Freedom251 › API Monetization Software
Zuplo

What Zuplo is
Zuplo is an API management platform with API Gateway, AI Gateway and MCP Gateway products. Its security features include API keys, JWT, Basic Auth, mTLS, bot detection, rate limiting and schema validation. OpenAPI supports API documentation and cataloging, and every plan includes a hosted developer portal that can use a customer's domain. The AI Gateway routes requests among providers including OpenAI, Anthropic, Google and Mistral, with semantic caching, prompt injection protection, secret masking and spending budgets. MCP Gateway is included on every plan for authenticating, routing and governing MCP servers. Zuplo lists logging integrations for services such as AWS CloudWatch, Datadog, New Relic and Splunk, and says its platform includes SOC 2 Type II, audit logs and policy enforcement evidence. Gateways deploy to more than 300 edge locations, according to Zuplo; self-hosted or dedicated deployment is also available. Free is $0/month for up to 100K monthly requests. Builder costs $25/mo, with additional requests at $100 per 100K.
Who it suits
Zuplo suits teams managing APIs that need gateway security, documentation and a hosted developer portal. Its AI and MCP gateway features are relevant to teams routing AI-provider requests or governing MCP servers.
What it does well
- API security includes rate limiting and schema validation.
- Hosted developer portal is included on every plan.
- MCP Gateway is included on every plan.
- Free plan includes up to 100K monthly requests.
- Self-hosted or dedicated deployment is available.
What to know first
- Free plan is limited to 2 account members.
- Builder charges $100 per additional 100K requests.
- Enterprise pricing requires contacting Zuplo.
Limits
Free includes 100,000 requests per month, two account members, five environments, 100 consumers/API keys, and two projects/services. Builder includes 100,000 requests and charges $100 for each additional 100,000; it includes up to two custom domains, ten environments, 1,000 consumers/API keys, and two projects/services.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Free | $0/mo; free forever for ≤ 100K req/mo · 100K requests/month · 2 account members · 5 environments · 100 consumers/API keys · 2 projects/services · GitHub GitOps · 14-day Analytics trial | Free |
| Starter | $0/mo · Free forever ≤100K requests/mo · 14-day Analytics trial · up to 2 account members · GitOps with GitHub | Free |
| Builder | $25/mo plus $100 per 100K requests · 100K requests included · up to 2 custom domains for $25/mo · 10 environments · 1,000 consumers/API keys · 2 projects/services · 300 data centers | $25 a month |
| Enterprise | Contact us · Custom volume and limits · SSO/RBAC · audit logs · SLA 99.5% baseline up to 99.999% · self-hosted/dedicated options | On request |
As zuplo.com lists them, read 30 Sept 2026. The maker's own page has the final word.
Getting started
- Visit https://zuplo.com/.
- Choose the Free plan or Builder at $25 per month.
- Use GitHub GitOps on Free or Builder if you want a Git-based workflow.
- Configure an API Gateway, AI Gateway, or MCP Gateway.
- Use the hosted developer portal, with a customer domain if needed.
Zuplo is a unified gateway and portal service for organizations running APIs alongside AI models or MCP servers. It fits API teams that want security, documentation, traffic governance and a customer-facing portal under one roof. The free tier is useful for small programs, while Builder’s overage rate makes traffic forecasting essential.
Overview
Zuplo combines API Gateway, AI Gateway and MCP Gateway products with OpenAPI-based documentation and cataloging. Its hosted developer portal is included on every plan and can run on your domain, giving API consumers a branded place to find documentation and access services without buying a separate portal product. This breadth suits teams building an API program; a documentation-only project would be paying for capabilities it may not use.
Gateways can be deployed across more than 300 edge locations, while self-hosted or dedicated deployment is offered for organizations that need control over where the gateway runs. GitOps through GitHub is available on Free and Builder, with broader repository choices on Enterprise.
Key features
Security controls include API keys, JWT, Basic Auth, mutual TLS, bot detection, rate limiting and schema validation. That combination covers authentication, abuse prevention and contract enforcement in a single gateway. Zuplo also states that SOC 2 Type II, audit logs and policy-enforcement evidence are built into the platform, which matters for regulated or audit-conscious teams.
The AI Gateway can distribute requests among OpenAI, Anthropic, Google and Mistral. Semantic caching can reduce repeated model work, while prompt-injection protection, secret masking and spending budgets address operational and cost risks around AI traffic. The MCP Gateway is included on every plan and provides authentication, routing and governance for MCP servers, making Zuplo relevant where emerging tool protocols sit beside conventional APIs.
