# GSMA

> The GSMA is the London-headquartered global trade body for the mobile industry, representing around 750 mobile network operators and about 400 companies in the wider mobile ecosystem, and the organiser of MWC Barcelona. In the telecom API value chain it is the standards and commitment layer: it operates no production network API endpoints of its own. Its GSMA Open Gateway initiative is the memorandum of understanding under which 69 operator groups, representing 78% of global mobile connections, commit to exposing a common set of network APIs, while the specifications themselves are authored in the Linux Foundation's CAMARA project. The GSMA republishes 17 complete CAMARA OpenAPI 3.0.3 documents anonymously on open-gateway.gsma.com, runs a live public deployment map of 607 launched API instances across 80 operators and 65 countries, and runs a second, fully open developer portal for the GSMA Mobile Money API at developer.mobilemoneyapi.io.

Generated by API Evangelist on 2026-07-25 from the api-evangelist/gsma repository. No GSMA-published llms.txt exists: /llms.txt returns 404 on www.gsma.com and open-gateway.gsma.com.

## What to know before calling anything

- The GSMA hosts no API endpoints. Every Open Gateway OpenAPI declares a templated `{apiRoot}` server variable whose default is a placeholder (`http://localhost:9091`, `https://example.com:443`). The real base URL belongs to an operator or an aggregator. Live deployments are listed at https://open-gateway.gsma.com/map and in the JSON feed at https://d3bj8knxlstxyw.cloudfront.net/assets-map-launches.json
- Authorization for Open Gateway APIs is OpenID Connect against the operator's authorization server, with per-operation CAMARA scopes (30 distinct scopes across the 17 specs). The `openIdConnectUrl` published in every spec is the CAMARA placeholder `https://example.com/.well-known/openid-configuration`.
- The GSMA Mobile Money API is a separate programme with separate conventions: pre-shared `X-API-Key` + `X-Client-Id` headers, an optional end-user `X-User-Bearer` token, `X-CorrelationID` for idempotency and `X-Callback-URL` for asynchronous results.
- Neither programme returns RFC 9457 problem+json.

## APIs

- [GSMA Open Gateway developer portal](https://open-gateway.gsma.com/): 17 CAMARA API documentation pages, anonymous, no login
- [GSMA Open Gateway API reference index](https://open-gateway.gsma.com/docs): seven categories — Authentication and Fraud Prevention, Location Services, Device Information, Communication Quality, Payments and Charging, Computing Services, Communication Services
- [GSMA Mobile Money API](https://developer.mobilemoneyapi.io/api-versions-1.2/): OpenAPI 3.0.0, version 1.2.0, 53 paths across Transactions, Quotations, Accounts, Bills, Debit Mandates, Links and Authorisation Codes
- [GSMA Open Gateway deployment map](https://open-gateway.gsma.com/map): live map of launched API instances
- [GSMA Open Gateway API descriptions](https://www.gsma.com/solutions-and-impact/gsma-open-gateway/gsma-open-gateway-api-descriptions/): the full catalogue, including APIs with no published specification

