Emissary-Ingress website screenshot

Emissary-Ingress

Emissary-Ingress is a CNCF incubating Kubernetes-native API gateway built on the Envoy proxy. It provides ingress control, load balancing, authentication, rate limiting, and traffic management for microservices. Emissary-Ingress is configured through Kubernetes custom resources and supports canary releases, circuit breaking, and automatic retries.

Emissary-Ingress publishes 5 APIs on the APIs.io network, including AuthService API, Host API, Mapping API, and 2 more. Tagged areas include API Gateway, Cloud Native, Envoy, Incubating, and Ingress.

The Emissary-Ingress catalog on APIs.io includes 1 JSON-LD context and 1 Spectral governance ruleset.

Emissary-Ingress’ developer surface includes documentation, getting-started guide, support, engineering blog, changelog, and 9 more developer resources.

50.1/100 developing ▬ flat Agent 22/100 agent aware Full breakdown ↓
scored 2026-07-28 · rubric v0.6
AccessFreemium
6 APIs
API GatewayCloud NativeEnvoyIncubatingIngressKubernetes

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-28 · rubric v0.6
Composite quality — 50.1/100 · developing
Contract Quality 15.9 / 25
Developer Ergonomics 5.2 / 20
Commercial Clarity 7.9 / 20
Operational Transparency 6.8 / 13
Governance 7.0 / 12
Discoverability 7.2 / 10
Agent readiness — 22/100 · agent aware
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
MCP Server 0 / 12
Machine-Readable Auth 0 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/emissary-ingress: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 6

Individual APIs this provider publishes, each with its own machine-readable definition.

Emissary-Ingress Gateway API

Emissary-Ingress supports a subset of the Kubernetes Gateway API standard, including GatewayClass, Gateway, and HTTPRoute resources. This enables teams to use the next-generatio...

Emissary-Ingress AuthService API

Operations for managing AuthService custom resources that configure external authentication and authorization services. Emissary-Ingress will call the configured auth service be...

Emissary-Ingress Host API

Operations for managing Host custom resources that configure domain names, TLS certificate management via ACME/Let's Encrypt, and TLS termination for ingress traffic. A Host bin...

Emissary-Ingress Mapping API

Operations for managing Mapping custom resources that define routing rules for inbound HTTP/HTTPS traffic. A Mapping connects a URL path or prefix to a backend Kubernetes servic...

Emissary-Ingress RateLimitService API

Operations for managing RateLimitService custom resources that configure integration with external rate limiting services compatible with the Envoy rate limit API.

Emissary-Ingress TLSContext API

Operations for managing TLSContext custom resources that define reusable TLS configuration including certificates, cipher suites, minimum protocol versions, and client certifica...

Open Collections 1

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

Pricing Plans 1

Published pricing tiers and plan structures.

Rate Limits 1

Documented rate limits and quota policies.

Emissary Ingress Rate Limits

5 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Semantic Vocabularies 1

JSON-LD contexts and semantic vocabularies used across these APIs.

Emissary Ingress Context

0 classes · 10 properties

JSON-LD

Spectral Rules 1

Spectral governance rulesets for linting and validating these APIs.

Emissary-Ingress API Rules

6 rules · 5 warnings 1 info

SPECTRAL

JSON Schema 1

Standalone JSON Schema definitions for this provider's data models.

Emissary-Ingress Mapping

5 properties

JSON SCHEMA

Security Posture 1

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Emissary Ingress Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Emissary Ingress Agentic Access

