While some commentators in tech say that microservices architecture has seen its heyday, in reality, it’s still foundational to some massive distributed digital systems, from Netflix, to Amazon, SoundCloud, and beyond. But how exactly do you operationalize thousands of distributed microservices livi...

New data underscores what many of us have known all along: APIs are now the most common doorway for attackers. But while the reigning API security risks may not look all that new, the new technology around agentic AI, like Model Context Protocol (MCP), seems to be disproportionately exacerbating cla...

In recent months, the hype machine around agentic API consumption has been working overtime. In 2025, Kong reported that as many as 90% of enterprises are actively adopting AI agents and 79% expect full-scale adoption within three years. The agents aren’t coming; they’re here. The importance of agen...

It’s 2026, and if you follow the tech industry, you are likely already familiar with terms like MCP servers and clients, LLMs, AI agents, and RAG applications. These components represent the visible surface when it comes to the AI conversation. But have you ever stopped to consider the underlying in...

In 2020, software engineer Ivan Velichko published an article titled “API Developers Never REST,” detailing the rise of alternate design strategies that have emerged since Roy Fielding published his dissertation in 2000. Yes, the title is a jokey hook designed to snag eyeballs and attention, but lik...

Enterprise teams treated bots like volume problems for years. Scrapers. Credential stuffing. Occasional denial of service spikes. Sure, it was frustrating. But mostly it was manageable. That old playbook doesn’t work anymore. The most harmful automation of today flies under the radar, appearing as “...

In October 2025, Anthropic released Agent Skills as a feature for Claude. Within two months, early Agentic Skills had been built by partners like Atlassian, Figma, Canva, Stripe, Notion, and Zapier. How did a brand-new feature evolve into a pattern adopted so quickly across the enterprise? The rapid...

APIs are the modern doorway for systems to share data, but this common pathway is often unlocked. As a result, over the past two years, we’ve witnessed a string of API security incidents, including headline-worthy API exploits at 23andMe, Avelo Airlines, Authy, Optus, Trello, Volkswagen, WhatsApp, a...

The autonomous future is nearly upon us. Every day seems to bring a fresh wave of headlines involving autonomous cars or self-driving trucks. Users are taking more than 700,000 autonomous taxi rides each week, according to McKinsey, while the first autonomous truck pilots are starting to hit the pav...

When it comes to APIs, security has always been a serious concern. Developers who design and build APIs strive to mitigate vulnerabilities before attackers find them. Consumers want to be reassured that the APIs their applications integrate with won’t compromise data or application integrity. Howeve...

On January 7, 2026, Dr. Wayne Liu, president and chief growth officer of Perfect Corp., delivered a presentation at the Consumer Electronics Show (CES) titled “API-First Innovation: Scalable AI for the Modern Beauty Shopper,” discussing the many different ways that AI is impacting the beauty industr...

Model Context Protocol (MCP) has been absolutely everywhere since it was first released in November 2024. Sometimes referred to as the “USB-C of AI,” MCP has come forward to help tame some of AI’s most glaring issues, namely a lack of standardization around integration as well as the context to unde...

If your application calls even one third-party API, its reliability ceiling is no longer yours to control. That is the uncomfortable truth behind the uptime numbers API Status Check has been tracking since late 2025 across more than 215 services spanning cloud infrastructure, AI, payments, developer...

If you build distributed applications, you’re likely already familiar with microservices. While the definition varies across the tech industry, I prefer the one from Sam Newman’s book Building Microservices. In it, he concisely describes microservices as “small, autonomous services that work togethe...

Over the past decade or two, APIs have quietly shifted from behind-the-scenes infrastructure to fully-fledged products. And companies that treat them as such are making big bucks doing so. According to Postman’s 2025 State of the API Report, 65% of organizations now generate revenue from their API p...

AI introduces many exciting developments in the software industry. However, the uncontrolled use of generative AI has the potential to undermine our mission to provide a platform for authentic voices in the API community. For this reason, we are clarifying our AI usage policy. This policy applies to...

APIs are no longer just infrastructure holding organizations together. They’re business products in their own right. As Postman put it in the 2024 State of the API report, “62% of respondents report working with APIs that generate income. This signals the rise of the API-as-a-product model, where AP...

Most API teams I talk to are serious about the front door. They have a documented API surface, versioning rules, code review, and a continuous integration and continuous delivery (CI/CD) pipeline that runs tests and security checks before anything ships. That’s all good hygiene. But the incidents th...

The evolution of the modern enterprise is often marked by a transition from streamlined simplicity to architectural fragmentation. What begins as a strategic move toward distributed systems frequently devolves into gateway sprawl, a phenomenon where decentralized business units adopt distinct API to...

In years gone by, API specifications and developer portals were created for developers’ eyes only. It wasn’t unusual for them to include the occasional joke or pop culture reference, or omit context that any qualified API consumer would easily be able to infer. While the introduction of standards li...

Agentic AI systems promise something beyond single-turn inference. They can provide persistence, autonomy, and the ability to plan and act across time. However, anyone who’s tried to wire real APIs into an agent quickly discovers an uncomfortable reality. Even well-trained models can become jerky, b...

When it comes to APIs, access control is an incredibly important part of ensuring that your APIs are as secure and properly controlled as possible. In this context, one of the most effective methods that has arisen is role-based access control (RBAC), a security practice that segments access to digi...

When building agentic AI systems that interact with APIs and other services, securely managing JSON Web Tokens (JWTs) becomes a critical part of the architecture. Unlike traditional web applications, agentic AI can operate autonomously, invoking APIs, making decisions, and passing sensitive informat...

Over the years, we’ve had the pleasure of hosting many exceptional speakers on the Nordic APIs stage. Our most memorable talks span architectural deep dives, anti-patterns, emerging trends, personal journeys, and hard-earned lessons on what it takes to build great API platforms. To the audience, the...