Documented logging integrations include AWS CloudWatch, Datadog, Dynatrace, New Relic, Google Cloud Logging, Loki, Splunk, Sumo Logic and VMware Log Insight. Interactive API documentation, an API catalog and basic usage analytics round out the platform.
Pricing
Free
Free costs free and remains free forever while usage is at or below 100K requests per month. It includes 2 account members, 5 environments, 100 consumers or API keys, 2 projects or services, GitHub GitOps and a 14-day Analytics trial. This is a sensible fit for prototypes, internal services and small API portfolios. The two-member cap and 100K-request ceiling will constrain larger teams, and the analytics trial is temporary.
Builder
Builder costs $25 a month, including 100K requests. Additional usage costs $100 per 100K requests, so a traffic increase can quickly outweigh the low subscription price. The plan raises capacity to 10 environments and 1,000 consumers or API keys, adds up to 2 custom domains, and retains 2 projects or services, GitHub GitOps and a 14-day Analytics trial. It suits a growing team that can keep traffic predictable; high-volume public APIs should model overages carefully.
Enterprise
Enterprise uses custom pricing and custom request volume, domains and environments. It adds SSO/RBAC, dedicated or self-hosted deployment, and a 99.5% baseline SLA with up to 99.999% available. Premium 24x7x365 support is an add-on. This is the route for organizations with identity, residency, availability or support requirements beyond the fixed plans.
Platforms
Zuplo supports API, Linux, self-hosted and web deployments. Hosted portal delivery is standard, with dedicated or self-hosted gateway options on Enterprise.
Who it's for
Choose Zuplo if one team needs to protect, document and publish APIs while governing model and MCP traffic. It is particularly suitable for organizations that value OpenAPI cataloging, a branded portal and Git-based workflow. It is a weaker fit for a simple documentation site or for workloads whose request volume makes Builder overages unpredictable.
Pros and cons
- Pro: API, AI and MCP gateways share one management layer, reducing the need to stitch together separate traffic-control products.
- Pro: The portal is free on every plan and supports a custom domain, useful for presenting a consistent developer experience.
- Pro: Broad authentication, policy and logging integrations support varied security and observability setups.
- Con: Builder charges $100 for each additional 100K requests, creating a substantial variable-cost risk.
- Con: Free is limited to two members and 100K monthly requests, which may force an early upgrade.
- Con: Analytics beyond the 14-day trial is not included in the fixed-plan allowance.
Alternatives
Gravitee API Gateway is worth choosing when an Apache 2.0 community edition and Windows support matter, with no numerical limits stated for that edition.
Kong Gateway fits teams wanting a 30-day free trial with no Gateway limits and 30 days of analytics retention.
Lago is the better direction for teams seeking an AGPLv3 open-source, self-hosted product focused on billing.
Moesif suits API programs centered on event analytics, with a 14-day trial of Growth features.
Revenium is an option for transaction observation, offering 100,000 transactions per month and seven days of retention on Observe.
Stigg is aimed at entitlements and usage management, with a free Build plan covering 10,000 managed entities and 5M usage events monthly.
Apigee API hub may suit eligible Apigee organizations that can use it at no additional cost in supported regions.
Flexprice is a billing-focused alternative with a free allowance of 100K events per month.
For broader comparisons, see the API Monetization Software, API Developer Portal Software and API Marketplace Software lists.
Verdict
Zuplo is a strong choice for API teams that want gateway security, OpenAPI organization, a hosted branded portal and governance for AI and MCP traffic in one service. Start with Free for modest usage, but look elsewhere or negotiate Enterprise terms if request volume is high or unpredictable, because Builder’s overage pricing can become the dominant cost.
Verdict
Zuplo combines API management with AI and MCP gateway capabilities and a hosted developer portal. Free has a stated request and member limit; Builder costs $25/mo before additional request charges.
Questions
Does Zuplo have a free plan?
Yes. Free costs $0 per month and includes up to 100,000 monthly requests.
How much does Builder cost?
Builder costs $25 per month. Additional requests cost $100 per 100,000.
Which platforms does Zuplo support?
Listed platforms are API, Linux, self-hosted, and web.
Can Zuplo be self-hosted?
Yes. Self-hosted or dedicated deployment is available.
What does the AI Gateway do?
It routes requests among OpenAI, Anthropic, Google, and Mistral, and includes semantic caching, prompt injection protection, secret masking, and spending budgets.