20 operations · 11 acting

20 operations · 11 acting

AGENTIC

Resources

Get Started 1

Portal, sign-up, and the first successful call

Documentation 2

Reference material describing how the API behaves

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 1

Pagination, idempotency, versioning, errors, and events

Build 2

SDKs, sample code, and the tooling you integrate with

Access & Security 1

Authentication, authorization, and security posture

Operate 4

Status, limits, changes, and where to get help

Company 2

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: emissary-ingress
name: Emissary-Ingress
description: Emissary-Ingress is a CNCF incubating Kubernetes-native API gateway built on the Envoy proxy. It provides ingress
  control, load balancing, authentication, rate limiting, and traffic management for microservices. Emissary-Ingress is configured
  through Kubernetes custom resources and supports canary releases, circuit breaking, and automatic retries.
url: https://www.getambassador.io/products/api-gateway
accessModel:
  pricing: freemium
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Freemium
  confidence: medium
  source:
  - plans
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/emissary-ingress.png
tags:
- API Gateway
- Cloud Native
- Envoy
- Incubating
- Ingress
- Kubernetes
created: '2026-03-16'
modified: '2026-05-19'
specificationVersion: '0.19'
type: Index
apis:
- aid: emissary-ingress:emissary-ingress-gateway-api
  name: Emissary-Ingress Gateway API
  description: Emissary-Ingress supports a subset of the Kubernetes Gateway API standard, including GatewayClass, Gateway,
    and HTTPRoute resources. This enables teams to use the next-generation Kubernetes ingress standard for defining routing
    rules, with support for path matching, header matching, and weighted load balancing across backend services.
  humanURL: https://emissary-ingress.dev/docs/3.8/topics/using/gateway-api/
  properties:
  - type: Documentation
    url: https://emissary-ingress.dev/docs/3.8/topics/using/gateway-api/
  tags:
  - Gateway API
  - HTTPRoute
  - Kubernetes
  - Routing
- aid: emissary-ingress:emissary-ingress-authservice-api
  name: Emissary-Ingress AuthService API
  description: Operations for managing AuthService custom resources that configure external authentication and authorization
    services. Emissary-Ingress will call the configured auth service before forwarding requests to upstream services.
  humanURL: https://www.getambassador.io/docs/emissary/
  tags:
  - AuthService
  properties:
  - type: OpenAPI
    url: openapi/emissary-ingress-authservice-api-openapi.yml
  - type: Documentation
    url: https://www.getambassador.io/docs/emissary/
  - type: GettingStarted
    url: https://www.getambassador.io/docs/emissary/latest/topics/install/yaml-install
  - type: Reference
    url: https://www.getambassador.io/docs/emissary/latest/topics/running/
  - type: ChangeLog
    url: https://archive.getambassador.io/docs/emissary/3.1/release-notes/
  - type: JSONSchema
    url: json-schema/emissary-ingress-mapping-schema.json
  - type: Authentication
    url: https://www.getambassador.io/docs/emissary/latest/topics/running/services/auth-service
  - type: RateLimits
    url: https://www.getambassador.io/docs/emissary/latest/topics/running/services/rate-limit-service
- aid: emissary-ingress:emissary-ingress-host-api
  name: Emissary-Ingress Host API
  description: Operations for managing Host custom resources that configure domain names, TLS certificate management via ACME/Let's
    Encrypt, and TLS termination for ingress traffic. A Host binds a hostname to TLS configuration and controls HTTPS redirect
    behavior.
  humanURL: https://www.getambassador.io/docs/emissary/
  tags:
  - Host
  properties:
  - type: OpenAPI
    url: openapi/emissary-ingress-host-api-openapi.yml
  - type: Documentation
    url: https://www.getambassador.io/docs/emissary/
  - type: GettingStarted
    url: https://www.getambassador.io/docs/emissary/latest/topics/install/yaml-install
  - type: Reference
    url: https://www.getambassador.io/docs/emissary/latest/topics/running/
  - type: ChangeLog
    url: https://archive.getambassador.io/docs/emissary/3.1/release-notes/
  - type: JSONSchema
    url: json-schema/emissary-ingress-mapping-schema.json
  - type: Authentication
    url: https://www.getambassador.io/docs/emissary/latest/topics/running/services/auth-service
  - type: RateLimits
    url: https://www.getambassador.io/docs/emissary/latest/topics/running/services/rate-limit-service
- aid: emissary-ingress:emissary-ingress-mapping-api
  name: Emissary-Ingress Mapping API
