Apistaq
apistaq.com
What it is
Apistaq is an API governance control plane for platform teams that builds versioning, rate-limit policies, SDKs, and developer portals from OpenAPI specifications. It tracks spec changes, identifies breaking changes, and supports documentation by version, deprecation notices, and sunset dates. Rate-limit policies can use token bucket, sliding window, or fixed window algorithms, with global, tag-level, and endpoint-level inheritance. SDK generation covers TypeScript, Python, and Go, with publishing options for npm, PyPI, and pkg.go.dev; generation is available on Builder and Platform. The generated portal can include an interactive explorer, versioned documentation, SDK links, and spec-derived changelogs. Specs can be supplied through GitHub, GitLab, Bitbucket, a direct URL, or manual YAML or JSON upload. Apistaq says it does not proxy API traffic and is not an API gateway. The Free plan is free, Builder is $149 a month, and Platform is $399 a month. The Free plan includes basic versioning for up to three versions per API and global rate-limit policies.
Spec sheet
- What it does
- Apistaq is a control plane that derives API versioning, rate-limit policies, SDKs and a developer portal from one OpenAPI specification.Read 15 Oct 2026 · apistaq.com
- Purpose
- Apistaq is an API governance control plane for platform teams that derives versioning, rate-limit policies, SDKs, and developer portals from an OpenAPI spec.Read 8 Oct 2026 · apistaq.com
- Intended users
- Apistaq describes its intended users as platform engineers at fintech companies, B2B SaaS platforms, and developer-tool companies.Read 8 Oct 2026 · apistaq.com
- Integrations
- Apistaq lists GitHub, GitLab, Bitbucket, Postman, Swagger Editor, Stoplight, and Insomnia as compatible with its existing-stack workflow.Read 8 Oct 2026 · apistaq.com
- Support
- Community support is included in the Free plan.Read 15 Oct 2026 · apistaq.com
- API access
- The management API supports project creation, spec syncs, and SDK build-status retrieval using a Bearer token.Read 8 Oct 2026 · apistaq.com
- API authentication
- Management API requests use bearer tokens issued from the account API Keys settings.Read 15 Oct 2026 · apistaq.com
- API versioning
- Version lifecycle metadata is declared with x-apistaq-version annotations, including current versions, deprecated versions and sunset dates.Read 15 Oct 2026 · apistaq.com
- Architecture
- Apistaq states that it is not an API gateway and does not proxy live API traffic.Read 15 Oct 2026 · apistaq.com
- Breaking-change checks
- Spec updates are diffed to classify removed fields, changed parameter types and deleted endpoints as breaking changes.Read 15 Oct 2026 · apistaq.com
- Developer portal
- The portal provides an interactive Try-It-Out explorer, versioned documentation, SDK links and spec-derived changelogs.Read 15 Oct 2026 · apistaq.com
- Documentation depth
- Documentation includes a quickstart, API reference, SDK guides and OpenAPI-source configuration guidance.Read 15 Oct 2026 · apistaq.com
- Free plan limits
- The Free plan includes basic versioning for up to three versions per API and global rate-limit policies; SDK generation is available on Builder and Platform.Read 8 Oct 2026 · apistaq.com
- Go SDK
- The Go generator creates an idiomatic client with context support and structured errors.Read 15 Oct 2026 · apistaq.com
- Limit: free governance
- The Free plan provides basic versioning capped at three versions per API and only global rate-limit policies.Read 15 Oct 2026 · apistaq.com
- Limit: paid portal controls
- Custom CNAME domains and white-label portal theming require Builder or Platform.Read 15 Oct 2026 · apistaq.com
- Limit: paid SDK access
- SDK generation is restricted to Builder and Platform plans.Read 15 Oct 2026 · apistaq.com
- Maker disclosure
- The pages reviewed provide an email address and New York telephone number but do not state a legal company name, headquarters or founding year.Read 15 Oct 2026 · apistaq.com
- Management API
- The public management API supports project listing and creation, manual spec syncs, sync-status retrieval and SDK-release listing.Read 15 Oct 2026 · apistaq.com
- Not a gateway
- Apistaq says it does not proxy API traffic and is not an API gateway.Read 8 Oct 2026 · apistaq.com
- Notable incident
- On April 24, 2026, an SDK pipeline deployment caused approximately 44 minutes of elevated latency before rollback.Read 15 Oct 2026 · apistaq.com
- OpenAPI support
- The product examples and documentation use OpenAPI 3.1 specifications.Read 15 Oct 2026 · apistaq.com
- Pipeline timing
- The quickstart says a typical first sync takes 60–90 seconds and runs validation, generation, type checking, linting and publishing.Read 15 Oct 2026 · apistaq.com
