Getting started
You can easily install the self-hosted gateway with Docker:
docker run -d -p 8080:8080 -p 8081:8081 --name <gateway-name> --env config.service.endpoint=<instance-name>.configuration.azure-api.net
config.service.auth=<auth-token> mcr.microsoft.com/azure-api-management/gateway:2.10.0
Learn how you can install it on other container platforms:
- Deploy self-hosted gateway on Kubernetes with Helm
- Deploy self-hosted gateway on Kubernetes with Azure Arc (Preview)
- Deploy self-hosted gateway on Kubernetes with YAML
Here are other relevant resources:
- Authenticate self-hosted gateway with Azure AD
- Self-hosted gateway on Microsoft Artifact Registry
- Our image tagging strategy
What is new?
Highlights
- MCP support (public preview), enabling you to expose APIs in API Management or external MCP servers as AI agent tools with stronger authentication, governance, and observability.
- Applications (public preview), offering built-in OAuth 2.0–based access to products.
Features
- You can now enable content-safety checks on chat completions for final redaction, logging, and response validation using the
enforce-on-completions
attribute of thellm-content-safety
policy. This setting is off by default. - Model logging now supports the Azure OpenAI Realtime API.
- The policy engine now blocks embedding scripts using the
XsltSettings.EnableScript
setting. - The
validate-azure-ad-token
policy now returns more detailed error messages when token validation fails. - API inspector now provides better visibility into authentication, showing when OAuth or OIDC settings were last refreshed, whether refresh succeeded, and any error details.
Fixes / Changes
None.
Breaking Changes
None.
Removal
None.