Features

Everything you need to ship an API.

A clean gateway, per-customer keys, plans with trials, customer webhooks and a public marketplace — all in one place.

<5 ms

p50 gateway overhead

15

webhook event types

15%

platform cut, no extras

feature surface production path
Buyer request 200 OK

GET /weather/v1/forecast · 42ms

Seller console live

82%

monthly quota used

+€1,284

provider revenue

EU

data residency

For buyers

The buyer workflow

01

Discover

Compare APIs by category, price, status, latency and provider before a key is created.

02

Subscribe

Choose a plan, start a trial or activate a paid subscription; limits and costs are visible up front.

03

Integrate

Copy the key, use the sample request and call api.oanor.com instead of the upstream directly.

04

Control

Usage, daily limits, monthly quota, invoices, webhooks and key history stay traceable.

For sellers

The seller workflow

01

Publish

Maintain API profile, endpoints, SEO copy and languages without exposing secrets.

02

Price

Create plans with trials, hard limits, overage and feature bullets.

03

Protect

The gateway enforces RPS, daily and monthly limits, blocks expired subscriptions and logs admin actions.

04

Grow

Subscribers, reviews, endpoint analytics and payout data show which APIs produce revenue.

Scenarios

The critical cases are planned.

Billing and API access must remain correct when limits, trials, payments or upstreams become difficult.

Limit reached

RPS, daily and monthly limits are checked per subscription before the upstream is reached.

429 or overage by plan

Trial expires

Trial days are part of the plan; after expiry, access continues only with a valid subscription.

No silent free access

Payment missing

Subscriptions and keys depend on billing status so buyers cannot consume around the paygate.

Access blocked

Webhook must be trusted

Events are signed, retried and logged; receivers verify the signature before processing.

HMAC + retry + log

Upstream fails

Failures stay separated: oanor gateway, provider upstream and customer key are traceable.

Clear 5xx/status data

Localized slugs

English is the default without /en; German uses /de and localized segments, future languages follow the same pattern.

Scalable i18n structure

Platform

One control plane for marketplace, gateway and billing.

The page separates buyer and seller needs, but the platform calculates against the same sources: subscription, plan, key, usage and payment status.

Billing as gate

Active subscription, trial, expiry, hard limit and overage decide whether a request may continue.

Gateway before upstream

Customers call oanor; upstream auth, header allow-list and error handling stay server-side.

Usage visible

Requests, latency, error rate, quota warnings and webhook events are traceable for operations and support.

Audit & EU

Admin actions, signatures and data residency are prepared so support and compliance do not have to guess.

Frequently asked questions

Quick answers about pricing, quotas, and integration.

How does the no-leak gateway work?
Your client never speaks directly to the upstream API. You call api.oanor.com with your oanor-key; our gateway forwards the request to the provider using the provider's own secret, strips response headers that might leak server info, and emits a usage event for billing.
Are rate limits hard or soft?
Hard. Every tier has a per-second + monthly quota, both enforced in Redis with a sliding window. Once exhausted the gateway returns 429 — no overage charges, no surprise bills.
What does the typical gateway latency look like?
Median gateway overhead is well under 100 ms in the EU region. The total response time depends mostly on the upstream API; the gateway adds auth, quota checks and event emission.
Do I get webhooks for billing and usage events?
Yes. Subscribe to the events you care about (invoice.paid, subscription.canceled, quota.exceeded, …) and we'll POST signed payloads to your endpoint with HMAC-SHA256 verification.
Can I list my own API on oanor?
Yes. Anbieter werden onboarded through a verification flow — verify your domain + identity once, then publish OpenAPI specs and pricing tiers in the provider dashboard.