## Specs

- [Mobile Money API 1.2.0](openapi/gsma-mobile-money-api-openapi.yml)
- [Call Forwarding Signal 0.2.0](openapi/gsma-open-gateway-call-forwarding-signal-openapi.yml)
- [Carrier Billing (wip)](openapi/gsma-open-gateway-carrier-billing-openapi.yml)
- [Carrier Billing Refund (wip)](openapi/gsma-open-gateway-carrier-billing-refund-openapi.yml)
- [Mobile Device Identifier 0.2.0](openapi/gsma-open-gateway-device-identifier-openapi.yml)
- [Device Location Retrieval (wip)](openapi/gsma-open-gateway-device-location-retrieval-openapi.yml)
- [Device Location Verification (wip)](openapi/gsma-open-gateway-device-location-verification-openapi.yml)
- [Device Reachability Status 0.6.1](openapi/gsma-open-gateway-device-reachability-status-openapi.yml)
- [Device Roaming Status 0.6.1](openapi/gsma-open-gateway-device-roaming-status-openapi.yml)
- [Device Swap 0.2.0](openapi/gsma-open-gateway-device-swap-openapi.yml)
- [Home Devices QoD 0.4.0](openapi/gsma-open-gateway-home-devices-quality-on-demand-openapi.yml)
- [Know Your Customer Match 0.3.0](openapi/gsma-open-gateway-know-your-customer-openapi.yml)
- [Number Verification (wip)](openapi/gsma-open-gateway-number-verification-openapi.yml)
- [One Time Password SMS 1.0.0](openapi/gsma-open-gateway-otp-validation-openapi.yml)
- [Population Density Data 0.2.0](openapi/gsma-open-gateway-population-density-data-openapi.yml)
- [Quality on Demand 0.11.1](openapi/gsma-open-gateway-quality-on-demand-openapi.yml)
- [SIM Swap (wip)](openapi/gsma-open-gateway-sim-swap-openapi.yml)
- [Simple Edge Discovery 1.0.0](openapi/gsma-open-gateway-simple-edge-discovery-openapi.yml)

## Artifacts

- [Authentication profile](authentication/gsma-authentication.yml): openIdConnect plus the notification bearer scheme
- [OAuth / OIDC scopes](scopes/gsma-scopes.yml): 30 CAMARA scopes derived from per-operation security requirements
- [API conventions](conventions/gsma-conventions.yml): both programmes' tracing, idempotency, pagination and error semantics
- [Error catalog](errors/gsma-problem-types.yml): 91 CAMARA error codes plus the Mobile Money error object
- [Webhook / event surface](asyncapi/gsma-webhooks.yml): CloudEvents sinks and Mobile Money call-backs
- [Lifecycle](lifecycle/gsma-lifecycle.yml): versioning, deprecations, deployment feed
- [Changelog](changelog/gsma-changelog.yml): Mobile Money 1.2.0 change list
- [Packages / SDKs](packages/gsma-packages.yml): the five first-party Mobile Money SDKs
- [Sandbox](sandbox/gsma-sandbox.yml): the Open Gateway sandbox and the Mobile Money simulator
- [Conformance](conformance/gsma-conformance.yml): which standards the published specifications conform to
- [Domain security](security/gsma-domain-security.yml) and [vulnerability disclosure](security/gsma-vulnerability-disclosure.yml)
- [Candidate MCP tools](mcp/gsma-mcp.yml): 107 tools derived one-per-operation; no GSMA-published MCP server exists
- [Agent skills](skills/_index.yml)
- [Agentic access contracts](agentic-access/gsma-agentic-access.yml)

## Docs

- [Open Gateway FAQ](https://www.gsma.com/solutions-and-impact/gsma-open-gateway/gsma-open-gateway-frequently-asked-questions/)
- [Open Gateway supporters](https://www.gsma.com/solutions-and-impact/gsma-open-gateway/supporters/)
- [Mobile Money API guidelines](https://developer.mobilemoneyapi.io/guidelines/)
- [Mobile Money security guidelines](https://developer.mobilemoneyapi.io/security/)
- [Mobile Money SDK guides](https://developer.mobilemoneyapi.io/sdks/getting-started/introduction.html)
- [CAMARA API overview](https://camaraproject.org/api-overview)
- [GSMA security / coordinated vulnerability disclosure](https://www.gsma.com/security/)

## Optional

- [GSMA GitHub organisation](https://github.com/GSMA): two front-end repositories, no API code
- [GSMA Inclusive Tech Lab GitHub organisation](https://github.com/gsmainclusivetechlab): where the Mobile Money SDKs and compliance/interop test platforms live
- [CAMARA GitHub organisation](https://github.com/camaraproject): the upstream specification source
- [GSMA Services](https://www.gsmaservices.com/): commercial, contract-gated products with no public API documentation