Specification Version 1.0.0

The Standard
of Trust.

Most tools tell you after a promise is broken. OpenSLA stops you making promises you cannot keep. Your agreement becomes a vendor-neutral, machine-readable document the platform enforces — limits taken from the agreement itself, capacity checked before you sell it, and one customer never slowing everyone else. Coming: the numbers themselves recommended from evidence of what your API actually delivers.

GitHub Open Source Repo Declarative & Portable

01. Metadata

Info & Identity

Defines the version, title, and contact points for the SLA, mirroring the OpenAPI (OAS) style for a coherent developer experience.

02. Consumer

Client & Tiering

Specifies the consumer ID and tier (Gold, Silver, Bronze), allowing Apiway to resolve the "SaaS Trio" (Client-Identity-Entitlement).

03. Guarantees

Performance Latency

Declarative targets for P95/P99 latency and availability. These provide the benchmark for automated guarantor tools.

04. Quotas

Edge Protection

Numeric, non-subjective limits: Rate Limits (RPM), Spike Arrests (TPS), and Daily/Monthly volume caps.

The Declarative Manifest

OpenSLA provides the Numeric Proof of an API’s ability. By defining these values, the runtime performance of an API can be measured over time at intermediate infrastructure.

Gateway Enforcement

  • ✓ Spike Arrest: Neutralize bursts before they hit your code.
  • ✓ Quota Policing: Enforce commercial tiers automatically.
  • ✓ Compliance Sync: Link SLA guarantees to real-time OWASP protection.
example-sla-v1.0.0-consumer1.yaml 
# Mapping Consumer1 to the Gold Tier
client:
  id: "consumer1"
  tier: "gold"

guarantees:
  latency:
    p99: 200ms
    p95: 150ms
  availability: "99.9%"

quotas:
  rateLimit: 5000rpm
  spikeArrest: 100tps
  dailyQuota: 1000000

Parsable by Apiway Engine v1.0+

The Producer's Edge

Closing Knowledge Gaps

The process of filling out an OpenSLA manifest forces your team to discover performance capabilities before the production release. It exposes blind spots in your architecture.

Building Community Trust

In enterprise environments where GitHub stars or forks aren't present, OpenSLA provides the automated guarantor of ability that early adopters and stakeholders require.

Drive the standard forward.

Contribute on GitHub Try Apiway Cloud

The Alpha Journey.

From friction to a product that earns.

01. Architect & Design

Design Studio Design, and a mock customers can use
Checked against the design Blueprint vs. Code Compliance Shielding
Changes that never break customers Zero-Drift Consumer Continuity Defense

02. Govern & Steward

One platform Sign-in, access and who owns what
Adaptive Approvals Risk-Based Institutional Sign-off Tiers
Tested continuously Automated Post-Deployment Verification

03. Scale & Capture

API Economy Produced & Consumed APIs in One Catalogue
Agentic Governance AI Agent & MCP Server Trust Layer
Your shop window Branded White-Label Marketplace
Earning Usage tracked, cost recovered

The whole life of a product that earns.