federate event APIs from the Solace Event Portal into API Management 4.9. Learn how the integration works with an event mesh. * [Edge Stack](https://documentation.gravitee.io/apim/4.9/govern-apis/federation/3rd-party-providers/edge-stack.md): Edge Stack is a cloud native API gateway running in Kubernetes, federated into API Management 4.9. Learn how the integration works. * [API Score](https://documentation.gravitee.io/apim/4.9/govern-apis/api-score.md): API Score is the automated governance capability in API Management 4.9, scoring APIs on criteria like security. Learn how it works. * [Enable API Score](https://documentation.gravitee.io/apim/4.9/govern-apis/api-score/enable-api-score.md): API Score is available in Gravitee Cloud; a self-hosted API Management 4.9 install needs it enabled. Follow the steps to turn it on. * [View API Scores](https://documentation.gravitee.io/apim/4.9/govern-apis/api-score/view-api-scores.md): High-level API Score statistics appear on the API Score page in API Management 4.9. Follow the steps to reach your dashboard. * [Rulesets and Functions](https://documentation.gravitee.io/apim/4.9/govern-apis/api-score/rulesets-and-functions.md): API Score rulesets hold the rules that rate an API in API Management 4.9. Learn how rulesets and their functions are built. * [Types of Assets](https://documentation.gravitee.io/apim/4.9/govern-apis/api-score/types-of-assets.md): API Score analyses different parts of an API Management 4.9 API against rulesets. Learn which assets are checked and how. * [Analyze & Monitor APIs](https://documentation.gravitee.io/apim/4.9/analyze-and-monitor-apis.md): Analysing and monitoring API Management 4.9 APIs, across dashboards, logging, and quality. Browse the sections that matter to you. * [API Proxy Dashboard](https://documentation.gravitee.io/apim/4.9/analyze-and-monitor-apis/4.9-api-proxy-dashboard.md): Access and interpret the API traffic dashboard for an API Management 4.9 proxy API. Follow the steps to read the traffic it reports. * [Dashboards](https://documentation.gravitee.io/apim/4.9/analyze-and-monitor-apis/dashboards.md): The Gravitee Dashboard is where you build custom views of API Management 4.9 performance and status. Follow the steps to create one. * [API Quality](https://documentation.gravitee.io/apim/4.9/analyze-and-monitor-apis/api-quality.md): API Quality assigns customizable governance scores to your API Management 4.9 APIs. Follow the steps to configure and review them. * [Audit Trail](https://documentation.gravitee.io/apim/4.9/analyze-and-monitor-apis/audit-trail.md): The Audit Trail table and filters let you audit API consumption and activity in API Management 4.9. Follow the steps to use it. * [Reporters](https://documentation.gravitee.io/apim/4.9/analyze-and-monitor-apis/reporters.md): Reporters record events from the API Management 4.9 Gateway and send them onward. Compare the reporters available to you. * [Elasticsearch Reporter](https://documentation.gravitee.io/apim/4.9/analyze-and-monitor-apis/reporters/elasticsearch-reporter.md): Send API Management 4.9 Gateway events to Elasticsearch with the Elasticsearch reporter. Find the configuration details you need. * [File Reporter](https://documentation.gravitee.io/apim/4.9/analyze-and-monitor-apis/reporters/file-reporter.md): Write API Management 4.9 Gateway events to a file with the file reporter. Browse the configuration parameters it accepts. * [TCP Reporter](https://documentation.gravitee.io/apim/4.9/analyze-and-monitor-apis/reporters/tcp-reporter.md): Stream API Management 4.9 Gateway events over TCP with the TCP reporter. Browse the configuration parameters it accepts. * [Datadog Reporter](https://documentation.gravitee.io/apim/4.9/analyze-and-monitor-apis/reporters/datadog-reporter.md): Send API Management 4.9 Gateway events to Datadog with the Datadog reporter plugin. Follow the steps to download and configure it. * [Logging](https://documentation.gravitee.io/apim/4.9/analyze-and-monitor-apis/logging.md): Logging at Gateway and API level in API Management 4.9, and exposing metrics to Prometheus. Follow the guide to configure it. * [OpenTelemetry](https://documentation.gravitee.io/apim/4.9/analyze-and-monitor-apis/opentelemetry.md): Trace every request the API Management 4.9 Gateway handles with the Gravitee OpenTelemetry feature. Learn how tracing is set up. * [Execution Transparency Analytics](https://documentation.gravitee.io/apim/4.9/analyze-and-monitor-apis/execution-transparency-analytics.md): Execution transparency analytics gives actionable diagnostics when an API Management 4.9 call fails. Learn what the components report. * [Agent Mesh](https://documentation.gravitee.io/apim/4.9/agent-mesh.md): Agent Mesh governs and protects AI use cases across API Management 4.9, from the Agent Gateway to LLM and A2A proxies. Learn what it covers. * [Set Up an AI Agent (A2A) Proxy](https://documentation.gravitee.io/apim/4.9/agent-mesh/create-an-a2a-proxy.md): As organizations adopt AI agents, an API Management 4.9 A2A proxy connects them securely. Follow the steps to create a proxy of your own. * [Discover and Catalog AI Agents (A2A)](https://documentation.gravitee.io/apim/4.9/agent-mesh/add-agents-to-your-agent-catalog.md): Add AI agents to your API Management 4.9 Agent Catalog by importing or discovering their Agent Cards. Follow the steps to create an integration. * [Expose Your APIs as AI-Ready Tools with MCP](https://documentation.gravitee.io/apim/4.9/agent-mesh/convert-your-apis-to-mcp-servers.md): Deploy an API Management 4.9 REST API as an MCP Server so AI agents can discover and invoke it. Follow the steps to deploy your API. * [Terraform](https://documentation.gravitee.io/apim/4.9/terraform.md): Terraform manages your API Management 4.9 infrastructure from configuration files. Learn what the Gravitee provider can manage. * [Quick Start Guide](https://documentation.gravitee.io/apim/4.9/terraform/quick-start-guide.md): Manage API Management 4.9 entities with Terraform instead of manual Console updates. Follow the steps to install the Gravitee provider. * [Define an APIM service account for Terraform](https://documentation.gravitee.io/apim/4.9/terraform/define-an-apim-service-account-for-terraform.md): Terraform authenticates to API Management 4.9 as