Ship APIs without leaking secrets.
Oanor is the secret-safe API gateway: per-customer keys, plans, quotas and built-in observability. EU-hosted, GDPR-compliant, pure PHP — framework-free, audit-friendly, fast to deploy.
The features that matter.
- Zero secret leakage — provider credentials never leave the gateway, CI-verified
- Snapchat, TikTok, Twitch, YouTube, IMDB, Threads APIs — proxied and metered
- Per-key usage, quotas, /metrics endpoint, Prometheus-compatible
- EU-hosted, GDPR-compliant, multilingual dashboard, audit trail
Built for the way this actually works.
Oanor is the secret-safe API gateway: per-customer keys, plans, quotas and built-in observability. EU-hosted, GDPR-compliant, pure PHP — framework-free, audit-friendly, fast to deploy.
If your problem fits the description above, the fastest path forward is to visit the product directly, or to write us a short note describing what you need.
Answers, before you ask.
What do you mean by ‘secret-safe’?
Upstream provider credentials live inside the gateway. Customer applications authenticate with Oanor-issued keys and never see provider tokens — a leaked customer key cannot expose Snapchat or TikTok credentials.
Which upstreams do you support out of the box?
Snapchat, TikTok, Twitch, YouTube, IMDB and Threads are first-class today. Custom upstreams can be added on Team and Enterprise plans.
Can I see usage per customer?
Yes. Per-key usage, quota status and error rates are surfaced both in the dashboard and via a Prometheus-compatible /metrics endpoint.
Is Oanor GDPR-compliant?
Yes. Hosting is EU-only (Frankfurt), the data-processing addendum is published, and customer data is segregated per workspace.
How is Oanor priced?
A free developer tier, then per-request pricing on Pro and Team plans. Enterprise plans include private upstream pools and dedicated support.
Have a project? Tell us.
Partnership inquiries, integrations, press — we read everything.