Doorman

Doorman is an open source API and AI gateway that sits between clients and backend services. It centralizes the concerns that otherwise get rebuilt in every application: routing, authentication, access control, rate limiting, logging and usage limits. One gateway handles REST, GraphQL, gRPC, SOAP and AI service traffic, so teams can put policy in front of model endpoints and conventional APIs in the same place. It is aimed at developers and platform teams who want to stop writing boilerplate auth and traffic code. Traffic management covers upstream definitions, dynamic route configuration, protocol translation and load balancing, all changeable without redeploying application code. Identity and access features include users, groups, roles, JWT and API key authentication and role based permissions applied consistently across services. Traffic policy covers quotas, throttles, API credits, bandwidth limits and response caching, and AI governance adds usage controls for AI services. Searchable request logs and endpoint level metrics show latency, status codes and rate limit behavior without another integration. Doorman runs in memory for local development and uses Redis and MongoDB in production, as a Python service or a container in cloud or private network environments. The gateway is free open source software under the Apache 2.0 license, and no paid plans are published. The site states that a hosted control plane is planned but not currently available, so today every deployment is self hosted.