In May 2026, Cloudflare released a new tool called isitagentready.com. It analyzes a URL for everything an agentic AI would need to interact with a site and then returns a score out of 100. Even better still, it breaks down its assessment by category, letting you know how your site performs for disc...

Ahead of Nordic APIs Summit 2026, we check in with speaker Andrea Arcuri on how fuzz testing for APIs is evolving. “You cannot really check security properties if all your HTTP calls fail with a 4xx because your techniques can’t generate the right test data to pass the first layer of input validatio...

Ahead of his 2026 Nordic APIs Summit talk on scaling data ingestion without turning to Kubernetes, we check in with Bauer Media Group UK’s Faith Sodipe to talk about infrastructure complexity. In the tech space, perhaps more than in any other, we are always looking for the next big thing. Whenever a...

Over the last decade, enterprises invested heavily in API infrastructure. They purchased API management platforms, deployed gateways across business units and regions, built developer portals, introduced security and observability tools, and encouraged teams to adopt API-first development. The busin...

A single agentic workflow calling a single API is an easily tractable engineering problem — the solutions exist, and it’s ultimately just a problem of visibility and integration. A fleet of specialized agents delegating tasks to each other, sharing state, and discovering tools at runtime is decidedl...

APIs are like the backstage crew of the digital economy. They’re not front and center, but they’re essential for putting on a show. Yet, from a business perspective, APIs have traditionally been regarded as a form of “operational plumbing,” with many enterprises treating them as technical infrastruc...

If you’re an API or application developer, you likely hear the term “token” a lot. However, that term has entirely different meanings depending on the developer and the industry. Maybe you’re a developer who just implemented token-based authentication or found out the AI agent you built uses far too...

In a 2018 Forbes article, Jedidiah Yueh and Randy Bean argued that every company is now a data company. “Leveraging data — in an ethical manner — has to be at the heart of your company and product strategy,” they wrote. “Collect, sift, then monetize.” Just shy of a decade later, virtually every comp...

The regulatory framework has changed significantly over the last decade. GDPR was once largely theoretical. But now, multi-billion euro fines have made it a solid statement on European privacy. India’s DPDP Act has enforced privacy protections for Indian citizens, Brazil’s LGPD is actively enforced ...

A recent report from Salt Security published a truly alarming statistic. According to the report, 95% of API attacks come from authenticated sources. This should raise alarms for anyone who knows anything about cybersecurity, as it means API attacks are seemingly real transactions. These attacks won...

API usage used to be predictable in the sense of who was using it — you could typically assume a human intent behind it, and with this, a human understanding and context. Even automated solutions were ultimately an extension of the human user. They might have worked faster and across more resources,...

One of the most difficult aspects of building systems with multiple AI agents is managing permissions. Single AI agents often accumulate permissions as they are updated with expanded capabilities, enabling them to operate beyond their original purpose. The accumulation of permissions, referred to as...

Scope sprawl occurs when identities, applications, or tokens accumulate broader permissions than they need to perform their intended tasks. It often stems from weak internal standards, unclear documentation, or pressure on engineering teams to move quickly. For example, consider the following scenar...

Ahead of Nordic APIs Summit 2026, we check in with Kin Lane (The API Evangelist) to talk AI, APIs, and the growing risk of data becoming trapped in walled gardens. There’s a ton of hype around AI in the API space, and beyond, right now. Many are talking about agentic consumption, Model Context Proto...

The age of AI is upon us — and with it, a new age of telemetry and observability tools for MCP-driven stacks. MCP observability refers to the tools and practices used to monitor, trace, and analyze how AI agents interact with MCP servers, tools, and connected systems. The current slate of tools for ...

With over 10,000 active servers and 97 million monthly SDK downloads, Model Context Protocol (MCP) is by far the most popular agentic protocol currently on the market. While this is good news for developers who don’t want to write custom integrations for tools and third-party apps in their stack, MC...

Want to justify your attendance at the Nordic APIs Summit? Use the template below to share the opportunity and benefits with your boss. We think you’ll be surprised by the results. Copy and paste the text below into your email. Hi [NAME] I would like to request your approval to attend the upcoming N...

The consumption pattern for modern APIs is changing radically. What was once a largely human-to-machine pathway is now seeing a rapid climb in use by AI agents. This is somewhat problematic for many API providers, since APIs were designed for human developers who read documentation, understand conte...

AI agents are a growing priority for enterprises, with many companies interested in deploying them for a wide range of purposes, from software development and marketing to sales and customer support. Most discussions revolve around single AI agents. However, Gartner has seen a 1,445% surge in inquir...

Many organizations procure AI software or models assuming they will work instantly, fundamentally misunderstanding what it takes to implement artificial intelligence at scale. A common point of confusion is the belief that AI readiness is simply about having the smartest models available. In reality...

We tend to hear a lot about API vulnerabilities, between the OWASP Top 10 API Security Vulnerabilities and CISA’s Known Exploited Vulnerabilities Catalog. 42Crunch also recently published research on the most common API vulnerabilities, highlighting broken authentication, broken authorization, and m...

In April 2026, a big story dropped in the agentic world. In nine seconds, a Claude-powered coding agent deleted the entire production database for an application called PocketOS. Despite all the existing guardrails, the agent seemingly went rogue and confirmed with its users that the actions it took...

SaaS is dead, and AI killed it. Or that’s what several loud voices in the tech industry would have you believe, anyway. And yes, there’s a grain of truth in the statement: the rise of vibe coding and AI systems means that even those with limited technical knowledge can consider ditching fancy — not ...

The number of APIs has been increasing year-over-year, as they’re the infrastructure that makes the majority of modern digital architecture possible. Given that everything from AI to SaaS involves APIs at their core, it’s not the greatest shock that 78% of organizations don’t even know how many APIs...

Model Context Protocol (MCP) has, almost overnight, become a mainstay for developer tools and enterprise AI workflows. Anthropic open-sourced MCP in late 2024 and later donated it to the recently established Agentic AI Foundation (AAIF), a Linux Foundation project. As AI agents and large language mo...

A developer can ship an MCP server in an afternoon. Getting that same server running in regulated production, with credentials provisioned, access controls enforced, and security sign-off obtained, takes weeks. This post walks through the six challenges teams hit when scaling enterprise MCP deployme...

Often, enterprises end up treating all their APIs roughly the same. They’re authenticated, maybe rate-limited, and hopefully behind a gateway, but ultimately, they’re lumped together as part of a collection of APIs. While that flatness makes sense from a product management perspective, it poses a pr...

AI agents are pieces of software that autonomously perform actions to achieve a goal or objective. They operate in loops where they analyze input, such as prompts, context, tools, and memory. They then plan, take actions, and feed the output back into the loop to decide how to proceed. In this way, ...

When discussing modern API security, developers frequently conflate terms like bearer token and JSON Web Token (JWT). This semantic confusion around access tokens often masks a critical architectural distinction. A bearer token specifies the transmission mechanism, while a JWT defines a specific, st...

The application and API security industries are rethinking access control for AI agents. However, the underlying foundations remain the same ones the industry has relied on for years. What’s changing is how and when those foundations are applied. Depending on the use case, a given approach may work ...