Quick Start
Prerequisites
Section titled “Prerequisites”- An Apiway tenant (register here if you haven’t already)
- An OpenAPI 3.x specification file (
.yamlor.json)
Deploy via the Platform API
Section titled “Deploy via the Platform API”Apiway is API-first. The fastest path from spec to production is a single API call.
-
Upload your OpenAPI specification
Terminal window curl -X POST https://core.api.apiway.net/v1/programmes \-H "Authorization: Bearer $TOKEN" \-H "Content-Type: application/json" \-d '{"name": "My First API","specification": "<base64-encoded OAS>"}'This kicks off the Quick Deploy pipeline — an 8-step server-side process that handles everything automatically.
-
Track progress
Poll the returned programme ID to watch each step complete:
Terminal window curl https://core.api.apiway.net/v1/programmes/{id}/progress \-H "Authorization: Bearer $TOKEN"The pipeline runs through: validation, compliance check, recommendations, governance submission, approval, deployment, subscription creation, and activation.
-
Call your API
Once deployed, your API is live behind the gateway:
Terminal window curl https://alpha.gateway.apiway.net/my-first-api-v1/resources \-H "Authorization: Bearer $API_TOKEN"
Deploy via the Management UI
Section titled “Deploy via the Management UI”-
Navigate to the API Catalogue — Open the management portal and go to Cartography > APIs.
-
Upload your spec — Click Quick Deploy, drag your OAS file, and confirm. The progress bar tracks each step in real time.
-
Review governance — If your organisation has approval workflows configured, the API enters a governance review. Approvers are notified automatically.
-
Go live — Once approved, the API deploys to your configured gateway. You’ll see it in the catalogue with a live status, endpoint URL, and subscription details.
What Just Happened?
Section titled “What Just Happened?”Behind the scenes, Apiway:
- Validated your OAS against the OpenAPI 3.x standard
- Scored your spec for compliance with your organisation’s API design standards
- Generated recommendations for improving your API design
- Applied security — OAuth 2.0 client credentials and per-operation scopes (even if your OAS had no security defined)
- Submitted the API to your governance workflow for approval
- Deployed proxy and policy documents to your gateway
- Created a subscription with credentials for immediate use
- Activated the deployment using blue-green revision promotion