GSMA Open Gateway
GSMA Open Gateway is the mobile industry's operator-commitment and certification layer for network APIs, run by the GSM Association from its London headquarters in the United Kingdom. Launched at MWC Barcelona on 27 February 2023 with 21 operator groups and eight universal network APIs, it is the go-to-market wrapper around CAMARA, the Linux Foundation-hosted Telco Global API Alliance that actually authors the OpenAPI definitions. GSMA sits above the value chain rather than in it: it signs operators and channel partners to a memorandum of understanding, certifies implementations against CAMARA service APIs and TM Forum Operate APIs, and publishes which certified APIs are live in which markets. Its API posture is honestly non-existent as a first-party surface. GSMA operates no callable API, publishes no OpenAPI under its own name, and runs no self-serve developer portal with keys or a sandbox. open-gateway.gsma.com is a filterable directory of certified deployments, and every automated probe of it and of gsma.com returned an HTTP 403 Cloudflare bot challenge. The specifications are open on GitHub under camaraproject and tmforum-apis; the endpoints belong to operators; and developers reach them through aggregators and channel partners such as Aduna, Vonage, Infobip, Sinch, Twilio, Nokia, AWS and Bridge Alliance rather than through the GSMA. Per the GSMA's own Q1 2026 Open Gateway update, 81 operator groups and 61 channel partners covering 292 networks and about 80 percent of global mobile connections have signed, with 237 certified API assets drawn from 33 CAMARA tagged released APIs and 280 API instances commercially launched across 85 networks in 50 markets.
Real signal across most facets with visible, nameable gaps — the contract exists but is thin, or the portal is good while governance and commercial terms are absent.
API Evangelist profiles GSMA Open Gateway the way a machine reads it — 29 machine-readable artifacts across 22 APIs, pulled from the provider's own public surface and indexed so a developer, an analyst, or an AI agent can evaluate it against every other provider on the network.
Every provider in the network is reduced to the same set of machine-readable artifacts — OpenAPI contracts, event specifications, GraphQL schemas, runnable collections, pricing and rate-limit signals, security posture, OAuth scopes, and the agent surfaces (MCP servers and skills) that let software drive the API on its own. We profile them because the interface is the part of a company you can actually inspect: it is a truer signal of what a provider does than any marketing page. From those artifacts we compute the Kin Score — GSMA Open Gateway scores 50.3/100 (developing), with a separate agent-readiness read of 78/100 (agent native). The full breakdown is below, followed by every artifact we hold — each card links through to its machine-readable definition on apis.io.
Kin Score
This is the API Evangelist rating — a single, repeatable read computed from the artifacts on this page. Green fill is points earned; the red track is points possible, so every bar shows earned-versus-possible at a glance.
Kin Score
How this is scored →scored 2026-07-27 · rubric v0.5
How we profile GSMA Open Gateway
Each block below is one kind of artifact we hold for GSMA Open Gateway. For each we say what it is and why it earns a place in the profile, then list every one we've indexed — capped at two rows, scroll within the panel for the rest.
APIs 22
Each API is captured as its own OpenAPI definition — every operation, parameter, and response. This is the single most useful machine-readable description of what an API does, and it's what lets us score, lint, mock, and generate against it without asking the provider for anything.
Individual APIs this provider publishes, each with its own machine-readable definition.
CAMARA Number Verification API
CAMARA Number Verification 2.1.0 as certified under GSMA Open Gateway. Verifies that the phone number claimed by a user matches the number of the SIM on the network connection, ...
CAMARA SIM Swap API
CAMARA SIM Swap 2.1.0 as certified under GSMA Open Gateway. Checks whether the SIM associated with a mobile phone number has been swapped within a given period, and retrieves th...
CAMARA Device Swap API
CAMARA Device Swap 1.0.0 as certified under GSMA Open Gateway. Reports whether the device attached to a mobile subscription has changed within a supplied period and retrieves th...
CAMARA Call Forwarding Signal API
CAMARA Call Forwarding Signal 0.4.0 as certified under GSMA Open Gateway. Exposes whether unconditional or conditional call forwarding is active on a subscriber line, a signal u...
CAMARA Know Your Customer Match API
CAMARA Know Your Customer Match 0.4.0 as certified under GSMA Open Gateway. Compares customer-supplied identity attributes (name, address, birthdate, identity document, email) a...
CAMARA Know Your Customer Age Verification API
CAMARA Know Your Customer Age Verification 0.2.1 as certified under GSMA Open Gateway. Answers whether the subscriber behind a phone number is over a given age threshold using o...
CAMARA KYC Tenure API
CAMARA KYC Tenure 0.2.0 as certified under GSMA Open Gateway. Confirms whether a mobile subscription has been active with the operator for at least a requested duration, a low-f...
CAMARA One Time Password SMS API
CAMARA One Time Password SMS 1.1.1 as certified under GSMA Open Gateway. Sends a one-time password by SMS to a subscriber's phone number and validates the code the user returns,...
CAMARA Quality on Demand API
CAMARA Quality-On-Demand 1.1.0 as certified under GSMA Open Gateway. Creates, reads, extends and deletes temporary sessions that raise the network quality of service for a speci...
