Skip to content
SPECIFICTION
Get listed

Zuplo

zuplo.com

From $25/mo Free plan WebLinuxAPISelf-hosted
Visit zuplo.com
Spec score 8.5 #4 of 36 in API Marketplace Software

What it is

Zuplo is an API management platform with API Gateway, AI Gateway, and MCP Gateway products. API protections include API keys, JWT, Basic Auth, mTLS, bot detection, rate limiting, and schema validation. OpenAPI supports documentation and cataloging, and every plan includes a hosted developer portal that can use a customer domain. The AI Gateway routes requests among OpenAI, Anthropic, Google, and Mistral, and offers semantic caching, prompt injection protection, secret masking, and spending budgets. MCP Gateway is included on every plan for authenticating, routing, and governing MCP servers. Documented logging integrations include AWS CloudWatch, Datadog, Dynatrace, New Relic, Google Cloud Logging, Loki, Splunk, Sumo Logic, and VMware Log Insight. Zuplo says its gateways deploy to more than 300 edge locations; self-hosted or dedicated deployment is available. GitHub GitOps is supported on Free and Builder, while Enterprise lists GitHub, Bitbucket, GitLab, and Azure DevOps. Free costs nothing and includes up to 100K monthly requests. Builder costs $25 a month, with additional requests charged at $100 per 100K.

Spec sheet

What it does
Zuplo is a managed API, AI and MCP gateway for securing, governing, deploying and documenting APIs.Read 15 Oct 2026 · zuplo.com
Product
Zuplo describes itself as an API management platform with API Gateway, AI Gateway, and MCP Gateway products.Read 30 Sep 2026 · zuplo.com
Deployment
Zuplo says it deploys gateways to more than 300 edge locations, and its pricing page lists self-hosted or dedicated deployment as available.Read 30 Sep 2026 · zuplo.com
Integrations
Documented integrations include GitHub, GitLab, Bitbucket, Azure DevOps, Stripe, Auth0, Cognito, Okta, Datadog, New Relic, Splunk, Grafana, Cloudflare and AWS Lambda.Read 15 Oct 2026 · getapp.com
Compliance
Its security documentation points to a SOC 2 Type II trust and compliance report.Read 15 Oct 2026 · zuplo.com
Support
The pricing page lists community support and chat, email and ticketed support, and 24x7x365 premium support as an add-on.Read 30 Sep 2026 · zuplo.com
AI Gateway
AI Gateway routes OpenAI, Anthropic, Gemini and Mistral traffic, with semantic caching, prompt-injection protection, secret masking and team dollar budgets.Read 15 Oct 2026 · zuplo.com
API and SDK extensibility
Programmable APIs expose request/context, caching, hooks, logging and handlers for OpenAPI, MCP, WebSockets, Lambda, URL forwarding and custom code through @zuplo/runtime.Read 15 Oct 2026 · zuplo.com
API management
The platform provides authentication, rate limiting, request validation, CORS, API keys, developer portals and programmable TypeScript policies.Read 15 Oct 2026 · zuplo.com
API protection
Its API security features include API keys, JWT, Basic Auth, mTLS, bot detection, rate limiting, and schema validation.Read 30 Sep 2026 · zuplo.com
Developer portal
The hosted portal generates OpenAPI reference pages, API Explorer testing, Markdown/MDX/React content, key management, usage dashboards, themes and custom domains.Read 15 Oct 2026 · zuplo.com
Documentation depth
The documentation is organized into getting started, API management, AI Gateway, MCP, developer portal, deployment, analytics, observability, networking, programming API, limits, security, support and changelog sections.Read 15 Oct 2026 · zuplo.com
Funding news
A December 19, 2024 company post announced a $9 million seed raise led by Trilogy Equity Partners with Boldstart Ventures, BoxGroup and angel investors.Read 15 Oct 2026 · dev.to
GetApp deployment options
GetApp describes managed edge deployment plus self-hosting on AWS, Azure, on-premises, Kubernetes or virtual machines.Read 15 Oct 2026 · getapp.com
Git workflow
Zuplo supports GitOps with GitHub on Free and Builder; Enterprise lists GitHub, Bitbucket, GitLab, and Azure DevOps.Read 30 Sep 2026 · zuplo.com
GitOps deployment
GitHub pushes deploy automatically, while GitLab, Bitbucket and Azure DevOps can deploy through the CLI command npx zuplo deploy --api-key.Read 15 Oct 2026 · zuplo.com
Legal name and funding
Crunchbase lists the legal name Zuplo, Inc., Seattle headquarters, founders Josh Twist and Nathan Totten, and one seed round backed by Trilogy Equity Partners and Boldstart Ventures.Read 15 Oct 2026 · crunchbase.com
Limit: local tooling
Some G2 reviewers say local development tools could be improved.Read 15 Oct 2026 · g2.com
Limit: SOAP conversion
A G2 reviewer identifies the lack of built-in SOAP-to-REST conversion as a missing capability.Read 15 Oct 2026 · g2.com
Limit: usage pricing
A G2 reviewer says costs accumulate as usage increases even though the pricing structure is initially reasonable.Read 15 Oct 2026 · g2.com
Local installation
The local gateway tutorial requires Node.js 24.0.0 or newer, creates projects with npx create-zuplo-api@latest and runs the dev gateway on localhost:9000.Read 15 Oct 2026 · zuplo.com
Maker facts
LinkedIn lists Zuplo as a privately held Seattle software-development company founded in 2021 with 11–50 employees.Read 15 Oct 2026 · linkedin.com
MCP Gateway
MCP Gateway centrally manages internal and external MCP servers, virtual MCP servers and role-based tool permissions.Read 15 Oct 2026 · zuplo.com
Notable limits
Free includes 100K monthly requests and 2 account members; Builder includes 100K requests and charges $100 per additional 100K requests.Read 30 Sep 2026 · zuplo.com
Notable product release
The July 15, 2025 changelog added MCP handler debug mode, OAuth protected-resource discovery and metrics retries, and fixed JWT expiration handling.Read 15 Oct 2026 · zuplo.com
OpenAPI
Zuplo uses OpenAPI for API documentation and cataloging.Read 30 Sep 2026 · zuplo.com
Outage history
StatusGator reports more than 68 Zuplo outages or notifications, including slow file saves in August 2026 and deployment or portal incidents in 2025–2026.Read 15 Oct 2026 · statusgator.com
Platform limits
Documented limits include 30-second requests, 128 MB memory, 500 MB request bodies, 1,000 subrequests and 50 environment variables per environment on Free and Builder.Read 15 Oct 2026 · zuplo.com
Praise: developer workflow
G2 reviewers praise excellent documentation, policy building, custom code, edge routing, API-key management, analytics, logs and AWS Lambda integration.Read 15 Oct 2026 · g2.com
Praise: ease and support
G2's review summary repeatedly praises ease of use, responsive support, simplified API management, intuitive interfaces and GitHub integration.Read 15 Oct 2026 · g2.com
Praise: Gartner support
Gartner reviewers praise responsive support, implementation of requested features, candid handling of problems and good feature value for the price.Read 15 Oct 2026 · gartner.com
Rating on Capterra
0.0 out of 5 from 0 reviews.Read 15 Oct 2026 · capterra.com
Rating on G2
4.8 out of 5 from 41 reviews.Read 15 Oct 2026 · g2.com
Rating on Gartner Peer Insights
5.0 out of 5 from 15 reviews.Read 15 Oct 2026 · gartner.com
Rating on GetApp
0 out of 5 from 0 reviews.Read 15 Oct 2026 · getapp.com
Rating on TrustRadius
0 out of 10 from 0 reviews.Read 15 Oct 2026 · trustradius.com
Security and compliance
Zuplo's security page states that SOC 2 Type II, audit logs, and policy enforcement evidence are built into the platform.Read 30 Sep 2026 · zuplo.com
Security controls
Zuplo states it uses phishing-resistant 2FA, least-privilege access, Cloudflare and GCP, WAF/DDoS protection, mTLS, encryption at rest and in transit, vulnerability scanning and penetration tests.Read 15 Oct 2026 · zuplo.com
Self-host requirements
Self-hosting requires Kubernetes, Helm 3, a LoadBalancer, cluster administration, wildcard DNS, a container registry and outbound HTTPS connectivity.Read 15 Oct 2026 · zuplo.com
Self-hosting
Self-hosted Zuplo runs in a customer Kubernetes cluster while API traffic remains in the customer infrastructure.Read 15 Oct 2026 · zuplo.com
TrustRadius support limits
TrustRadius lists free support through email, forums, knowledge base and videos, with phone and live chat on paid support tiers.Read 15 Oct 2026 · trustradius.com
Zudoku licence
Zuplo's Zudoku developer-documentation framework is open source under the MIT licence and is described as free and self-hostable.Read 15 Oct 2026 · github.com

