An API gateway is a software component that provides a controlled entry point for API requests between systems. It receives requests from clients or applications, routes them to the correct backend service, and commonly applies controls such as authentication, authorization, rate limiting, request transformation, and logging.
In manufacturing and industrial systems, an API gateway may sit between MES, ERP, PLM, QMS, historian, analytics, supplier portal, or cloud applications. It helps standardize how systems expose and consume services without requiring every application to connect directly to every other application.
An API gateway should not be confused with an API itself. The API defines the callable functions or data contract, while the gateway manages access to those APIs. It is also distinct from a message broker or enterprise service bus, although these technologies may coexist in an integration architecture. A gateway can support governance and traceability of API traffic, but it does not by itself define master data, validate business logic, or establish compliance status.