Skip to Content
Core domain · Network-as-an-API

Turn the network into an API.

The GSMA Open Gateway programme as a first-class product surface — 30+ CAMARA APIs behind one registry, OIDC/CIBA consent, a per-MNO capability matrix and a scope-based gateway. Sell SIM-swap checks, silent auth, quality-on-demand and more, to any developer.

GSMA Open Gateway Spring25 meta-release OIDC · CIBA OpenAPI / YAML
30+
CAMARA APIs shipped
80+
APIs tracked in the registry
6
API families
3
OIDC flows · CC · PKCE · CIBA
Spring25
GSMA meta-release aligned
The gateway underneath

One foundation, every API.

Each CAMARA API module plugs into a shared base — so authentication, discovery, access control and compliance are solved once, not per endpoint.

API registry

A catalog of 80+ CAMARA APIs with per-API maturity tracking, auto-detecting the installed API modules.

mobile_camara_base

OIDC & CIBA

An OIDC provider and service supporting Client Credentials, Authorization Code / PKCE and CIBA consent flows.

mobile_camara_base

Capability matrix

A full Catalog → Category → Spec → Endpoint hierarchy with YAML import, a per-MNO capability matrix and a public discovery API.

mobile_camara_catalog

Scope gateway

API-key management, scope-based access control and audit logging across every CAMARA endpoint.

camara_api_gateway
The catalog

Six families, thirty-plus APIs.

The registry tracks 80+ CAMARA APIs; these are the ones the platform ships. Maturity is shown honestly — production-ready, partial, or scaffolded for a future release.

Full — production-ready Partial — core paths live Planned — scaffolded (501)

Anti-fraud & Identity 6 APIs

The revenue-driving APIs — silent authentication and fraud signals developers pay for.

SIM Swap

Full

Detect a recent SIM swap before a risky transaction.

mobile_camara_sim_swap

Number Verification

Full

Silent network-based verification of the device's own number.

mobile_camara_number_verification

OTP Validation

Full

6-digit one-time passcodes via SMSC with a 5-minute expiry.

mobile_camara_otp_validation

KYC Match

Full

KYC Match, Age Verification, Fill-In and Tenure checks.

mobile_camara_kyc

Device Identifier

Full

Device Identifier and Device Authenticity.

mobile_camara_device_identifier

Device Swap

Full

Detect a recent device change on the line.

mobile_camara_device_swap

Device & Location 5 APIs

Where the device is, what state it's in, and where the subscription stands.

Device Status

Full

Roaming, reachability and network-type status.

mobile_camara_device_status

Location Verification & Retrieval

Full

Verify a device is within an area, or retrieve its location.

mobile_camara_device_location

Geofencing

Partial

Subscribe to area entry / exit events.

mobile_camara_device_location

Subscription Status

Full

Subscriber lifecycle state.

mobile_camara_subscription_status

Most-Frequent / Visit Location

Planned

Aggregate presence analytics.

mobile_camara_device_location

Quality & Connectivity 4 APIs

Programmable network quality and connectivity insight, wired to the PCRF.

Quality on Demand (QoD)

Full

PCF/PCRF-backed QoS sessions, QoS Booking and Traffic Influence (v0.11.0).

mobile_camara_qod

Network Access Management

Full

Manage a subscriber's network access.

mobile_camara_network_access

Connectivity Insights

Partial

Connectivity quality insight.

mobile_camara_connectivity_insights

Dedicated Networks & Slice Booking

Planned

Private-network provisioning and slice booking.

mobile_camara_dedicated_networks

Communication 5 APIs

Programmable messaging and voice-signal control.

Short Message Service

Full

Send SMS programmatically.

mobile_camara_sms

Verified Caller

Full

Attest and verify calling-party identity.

mobile_camara_call_forwarding

Call Forwarding Signal

Partial

Query call-forwarding status.

mobile_camara_call_forwarding

Click-to-Dial

Full

ESL-backed click-to-dial call origination.

mobile_camara_webrtc

WebRTC

Planned

Browser real-time communication.

mobile_camara_webrtc

Commerce & Consent 4 APIs

Monetisation and the consent layer that governs every data-exposing call.

Carrier Billing

Full

Charge to the mobile bill.

mobile_camara_carrier_billing

Consent Management

Full

Consent Info and Consent Management.

mobile_camara_consent

eSIM Remote Management

Full

Remote eSIM profile management.

mobile_camara_esim

Sponsored Data

Planned

Third-party-funded data sessions.

mobile_camara_carrier_billing

Insights & Advanced 6 APIs

Analytics and the forward-looking APIs scaffolded for future meta-releases.

Analytics

Partial

Network analytics APIs — 5 of 9 live.

mobile_camara_analytics

Capabilities

Full

Network capability discovery.

mobile_camara_capabilities

Number Recycling

Partial

Detect recycled MSISDNs.

mobile_camara_number_recycling

Edge Discovery & App Mgmt

Planned

Simple Edge Discovery and Edge Application Management.

mobile_camara_edge

Site-to-Cloud / Multi-Point VPN

Planned

Programmable enterprise VPN.

mobile_camara_vpn

Blockchain · MaaS · Predictive

Planned

Blockchain PKM, MaaS, Network Insights, Predictive Connectivity, Application Profiles.

mobile_camara_capabilities
The MVNO angle

Be the aggregator, not just the endpoint.

The MVNO consumer role lets the platform call upstream MNO CAMARA APIs on behalf of enterprise customers — so a virtual operator can resell the host network's SIM-swap, location and QoD capabilities under its own brand and OIDC consent, without building the network integration itself.

mobile_camara_consumer
Standards & interop

Aligned with the Open Gateway spec, not a lookalike.

APIs are imported from the CAMARA OpenAPI/YAML specs and published with a public discovery endpoint, so developers integrate against the real standard.

GSMA Open GatewayCAMARA Spring25OIDCCIBAOAuth2 Client Credentials / PKCEOpenAPI 3.x / YAMLDiscovery .well-known/open-gateway-capabilitiesTMForum adjacent
Part of the platform

Ship network APIs without a gateway build.

CAMARA Open Gateway rides the platform's identity, OCS, PCRF and messaging services — the same stack that runs charging and the core — so the APIs are wired to real network functions, not mocks.

Operator Platform
271 modules · ~590k LOC · Odoo 19 Community / Enterprise