- Portal branding
- Custom domains and white-label portal theming are available on paid tiers, while the portal itself is available on all plans.Read 15 Oct 2026 · apistaq.com
- Python SDK
- The Python generator creates an async httpx client with Pydantic validation and supports Python 3.9 or newer.Read 15 Oct 2026 · apistaq.com
- Rate algorithms
- The rate-limit feature supports token bucket, sliding window and fixed window algorithms.Read 15 Oct 2026 · apistaq.com
- Rate inheritance
- Policies can be set globally, overridden by OpenAPI tag, and overridden again per endpoint.Read 15 Oct 2026 · apistaq.com
- Rate limiting
- Rate limits are configured with x-apistaq-policy annotations in the OpenAPI file.Read 15 Oct 2026 · apistaq.com
- Rate limits
- Rate-limit policies can use token bucket, sliding window, or fixed window algorithms, with global, tag-level, and endpoint-level inheritance.Read 8 Oct 2026 · apistaq.com
- Rate-limit responses
- The service documents RFC 6585 429 responses with Retry-After headers.Read 15 Oct 2026 · apistaq.com
- SDK generation
- It generates TypeScript, Python, and Go SDKs and can publish them to npm, PyPI, and pkg.go.dev.Read 8 Oct 2026 · apistaq.com
- SDK languages
- Automatic SDK generation supports TypeScript, Python and Go.Read 15 Oct 2026 · apistaq.com
- SDK registries
- Generated packages can be published to npm, PyPI and pkg.go.dev.Read 15 Oct 2026 · apistaq.com
- SDK versioning
- SDK semantic versions are derived from OpenAPI changes, with major bumps for breaking changes and patch or minor bumps for non-breaking changes.Read 15 Oct 2026 · apistaq.com
- Secrets
- The quickstart says registry tokens are encrypted at rest and never exposed in logs.Read 8 Oct 2026 · apistaq.com
- Secrets security
- Registry credentials are described as encrypted at rest and excluded from logs.Read 15 Oct 2026 · apistaq.com
- Source integrations
- The product lists GitHub, GitLab, Bitbucket, Postman, Swagger Editor, Stoplight and Insomnia as compatible tools or sources.Read 15 Oct 2026 · apistaq.com
- Spec ingestion
- OpenAPI files can be connected through GitHub, GitLab or Bitbucket repositories, a direct URL, or manual YAML/JSON upload.Read 15 Oct 2026 · apistaq.com
- Spec sources
- The quickstart lists GitHub, GitLab, Bitbucket, a direct URL, and manual YAML or JSON upload as OpenAPI source options.Read 8 Oct 2026 · apistaq.com
- Sunset headers
- Deprecated endpoints can receive RFC 8594 Sunset and RFC 8288 Deprecation response headers.Read 15 Oct 2026 · apistaq.com
- System status
- The status page reported all listed services operational and 99.97% uptime over the previous 90 days.Read 15 Oct 2026 · apistaq.com
- TypeScript SDK
- The TypeScript generator produces a strongly typed fetch client with JSDoc and supports dual ESM/CommonJS output.Read 15 Oct 2026 · apistaq.com
- Versioning
- It tracks spec changes, detects breaking changes, and supports per-version documentation, deprecation notices, and sunset dates.Read 8 Oct 2026 · apistaq.com
Plans and prices
Free Free $0/mo Up to 3 APIs · 1M req/mo · 1 portal · 3 versions per API · global rate-limit policies Read 15 Oct 2026 · apistaq.com
Builder $149 a month $149/mo Up to 25 APIs · 10M req/mo · 5 portals · 10 seats Read 15 Oct 2026 · apistaq.com
Platform $399 a month $399/mo Unlimited APIs · 100M req/mo · unlimited portals · unlimited seats Read 15 Oct 2026 · apistaq.com
Strong points and limits
Strong points
- Tracks spec changes and detects breaking changes.
- Supports three rate-limit algorithms and inherited policies.
- Generates TypeScript, Python, and Go SDKs on paid tiers.
- Free plan costs nothing.
- Accepts specs from repositories, URLs, or manual upload.
Limits
- Free versioning is limited to three versions per API.
- Free plan rate limits are global only.
- SDK generation is unavailable on the Free plan.
- Apistaq is not an API gateway and does not proxy traffic.
Who it suits
Apistaq describes its intended users as platform engineers at fintech companies, B2B SaaS platforms, and developer-tool companies. It may suit teams governing OpenAPI-based API lifecycles, but it does not proxy traffic.
Verdict
Apistaq centralizes spec-driven lifecycle controls and developer-facing materials, while leaving API traffic proxying to other systems. The Free plan is limited, and SDK generation requires Builder or Platform.
Where Specifiction places it
- API Governance Software#2 of 259.1
Alternatives to ApistaqAll alternatives →
Karate From $8.33/mo · Free plan 9.1 Visit 
DigitalAPI From $2,500/mo 8.8 Visit 
Postman From $9/mo · Free plan 8.5 Visit 
Redocly From $10/mo 8.4 Visit 
Apiway From €1,000/mo · Free plan 8.3 Visit 
CodeRifts From $149/mo · Free plan 8.3 Visit 
Grapity From $29.95/mo · Free plan 8.3 Visit