  description: Operations for managing Mapping custom resources that define routing rules for inbound HTTP/HTTPS traffic.
    A Mapping connects a URL path or prefix to a backend Kubernetes service with support for header matching, rewriting, timeouts,
    retries, and traffic weighting.
  humanURL: https://www.getambassador.io/docs/emissary/
  tags:
  - Mapping
  properties:
  - type: OpenAPI
    url: openapi/emissary-ingress-mapping-api-openapi.yml
  - type: Documentation
    url: https://www.getambassador.io/docs/emissary/
  - type: GettingStarted
    url: https://www.getambassador.io/docs/emissary/latest/topics/install/yaml-install
  - type: Reference
    url: https://www.getambassador.io/docs/emissary/latest/topics/running/
  - type: ChangeLog
    url: https://archive.getambassador.io/docs/emissary/3.1/release-notes/
  - type: JSONSchema
    url: json-schema/emissary-ingress-mapping-schema.json
  - type: Authentication
    url: https://www.getambassador.io/docs/emissary/latest/topics/running/services/auth-service
  - type: RateLimits
    url: https://www.getambassador.io/docs/emissary/latest/topics/running/services/rate-limit-service
- aid: emissary-ingress:emissary-ingress-ratelimitservice-api
  name: Emissary-Ingress RateLimitService API
  description: Operations for managing RateLimitService custom resources that configure integration with external rate limiting
    services compatible with the Envoy rate limit API.
  humanURL: https://www.getambassador.io/docs/emissary/
  tags:
  - RateLimitService
  properties:
  - type: OpenAPI
    url: openapi/emissary-ingress-ratelimitservice-api-openapi.yml
  - type: Documentation
    url: https://www.getambassador.io/docs/emissary/
  - type: GettingStarted
    url: https://www.getambassador.io/docs/emissary/latest/topics/install/yaml-install
  - type: Reference
    url: https://www.getambassador.io/docs/emissary/latest/topics/running/
  - type: ChangeLog
    url: https://archive.getambassador.io/docs/emissary/3.1/release-notes/
  - type: JSONSchema
    url: json-schema/emissary-ingress-mapping-schema.json
  - type: Authentication
    url: https://www.getambassador.io/docs/emissary/latest/topics/running/services/auth-service
  - type: RateLimits
    url: https://www.getambassador.io/docs/emissary/latest/topics/running/services/rate-limit-service
- aid: emissary-ingress:emissary-ingress-tlscontext-api
  name: Emissary-Ingress TLSContext API
  description: Operations for managing TLSContext custom resources that define reusable TLS configuration including certificates,
    cipher suites, minimum protocol versions, and client certificate validation settings.
  humanURL: https://www.getambassador.io/docs/emissary/
  tags:
  - TLSContext
  properties:
  - type: OpenAPI
    url: openapi/emissary-ingress-tlscontext-api-openapi.yml
  - type: Documentation
    url: https://www.getambassador.io/docs/emissary/
  - type: GettingStarted
    url: https://www.getambassador.io/docs/emissary/latest/topics/install/yaml-install
  - type: Reference
    url: https://www.getambassador.io/docs/emissary/latest/topics/running/
  - type: ChangeLog
    url: https://archive.getambassador.io/docs/emissary/3.1/release-notes/
  - type: JSONSchema
    url: json-schema/emissary-ingress-mapping-schema.json
  - type: Authentication
    url: https://www.getambassador.io/docs/emissary/latest/topics/running/services/auth-service
  - type: RateLimits
    url: https://www.getambassador.io/docs/emissary/latest/topics/running/services/rate-limit-service
common:
- type: AgenticAccess
  url: agentic-access/emissary-ingress-agentic-access.yml
- type: DomainSecurity
  url: security/emissary-ingress-domain-security.yml
- type: Website
  url: https://www.getambassador.io/products/api-gateway
- type: Documentation
  url: https://www.getambassador.io/docs/emissary/
- type: GettingStarted
  url: https://www.getambassador.io/docs/emissary/latest/topics/install/yaml-install
- type: GitHubOrganization
  url: https://github.com/emissary-ingress
- type: GitHubRepository
  url: https://github.com/emissary-ingress/emissary
- type: Support
  url: https://www.getambassador.io/docs/emissary/latest/about/support
- type: Community
  url: https://emissary-ingress.dev/docs/4.0/community/
- type: Issue Tracker
  url: https://github.com/emissary-ingress/emissary/issues
- type: Blog
  url: https://blog.getambassador.io/
- type: ChangeLog
  url: https://archive.getambassador.io/docs/emissary/3.1/release-notes/
- type: JSONLD
  url: json-ld/emissary-ingress-context.jsonld
- type: JSONSchema
  url: json-schema/emissary-ingress-mapping-schema.json
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com