# strongloop/microgateway

IBM API Connect Microgateway framework, built on Node.js & Nginx

Repository: https://github.com/strongloop/microgateway
Canonical: https://ross.abutalabs.com/products/microgateway
Homepage: https://developer.ibm.com/apiconnect
Language: JavaScript
License: NOASSERTION
License Family: other
Topics: api-management, gateway, apiconnect, nodejs, nginx
Last push: 2019-11-05T04:08:51+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 3654, "days_push": 2493, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1186, forks 178 (observed 2026-08-28T04:03:54.984391+00:00)

## What it is
IBM API Connect Microgateway is an extensible Node.js-based API gateway framework for securing and controlling access to microservices and APIs. It enforces policies defined via OpenAPI (Swagger) specifications, including API key validation, OAuth 2.0, Basic Auth, rate limiting, and custom JavaScript policies.

## Use cases
- secure and control access to microservices apis
- enforce api key validation and oauth2 at the gateway
- rate limit api subscribers per time unit
- define gateway policies using swagger openapi extensions
- transform and inspect api request payloads
- aggregate responses from multiple backend services
- build a lightweight developer-focused api gateway in nodejs

## When to choose
- you need a lightweight node.js api gateway driven by OpenAPI/Swagger definitions
- you want prebuilt policies for OAuth 2.0, Basic Auth, client ID/secret, and rate limiting
- you need to create custom gateway policies via a flexible flow-engine
- you are already using IBM API Connect

## When to avoid
- you need a actively maintained gateway - the project has had no releases since late 2019
- you need high-performance production traffic handling at scale - consider Kong, Envoy, or APISIX
- you want a configuration-only gateway without writing JavaScript policies
- your stack is not Node.js based

## Facets
- artifact type: framework
- maturity: abandoned
- function: api-gateway, auth, authorization, rate-limiting, middleware, routing, http-server
- domain: apis, microservices, backend, security, web-development
- platform: cross-platform
- tags: api-management, openapi, swagger, nginx, oauth2, microservices, ibm, gateway-policies, nodejs, linux, docker

## Member repositories
- strongloop/microgateway (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:54.984391+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:24:04.540954+00:00, confidence not recorded.
  - readme: https://github.com/strongloop/microgateway (fetched 2026-08-28T04:03:54.984391+00:00, sha 6732d5d86f98)
  - registry_npm: https://registry.npmjs.org/microgateway (fetched 2026-08-29T12:31:05.665553+00:00, sha c64fb71e7f8a)
- Data as of 2026-08-30T08:39:29.467469+00:00.