Skip to main content



For security reasons, API7 Enterprise should authenticate and authorize consumers before they access to internal resources. API7 Enterprise has a flexible plugin extension system and a number of plugins for user authentication and authorization.

Key authentication is a relatively simple but widely used authentication approach. Ideally, it works in the following way:

  1. The administrator adds an authentication key (API key) to the route.
  2. API consumers add the key to the query string or headers for authentication when sending requests.

Each route can use one authentication mechanism. Do not enable multiple authentication plugins on a single route or enable authentication plugins as global rules. Logo

API Management for Modern Architectures with Edge, API Gateway, Kubernetes, and Service Mesh.


API7 Cloud

SOC2 Type IRed Herring

Copyright © APISEVEN Ltd. 2019 – 2024. Apache, Apache APISIX, APISIX, and associated open source project names are trademarks of the

Apache Software Foundation