Plans and prices

Free Free $0/mo; free forever for ≤ 100K req/mo 100K requests/month · 2 account members · 5 environments · 100 consumers/API keys · 2 projects/services · GitHub GitOps · 14-day Analytics trial Read 30 Sep 2026 · zuplo.com
Starter Free $0/mo Free forever ≤100K requests/mo · 14-day Analytics trial · up to 2 account members · GitOps with GitHub Read 15 Oct 2026 · zuplo.com
Builder $25 a month $25/mo plus $100 per 100K requests 100K requests included · up to 2 custom domains for $25/mo · 10 environments · 1,000 consumers/API keys · 2 projects/services · 300 data centers Read 15 Oct 2026 · zuplo.com
Enterprise Priced on request Contact us Custom volume and limits · SSO/RBAC · audit logs · SLA 99.5% baseline up to 99.999% · self-hosted/dedicated options Read 15 Oct 2026 · zuplo.com

Every Zuplo plan and price →

Strong points and limits

Strong points

  • API protections include mTLS, bot detection, and rate limiting.
  • Developer portal is included on every plan.
  • AI Gateway supports four listed providers.
  • MCP Gateway is included on every plan.
  • Self-hosted or dedicated deployment is available.

Limits

  • Free plan is limited to 100K monthly requests.
  • Free plan includes only 2 account members.
  • Builder charges $100 per additional 100K requests.

Who it suits

Zuplo suits teams managing APIs that need gateway security, documentation, a developer portal, or AI and MCP gateway capabilities. Its plans include hosted and self-hosted or dedicated deployment options.

Verdict

Zuplo brings API gateway controls, a developer portal, and AI and MCP gateway features into one platform. Compare request limits and deployment options with your needs, and note the additional-request charge on Builder.

Where Specifiction places it

Alternatives to ZuploAll alternatives →