Traffic makes the digital world go round, but not all of it is the same. Much of it goes to backend services — APIs or microservices — that give applications the capabilities they need to serve users. However, a rapidly increasing volume of traffic goes from applications to large language models (LL...

Our yearly Summit was a great experience! The theme was evolving APIs for the agentic era, and we covered it from countless angles, on and off stage. Nordic APIs Summit 2026 is a wrap! This week, we experienced two full days (three if you count the UnConference) of deep API insights and themes aroun...

Large language models (LLMs) have become mainstream. Recent estimates suggest there are over 1.1 billion ChatGPT users. LLMs and AI agents have become a part of every aspect of our lives, from writing emails to coding and everything in between. Yet, this scenario is a cybersecurity incident waiting ...

As we get prepared to meet again in Stockholm for the Nordic APIs Summit (this will be our ninth Summit), I wanted to take a moment to reflect on the importance of in-person events. Especially the importance of in-person technology conferences that get real humans together to talk shop. We all know ...

AI agents have rapidly become a new kind of software consumer. Where traditional applications analyze and recommend, autonomous agents can now interpret goals, make decisions, find tools, and take actions. Through API integrations and interactions, agents can coordinate actions across a range of sys...

Ahead of her Nordic APIs Summit 2026 talk on API standards for agents, TM Forum’s Lorna Mitchell joins us to talk about how — or whether — agentic has changed what good API design looks like. There are those who believe that the rise of agentic API consumption will change what software development l...

Non-determinism is a concept that has existed for decades. However, it has rarely been a central part of software design — until the rise of large language models (LLMs). These models enable developers to build probabilistic AI applications, such as autonomous AI agents. Traditionally, developers bu...

The age of AI is firmly upon us — and as more teams adopt artificial intelligence and agentic flows, providers are increasingly finding that their old strategies and approaches need to shift. One area where this is rapidly becoming a concern is in the domain of developer portals. Developer portals w...

AI agents are quickly rising in the enterprise. They’re granting more powers to knowledge workers across sales, finance, engineering, marketing, and other disciplines in the process. Yet, as most quick technological adoptions go, security is often falling by the wayside or being implemented after th...

For over two decades, API design and architecture remained remarkably consistent. Perhaps it’s the outsized influence of Roy Fielding’s RESTful dissertation, but API designers have stuck to the principles of stateless architecture, resource-based endpoints, and HTTP commands to an impressive degree....

Ahead of Nordic APIs Summit 2026, we catch up with speaker Claire Barrett on the mindset shift needed for adopting AI-enabled strategies. “Imagine driving around an old town,” responds Claire Barrett when asked to describe what it means to be AI-ready from an integration perspective. “Imagine a Euro...

Traditional monitoring tools, such as application performance monitoring (APM), were engineered to monitor deterministic software where specific inputs reliably lead to predictable outputs through hard-coded logic. When a traditional API fails, it usually throws a 500 Internal Server Error. But when...

Ahead of his Nordic APIs Summit 2026 talk on API coherence, London Stock Exchange Group’s Gareth Faull joins us to talk about the art of aligning APIs with organizational intent. Measuring the performance of an API is a relatively straightforward process: ensure observability is in place, follow gov...

The latest release of the Model Context Protocol (MCP) specification has created a lot of buzz in tech circles. Why? Primarily because this AI communication protocol has now gone stateless! This shift from stateful to stateless impacts how developers of MCP servers and AI tools use the protocol movi...

Business identity is a complex issue rife with risks across the board. Large enterprises often require deep, flexible integrations with dozens or hundreds of partners, but this comes with significant risk — between the potential for information leakage, concerns around replays or data usage for cont...

In May 2026, Cloudflare released a new tool called isitagentready.com. It analyzes a URL for everything an agentic AI would need to interact with a site and then returns a score out of 100. Even better still, it breaks down its assessment by category, letting you know how your site performs for disc...

Ahead of Nordic APIs Summit 2026, we check in with speaker Andrea Arcuri on how fuzz testing for APIs is evolving. “You cannot really check security properties if all your HTTP calls fail with a 4xx because your techniques can’t generate the right test data to pass the first layer of input validatio...

Ahead of his 2026 Nordic APIs Summit talk on scaling data ingestion without turning to Kubernetes, we check in with Bauer Media Group UK’s Faith Sodipe to talk about infrastructure complexity. In the tech space, perhaps more than in any other, we are always looking for the next big thing. Whenever a...

Over the last decade, enterprises invested heavily in API infrastructure. They purchased API management platforms, deployed gateways across business units and regions, built developer portals, introduced security and observability tools, and encouraged teams to adopt API-first development. The busin...

A single agentic workflow calling a single API is an easily tractable engineering problem — the solutions exist, and it’s ultimately just a problem of visibility and integration. A fleet of specialized agents delegating tasks to each other, sharing state, and discovering tools at runtime is decidedl...

APIs are like the backstage crew of the digital economy. They’re not front and center, but they’re essential for putting on a show. Yet, from a business perspective, APIs have traditionally been regarded as a form of “operational plumbing,” with many enterprises treating them as technical infrastruc...

If you’re an API or application developer, you likely hear the term “token” a lot. However, that term has entirely different meanings depending on the developer and the industry. Maybe you’re a developer who just implemented token-based authentication or found out the AI agent you built uses far too...

In a 2018 Forbes article, Jedidiah Yueh and Randy Bean argued that every company is now a data company. “Leveraging data — in an ethical manner — has to be at the heart of your company and product strategy,” they wrote. “Collect, sift, then monetize.” Just shy of a decade later, virtually every comp...

The regulatory framework has changed significantly over the last decade. GDPR was once largely theoretical. But now, multi-billion euro fines have made it a solid statement on European privacy. India’s DPDP Act has enforced privacy protections for Indian citizens, Brazil’s LGPD is actively enforced ...

A recent report from Salt Security published a truly alarming statistic. According to the report, 95% of API attacks come from authenticated sources. This should raise alarms for anyone who knows anything about cybersecurity, as it means API attacks are seemingly real transactions. These attacks won...

API usage used to be predictable in the sense of who was using it — you could typically assume a human intent behind it, and with this, a human understanding and context. Even automated solutions were ultimately an extension of the human user. They might have worked faster and across more resources,...

One of the most difficult aspects of building systems with multiple AI agents is managing permissions. Single AI agents often accumulate permissions as they are updated with expanded capabilities, enabling them to operate beyond their original purpose. The accumulation of permissions, referred to as...

Scope sprawl occurs when identities, applications, or tokens accumulate broader permissions than they need to perform their intended tasks. It often stems from weak internal standards, unclear documentation, or pressure on engineering teams to move quickly. For example, consider the following scenar...

Ahead of Nordic APIs Summit 2026, we check in with Kin Lane (The API Evangelist) to talk AI, APIs, and the growing risk of data becoming trapped in walled gardens. There’s a ton of hype around AI in the API space, and beyond, right now. Many are talking about agentic consumption, Model Context Proto...

The age of AI is upon us — and with it, a new age of telemetry and observability tools for MCP-driven stacks. MCP observability refers to the tools and practices used to monitor, trace, and analyze how AI agents interact with MCP servers, tools, and connected systems. The current slate of tools for ...