Open Source API Gateway for OpenAPI, REST, SOAP and GraphQL

Modern APIs. Existing Systems.
One Flexible API Gateway.

Deploy from OpenAPI, connect to SOAP services, and adapt the gateway to legacy systems.

Try Membrane in minutes

Run the Gateway

Start managing APIs with simple YAML files and Docker.

Terminal
$ cat apis.yaml
api:
  port: 2000
  target:
    url: https://apibin.io

$ docker run --rm -p 2000:2000 -v "$(pwd)/apis.yaml:/opt/membrane/conf/apis.yaml" predic8/membrane
06:17:55,864  INFO 3 main ApiInfo:34 {} - Started 1 API:
06:17:55,864  INFO 3 main ApiInfo:36 {} - 0.0.0.0:2000
06:17:55,865  INFO 3 main RouterCLI:431 {} -  Membrane API Gateway 7.5.0 up and running!

Mount a configuration file and start docker. Then open http://localhost:2000 or use curl: curl http://localhost:2000.

Continue with the tutorial

Define the contract. Reuse it at the gateway.

Deploy APIs from OpenAPI

OpenAPI as single source for development and operation

Instead of configuring every endpoint individually, deploy an OpenAPI document and let Membrane handle routing and message validation. Membrane displays the deployed APIs and lets users explore and test them.

Explore OpenAPI deployment
api:
  port: 2000
  openapi:
    - location: fruitshop.yaml
      validateRequests: yes

Modernize Legacy Systems

Expose SOAP services as REST APIs.

Membrane can generate an OpenAPI description from WSDL and map between JSON and XML automatically.

Explore SOAP-to-REST and OpenAPI to WSDL
api:
  port: 2000
  flow:
    - wsdl2openapi:
        wsdl: partner.wsdl
        operations:
          getPartner:
            method: GET
            path: /partners/{id}
          createPartner:
            method: POST
            path: /partners

AI Gateway and Governance

Control AI Access and Usage

Connect teams to LLMs and give agents controlled access.

Combine LLM access management and MCP protection with Membrane’s authentication, validation, and traffic controls.

  • Provider API key sharing: authenticate clients with internal credentials while keeping provider keys private.
  • LLM restrictions: control which models users can access, limit tokens, and enforce usage quotas.
  • Usage tracking: track token consumption by internal API key
  • MCP protection: validate incoming JSON-RPC requests and restrict MCP tool usage.
Central LLM gateway connecting applications to OpenAI, Anthropic, and Google AI

Compose APIs into workflows

Orchestrate API Calls

Call external APIs, process collections, and build multi-step flows.

Membrane can orchestrate calls to external APIs using loops and conditional processing. Use gateway configuration to coordinate API workflows without writing a separate integration service.

In this example, Membrane iterates over a list of fruits, transforms each item into JSON, and sends it to an external product API.

Explore API orchestration
api:
  port: 2000
  flow:
    - for:
        in: $.fruits
        language: jsonpath
        flow:
          - setBody:
              value: ${toJSON(it)}
          - call:
              method: POST
              url: https://api.predic8.de/shop/v2/products

Free API Gateway eBook

The API Gateway Handbook

Understand the concepts. Put them into practice.

Learn how to design, secure, and operate API gateways. Start with vendor-neutral fundamentals, then explore practical Membrane examples for OpenAPI, authentication, message transformation, and SOAP integration.

Get the Free API Gateway Handbook
The API Gateway Handbook cover

Meet the Developers

API Gateway Tech Talk

Exchange experiences, explore API Gateway technology, and ask the Membrane developers your questions.

Free · Online · About one hour · Everyone welcome

Next Tech Talk

Legacy Integration with XML, SOAP, and WSDL

Explore SOAP routing, WSDL validation, XML/JSON conversion, and SOAP-to-REST modernization.

Join the Tech Talk

Coming Up

  1. Authentication with JSON Web Tokens

    October 28, 2026 · 17:00 CET

  2. MCP and AI Tool Integration

    November 25, 2026 · 17:00 CET

  3. Message Transformation

    December 30, 2026 · 17:00 CET

All Topics and Registration

Start with the complete gateway

All features. Open source.

Add commercial support when you need it.

Use the same Apache 2.0 licensed software with or without a support subscription. There is no separate enterprise edition to unlock.

Explore Support Options