UCSB Campus API Gateway
The single API front door for the campus, at api.ucsb.edu. Every campus API is published as a proxy on it and it enforces the ucsb-api-key application entitlement before a request reaches a backend web service. It runs on Apigee (api.ucsb.edu CNAMEs to ucsb-prod.apigee.net) but the domain, the proxies, the API products and the backend services are UCSB’s, so this is institution-operated infrastructure on a vendor runtime, not a vendor tenancy. Probed live 2026-08-30: an unauthenticated call returns 401 with an Apigee fault envelope, and the CORS allow-list advertises the whole auth surface — ucsb-api-key, ucsb-api-version, ucsb-user-jwt.