WSO2 API Manager Reviews & Product Details

WSO2 API Manager provides a rich set of features to manage the entire API lifecycle, and compared to other vendors, it stands out with flexible deployment options across on-premise, hybrid, and cloud environments. As a user, I now also really like the AI-driven enhancements – especially the AI Gateway that lets me govern and manage AI APIs with guardrails, dynamic routing across multiple AI models, real-time analytics, and fine-grained controls for AI usage. I can expose my APIs as MCP servers for AI agents to discover and interact with, and I get smarter automation across design, testing, documentation, discovery, and governance with AI-assisted spec generation, natural-language testing, and AI-powered developer portal support. All of this makes API design, deployment, and lifecycle automation much more efficient and future-ready for AI-centric architectures. Review collected by and hosted on G2.com.

One area where WSO2 API Manager can improve is the upgrade process, which could be smoother and more streamlined. While upgrades are well documented, they can still feel complex and time-consuming in real environments, especially when dealing with multiple components and configurations. A more automated and simplified upgrade experience would make it easier to adopt new versions and features with minimal disruption. Review collected by and hosted on G2.com.

WSO2 API Manager is an open source product that offers state of the art API management capabilities. What I like best is its ability to manage the entire API lifecycle in a seamless and efficient manner. It supports everything from API creation and deployment to monitoring and governance within a unified platform. With the integration of new AI features, WSO2 API Manager enhances productivity by intelligently assisting with design, security, and performance optimization. This makes it more effective than many other platforms when it comes to creating, deploying, and managing APIs at scale. Review collected by and hosted on G2.com.

There are no major dislikes, as WSO2 API Manager is a powerful and reliable platform. However, the documentation across different releases could be improved to enhance user friendliness. Clearer guidance and more consistent examples would help users, especially those new to the platform, to navigate features and configurations more easily. Review collected by and hosted on G2.com.

WSO2 API Manager series 4.5 is powered with AI capabilities such as API Chat for Api Developers to test the API, capabilities to connect with other gateways such as Amazon API Gateway, capability to connect AI gateway etc. The publisher portal has now support of AI Design assistant where we provide the prompt and the API design is created on the fly.

The deployment pattern has also been simplified with unified control plane. Earlier I had a challenge in logs and monitoring for WebSocket APIs, however v4.5 has solved the problem of the same. Review collected by and hosted on G2.com.

The latest release base version has come up with some known issues. Some of the observed issues can be resolved or functional can be improved for- Auto-cleanup of API subscriptions on AI Subscription Deletion, apictl usage issue while creating a new api, issue when changing the api provider via admin portal, Sometimes there is a timeout happening in clustered environment when retrieving the artefacts. Review collected by and hosted on G2.com.

WSO2 API Manager has been significantly enhanced the product capabilities with industry standards. The latest release of WSO2 API Manager v4.5 has come up with API powered capabilities like- Create an API with design assistant, API chat to test the API, AI powered multi-model routing for different AI APIs definitely helps in optimal resource utilization. BYOG i.e. bring your own gateway support with WSO2 API manager is like a magic bullet to integrate existing gateways like AWS API Gateway or any custom one. We have tested out the feature and it work seamlessly.

I have also found the improvements in existing capabilities like role-based access control, improved logging and observability, auditing and API documentation. So now your API creator and publisher can see the key parameters missing while creating and publishing an API and that's a big move towards standardization of APIs.

GraphQL APIs creation has been simplified with the latest release.

The latest tutorials on their LMS portal (lms.wso2.com) is updated, so developers can quickly engage with the training and start using the features. Review collected by and hosted on G2.com.

Migration process can be improved. For API mocking capabilities are still lagging which is available in other platforms. Version 4.x is completely revamped, and I observed the backward compatibility is challenging. Devportal customization can be simplified. Review collected by and hosted on G2.com.

AI Guardrails for AI gateways - MCP hub looks cool - MCP Gateway Review collected by and hosted on G2.com.

Need Improvements in UX - customization of dashboard can be improved - still setup needs more time to configure Review collected by and hosted on G2.com.

