Kong works well, you can choose from various options like just header api key or a key pair or hmac signature based auth from your clients.
Ask HN: What do you use for API Key Management?
11–13 of 13 posts
Re: Ask HN: What do you use for API Key Management?
#12[dead]