The consumption pattern for modern APIs is changing radically. What was once a largely human-to-machine pathway is now seeing a rapid climb in use by AI agents. This is somewhat problematic for many API providers, since APIs were designed for human developers who read documentation, understand conte...

AI agents are a growing priority for enterprises, with many companies interested in deploying them for a wide range of purposes, from software development and marketing to sales and customer support. Most discussions revolve around single AI agents. However, Gartner has seen a 1,445% surge in inquir...

Many organizations procure AI software or models assuming they will work instantly, fundamentally misunderstanding what it takes to implement artificial intelligence at scale. A common point of confusion is the belief that AI readiness is simply about having the smartest models available. In reality...

We tend to hear a lot about API vulnerabilities, between the OWASP Top 10 API Security Vulnerabilities and CISA’s Known Exploited Vulnerabilities Catalog. 42Crunch also recently published research on the most common API vulnerabilities, highlighting broken authentication, broken authorization, and m...

In April 2026, a big story dropped in the agentic world. In nine seconds, a Claude-powered coding agent deleted the entire production database for an application called PocketOS. Despite all the existing guardrails, the agent seemingly went rogue and confirmed with its users that the actions it took...

SaaS is dead, and AI killed it. Or that’s what several loud voices in the tech industry would have you believe, anyway. And yes, there’s a grain of truth in the statement: the rise of vibe coding and AI systems means that even those with limited technical knowledge can consider ditching fancy — not ...

The number of APIs has been increasing year-over-year, as they’re the infrastructure that makes the majority of modern digital architecture possible. Given that everything from AI to SaaS involves APIs at their core, it’s not the greatest shock that 78% of organizations don’t even know how many APIs...

Model Context Protocol (MCP) has, almost overnight, become a mainstay for developer tools and enterprise AI workflows. Anthropic open-sourced MCP in late 2024 and later donated it to the recently established Agentic AI Foundation (AAIF), a Linux Foundation project. As AI agents and large language mo...

A developer can ship an MCP server in an afternoon. Getting that same server running in regulated production, with credentials provisioned, access controls enforced, and security sign-off obtained, takes weeks. This post walks through the six challenges teams hit when scaling enterprise MCP deployme...

Often, enterprises end up treating all their APIs roughly the same. They’re authenticated, maybe rate-limited, and hopefully behind a gateway, but ultimately, they’re lumped together as part of a collection of APIs. While that flatness makes sense from a product management perspective, it poses a pr...

AI agents are pieces of software that autonomously perform actions to achieve a goal or objective. They operate in loops where they analyze input, such as prompts, context, tools, and memory. They then plan, take actions, and feed the output back into the loop to decide how to proceed. In this way, ...

When discussing modern API security, developers frequently conflate terms like bearer token and JSON Web Token (JWT). This semantic confusion around access tokens often masks a critical architectural distinction. A bearer token specifies the transmission mechanism, while a JWT defines a specific, st...

The application and API security industries are rethinking access control for AI agents. However, the underlying foundations remain the same ones the industry has relied on for years. What’s changing is how and when those foundations are applied. Depending on the use case, a given approach may work ...

API keys often give a false sense of security: it seems like they protect access to APIs. Yet, there are plenty of API key security risks. For one, they’re simply static strings that are often exposed, leaked, and end up helping attackers. As such, leaky API keys are at the heart of many of today’s ...

Agentic AI certainly dominated the theme of apidays New York, an event that brought together some of the API industry’s top thinkers and implementers for two days in mid-May 2026. It’s clear that APIs are still as important as ever, but they are now being repositioned as an execution layer for this ...

The age of AI is well upon us. According to research by Microsoft, 24.7% of the working age population in the Global North is using AI, paired with 14.1% of the Global South. As AI adoption increases, organizations are increasingly finding their minds focused on not just the potential upside of AI, ...

In February 2026, Peter Steinberger, the creator of OpenClaw, told Lex Fridman that the best tool for agentic AI has been on their desktop for 50 years. According to him, the simple command line interface (CLI) is the ideal tool for working with today’s non-deterministic technologies. The modular ar...

In many existing systems, enterprise data uses only basic security protections. For example, the backend of a web application might call an API and use an API key to secure the request. The solution may seem secure enough, since the web application only calls a subset of API endpoints and the user s...

Thanks to pioneers like Twilio and Stripe, API products have redefined what a great developer experience (DX) looks like. These companies have demonstrated how targeted API products, along with exceptional documentation and onboarding, can make developers enthusiastic advocates for their brands. How...

Between August 9 and August 17, 2025, malicious actors were able to export data from over 700 organizations. To make matters worse, the breach, referred to as UNC6395, was caused by insecure tokens leaked by a third-party app called Salesloft. As a representative from Google put it in a statement, “...

“REST is dead.” “MCP will be gone within a year”. “Tooling is the new sprawl layer.” These are all takes we’ve read recently on the issues people are facing when it comes to connecting AI to APIs. Kelsey Hightower, for example, recently opened some interesting debate around the future of REST and MC...

At PayPalDevDay 2025, PayPal’s Nathaniel Olson discussed a familiar problem. When he asked an AI coding assistant to build a product involving APIs, it was far too common for the AI to use outdated APIs rather than the most current iterations. It’s not that the official documentation or SDKs weren’t...

There’s much more to effective translation than just providing a language switcher dropdown. The idea that merely swapping out English for Chinese or Spanish is enough to get by is a misconception that actively harms businesses who are trying to appeal to a truly global audience. Modern translation ...

In February 2026, nearly 3,000 Google API keys were accidentally exposed. Data breaches are always damaging, but a data breach due to an authenticated, active API key can be catastrophic. An active API key allows actors to access uploaded files, cached data, and charge LLM-usage to your account, as ...

Since the advent of the internet, software developers have used online assistants, like search engines, to improve their time to market. In the AI era, you can think of AI agents as a new type of user agent that goes beyond the capabilities of search engines to perform concrete tasks and provide fur...

At some point or another, most software developers find themselves at a career crossroads. In one direction is comfort, ease, and predictability. In the other? Challenge, intention, and responsibility. (And, yes, higher salaries to go along with them.) That second route is what happens when develope...

Analysts are predicting that the digital economy is growing at three times the rate of national GDPs, driven largely by AI in various ways. Some speculators think AI-enhanced workplaces could generate nearly USD $4.91 trillion by 2026. With that kind of money involved, it’s no surprise that a whole ...

“Web APIs today are broken.” A bold statement made by Microsoft’s Darrel Miller during his talk at the November 2025 A2ASummit. It’s a sentiment shared by many industry leaders. The interfaces that we see as the glue holding the digital world together have become too brittle to support modern applic...

While some commentators in tech say that microservices architecture has seen its heyday, in reality, it’s still foundational to some massive distributed digital systems, from Netflix, to Amazon, SoundCloud, and beyond. But how exactly do you operationalize thousands of distributed microservices livi...

New data underscores what many of us have known all along: APIs are now the most common doorway for attackers. But while the reigning API security risks may not look all that new, the new technology around agentic AI, like Model Context Protocol (MCP), seems to be disproportionately exacerbating cla...