I have been using WSO2's API Manager product for over 9 years now, and I have followed its evolution since version 2.0.0. I have used version 2.0.0, then 3.2.0, 4.1.0, and currently version 4.5.0.

The product is a real asset and accelerator for managing our API catalog. We rely on its capabilities to provide both external public and internal private service catalogs. Beyond its numerous technical capabilities, the product supports us in managing and governing our API assets in the broadest sense.

Installation and getting started in standard mode is very easy and facilitated by extensive documentation available on the product website.

The implementation could be more tricky if you have special uses cases.

I recommend this product with a rating of 9/10, given that it is an open-source product, there is always room for improvement and evolution. WSO2 is a powerful and renowned publisher, and their teams are always available and do not hesitate to propose product updates if a client need makes sense to them.

I also recommend this product for its reliability in critical production environments, with an availability rate of approximately 99.97% to date. Review collected by and hosted on G2.com.

I don't necessarily have any drawbacks to address regarding the product.

The only drawback I can find is the weakness of the documentation around version migrations. Review collected by and hosted on G2.com.

The latest advancements with AI-powered agents for API creation help reduce workload and minimize human errors, making the development process smoother and more efficient. This adds another layer of value on top of the core strengths we already rely on, and it complements the platform’s ease of use. From real-world customer use cases, I’ve observed WSO2 API Manager handling high traffic loads seamlessly and reliably, which demonstrates its enterprise-grade scalability and stability. Review collected by and hosted on G2.com.

While WSO2 API Manager is a strong platform, there are areas where improvements could make the developer experience smoother. For example, policy management can be time-consuming since adjustments often require multiple edits or manual steps, and having a more streamlined policy editing console would be very beneficial. Additionally, when working with SOAP services, the platform does not expose the WSDL endpoint externally and instead attempts to handle all services as REST APIs. This makes it challenging to directly access or integrate with the underlying SOAP definition. Addressing these types of usability gaps with incremental enhancements and clearer tooling would greatly improve overall efficiency. Review collected by and hosted on G2.com.

Lot of enhancements going on and introducing new and latest features in API space. Review collected by and hosted on G2.com.

With any major release there is some product architecture changes and also new multiple offerings in API and integration space is creating confusion and long term solution is not clear for small to medium organizations that are not comfortable with rapid changes in products. Review collected by and hosted on G2.com.

Open-Source and Cost-Effective:

It's one of the few full-featured, open-source API management solutions, which makes it budget-friendly compared to commercial alternatives.

Customizability and Extensibility:

WSO2 allows deep customization — you can tailor the API gateway, throttling policies, workflows, and even the user portals.

Built-In API Lifecycle Management:

It covers the full API lifecycle — from creation, testing, publishing, and deprecation — with good governance tools.

Rich Set of Features:

Includes advanced features like multi-tenancy, analytics, throttling, monetization, and integrated Identity Server for OAuth2, JWT, etc.

Good Integration Capabilities:

Easily integrates with other WSO2 products and external systems through connectors, REST APIs, and custom extensions.

Developer Portal:

The self-service API Developer Portal is well-designed and allows consumers to browse, test, and subscribe to APIs easily. Review collected by and hosted on G2.com.

Community Support is Limited:

Being open-source is a plus, but the community is not as large or responsive as those of better-known tools like Kong or Apigee. Enterprise support is available, but at a cost. Review collected by and hosted on G2.com.

I've been using WSO2 API Manager for a while now, and I can confidently say it's one of the best open-source API management solutions out there — especially if you're looking for something enterprise-grade yet customizable.

One of the biggest positives for me is the flexibility and extensibility it offers. Whether you're building APIs from scratch, managing existing services, or applying complex authentication and throttling policies, WSO2 lets you tweak things exactly the way you want. It integrates well with other systems (including identity providers, analytics platforms, and CI/CD tools), and the way it separates components like Publisher, Developer Portal, and Gateway gives you a lot of control over your architecture. Review collected by and hosted on G2.com.

One of the biggest challenges is the initial complexity like in setting it up.

Although the documentation is extensive, it’s not always clear. Review collected by and hosted on G2.com.