Facts from Zuplo's own pages
- AI Gateway
- AI Gateway routes OpenAI, Anthropic, Gemini and Mistral traffic, with semantic caching, prompt-injection protection, secret masking and team dollar budgets. · zuplo.com, 15 Oct 2026
- API and SDK extensibility
- Programmable APIs expose request/context, caching, hooks, logging and handlers for OpenAPI, MCP, WebSockets, Lambda, URL forwarding and custom code through @zuplo/runtime. · zuplo.com, 15 Oct 2026
- API management
- The platform provides authentication, rate limiting, request validation, CORS, API keys, developer portals and programmable TypeScript policies. · zuplo.com, 15 Oct 2026
- API protection
- Its API security features include API keys, JWT, Basic Auth, mTLS, bot detection, rate limiting, and schema validation. · zuplo.com, 30 Sept 2026
- Compliance
- Its security documentation points to a SOC 2 Type II trust and compliance report. · zuplo.com, 15 Oct 2026
- Deployment
- Zuplo says it deploys gateways to more than 300 edge locations, and its pricing page lists self-hosted or dedicated deployment as available. · zuplo.com, 30 Sept 2026
- Developer portal
- The hosted portal generates OpenAPI reference pages, API Explorer testing, Markdown/MDX/React content, key management, usage dashboards, themes and custom domains. · zuplo.com, 15 Oct 2026
- Documentation depth
- The documentation is organized into getting started, API management, AI Gateway, MCP, developer portal, deployment, analytics, observability, networking, programming API, limits, security, support and changelog sections. · zuplo.com, 15 Oct 2026
- Funding news
- A December 19, 2024 company post announced a $9 million seed raise led by Trilogy Equity Partners with Boldstart Ventures, BoxGroup and angel investors. · dev.to, 15 Oct 2026
- GetApp deployment options
- GetApp describes managed edge deployment plus self-hosting on AWS, Azure, on-premises, Kubernetes or virtual machines. · getapp.com, 15 Oct 2026
- GitOps deployment
- GitHub pushes deploy automatically, while GitLab, Bitbucket and Azure DevOps can deploy through the CLI command npx zuplo deploy --api-key. · zuplo.com, 15 Oct 2026
- Git workflow
- Zuplo supports GitOps with GitHub on Free and Builder; Enterprise lists GitHub, Bitbucket, GitLab, and Azure DevOps. · zuplo.com, 30 Sept 2026
- Integrations
- Documented integrations include GitHub, GitLab, Bitbucket, Azure DevOps, Stripe, Auth0, Cognito, Okta, Datadog, New Relic, Splunk, Grafana, Cloudflare and AWS Lambda. · getapp.com, 15 Oct 2026
- Legal name and funding
- Crunchbase lists the legal name Zuplo, Inc., Seattle headquarters, founders Josh Twist and Nathan Totten, and one seed round backed by Trilogy Equity Partners and Boldstart Ventures. · crunchbase.com, 15 Oct 2026
- Limit: local tooling
- Some G2 reviewers say local development tools could be improved. · g2.com, 15 Oct 2026
- Limit: SOAP conversion
- A G2 reviewer identifies the lack of built-in SOAP-to-REST conversion as a missing capability. · g2.com, 15 Oct 2026
- Limit: usage pricing
- A G2 reviewer says costs accumulate as usage increases even though the pricing structure is initially reasonable. · g2.com, 15 Oct 2026
- Local installation
- The local gateway tutorial requires Node.js 24.0.0 or newer, creates projects with npx create-zuplo-api@latest and runs the dev gateway on localhost:9000. · zuplo.com, 15 Oct 2026
- Maker facts
- LinkedIn lists Zuplo as a privately held Seattle software-development company founded in 2021 with 11–50 employees. · linkedin.com, 15 Oct 2026
- MCP Gateway
- MCP Gateway centrally manages internal and external MCP servers, virtual MCP servers and role-based tool permissions. · zuplo.com, 15 Oct 2026
- Notable limits
- Free includes 100K monthly requests and 2 account members; Builder includes 100K requests and charges $100 per additional 100K requests. · zuplo.com, 30 Sept 2026
- Notable product release
- The July 15, 2025 changelog added MCP handler debug mode, OAuth protected-resource discovery and metrics retries, and fixed JWT expiration handling. · zuplo.com, 15 Oct 2026
- OpenAPI
- Zuplo uses OpenAPI for API documentation and cataloging. · zuplo.com, 30 Sept 2026
- Outage history
- StatusGator reports more than 68 Zuplo outages or notifications, including slow file saves in August 2026 and deployment or portal incidents in 2025–2026. · statusgator.com, 15 Oct 2026
Where Zuplo stands on Freedom251
- API Monetization Software#6 of 41
- API Developer Portal Software#7 of 36
- API Marketplace Software#13 of 36
