[bosky101]

Kong works well, you can choose from various options like just header api key or a key pair or hmac signature based auth from your clients.