CAMARA QoS Profiles API
CAMARA QoS Profiles 1.1.0 as certified under GSMA Open Gateway. Lists the quality-of-service profiles an operator makes available and retrieves a single profile by name, so a de...
CAMARA Device Reachability Status API
CAMARA Device Reachability Status 1.1.0 as certified under GSMA Open Gateway. Returns whether a device is currently reachable on the network and by which means (SMS, data), the ...
CAMARA Device Reachability Status Subscriptions API
CAMARA Device Reachability Status Subscriptions 0.8.0 as certified under GSMA Open Gateway. Creates and manages event subscriptions that push CloudEvents notifications to a cons...
CAMARA Device Identifier API
CAMARA Device Identifier 0.3.0 as certified under GSMA Open Gateway. Retrieves the identifier, type and pseudonymous identifier of the device a subscription is currently using, ...
CAMARA Device Roaming Status API
CAMARA Device Roaming Status 1.0.0 as certified under GSMA Open Gateway. Reports whether a device is roaming and, where available, the country it is roaming in, used for travel-...
CAMARA Connected Network Type API
CAMARA Connected Network Type 0.1.0 as certified under GSMA Open Gateway. Returns the access technology a device is currently attached to (for example 4G or 5G standalone), lett...
CAMARA Population Density Data API
CAMARA Population Density Data 0.3.0 as certified under GSMA Open Gateway. Returns aggregated, anonymised estimates of how many devices are present in a requested geographic are...
CAMARA Device Location Retrieval API
CAMARA Device Location Retrieval 0.5.0 as certified under GSMA Open Gateway. Returns the network-derived location of a device as a circle or polygon with an accuracy indication,...
CAMARA Device Location Verification API
CAMARA Device Location Verification 3.0.0 as certified under GSMA Open Gateway. Verifies whether a device is inside, outside or partly within a supplied area rather than returni...
CAMARA Simple Edge Discovery API
CAMARA Simple Edge Discovery 2.0.1 as certified under GSMA Open Gateway. Returns the closest MEC (multi-access edge computing) platform to a given device so that an application ...
CAMARA Carrier Billing API
CAMARA Carrier Billing 0.5.0 as certified under GSMA Open Gateway. Creates and manages direct carrier-billing payments charged to a subscriber's mobile account, including paymen...
CAMARA Home Devices QoD API
CAMARA Home Devices QoD 0.4.0 as certified under GSMA Open Gateway. Requests prioritised quality of service for a device on a fixed broadband home network, extending Quality on ...
TM Forum TMF931 Open Gateway Onboarding and Ordering API
TM Forum TMF931 Open Gateway Operate API - Onboarding and Ordering 5.2.1, the GSMA-defined 'Operate API' that channel partners and aggregators use to onboard against an operator...
Scroll within the panel for all 22 ·
MCP Servers 1
Model Context Protocol servers expose these APIs directly to AI agents. We profile them because agent-native access is the fastest-growing way this provider's capabilities actually get used.
Model Context Protocol servers that expose these APIs to AI agents.
open-gateway-mcp.yml
MCP SERVEREvent Specifications 1
Not every API is request/response. AsyncAPI describes the event-driven and streaming side — the webhooks and channels — so the asynchronous half of the interface is documented the same way the synchronous half is.
AsyncAPI definitions for this provider's event-driven and streaming APIs.
Open Gateway Webhooks
ASYNCAPISecurity Posture 3
Authentication, domain security, vulnerability disclosure, and trust-center signals — the evidence that a provider takes security seriously enough to document it. We profile it because you can't govern what you can't see.
Authentication, domain security, vulnerability disclosure, and trust-center signals.
Scopes 1
OAuth scopes are the vocabulary of least-privilege access. Profiling them shows exactly what an integration — or an agent acting on a user's behalf — is allowed to do.
OAuth scopes governing access to this provider's APIs.
Agentic Access 1
An x-agentic-access contract marks which operations are safe for an agent to run on its own and which need a human in the loop. It is the difference between an API an agent can use and one it can use safely.
Recommended x-agentic-access execution contracts for AI agents.
Resources
Every other property we hold for GSMA Open Gateway — documentation, portals, status pages, policies, and corporate surface — grouped by the job it does, following the integrator's arc from getting started to running in production.
Get Started 4
Portal, sign-up, and the first successful call
Documentation 4
Reference material describing how the API behaves
Agent Surfaces 5
MCP servers, agent skills, and machine-readable catalogs
Design & Contract 6
Pagination, idempotency, versioning, errors, and events
Build 4
SDKs, sample code, and the tooling you integrate with
Access & Security 10
Authentication, authorization, and security posture
Scroll within the panel for all 10 ·
Operate 3
Status, limits, changes, and where to get help
Commercial 3
Pricing, plans, and the legal terms of use
Company 3
The organization behind the API
Other 1
Properties that don't map to a standard resource type
← All providers · Data indexed from github.com/api-evangelist/open-gateway · machine-readable index on apis.io