Open/unrestricted subset of API

Hi,
Sorry, I guess we missed your reply.
To implement your flow I did the following:

  1. created closed api with a key (auth token for instance),
  2. Created a key for with access right to this api
  3. Test it. all good. move on
  4. Create another api with the api from step 1 as the upstream target and keyless!
  5. On the designer endpoint I with whitelist the endpoint path I would like to expose and add header Authorization and set the key as the value.

Does this help?