API keys often give a false sense of security: it seems like they protect access to APIs. Yet, there are plenty of API key security risks. For one, they’re simply static strings that are often exposed, leaked, and end up helping attackers. As such, leaky API keys are at the heart of many of today’s ...

Agentic AI certainly dominated the theme of apidays New York, an event that brought together some of the API industry’s top thinkers and implementers for two days in mid-May 2026. It’s clear that APIs are still as important as ever, but they are now being repositioned as an execution layer for this ...

The age of AI is well upon us. According to research by Microsoft, 24.7% of the working age population in the Global North is using AI, paired with 14.1% of the Global South. As AI adoption increases, organizations are increasingly finding their minds focused on not just the potential upside of AI, ...

In February 2026, Peter Steinberger, the creator of OpenClaw, told Lex Fridman that the best tool for agentic AI has been on their desktop for 50 years. According to him, the simple command line interface (CLI) is the ideal tool for working with today’s non-deterministic technologies. The modular ar...

In many existing systems, enterprise data uses only basic security protections. For example, the backend of a web application might call an API and use an API key to secure the request. The solution may seem secure enough, since the web application only calls a subset of API endpoints and the user s...

Thanks to pioneers like Twilio and Stripe, API products have redefined what a great developer experience (DX) looks like. These companies have demonstrated how targeted API products, along with exceptional documentation and onboarding, can make developers enthusiastic advocates for their brands. How...

Between August 9 and August 17, 2025, malicious actors were able to export data from over 700 organizations. To make matters worse, the breach, referred to as UNC6395, was caused by insecure tokens leaked by a third-party app called Salesloft. As a representative from Google put it in a statement, “...

“REST is dead.” “MCP will be gone within a year”. “Tooling is the new sprawl layer.” These are all takes we’ve read recently on the issues people are facing when it comes to connecting AI to APIs. Kelsey Hightower, for example, recently opened some interesting debate around the future of REST and MC...

At PayPalDevDay 2025, PayPal’s Nathaniel Olson discussed a familiar problem. When he asked an AI coding assistant to build a product involving APIs, it was far too common for the AI to use outdated APIs rather than the most current iterations. It’s not that the official documentation or SDKs weren’t...

There’s much more to effective translation than just providing a language switcher dropdown. The idea that merely swapping out English for Chinese or Spanish is enough to get by is a misconception that actively harms businesses who are trying to appeal to a truly global audience. Modern translation ...

In February 2026, nearly 3,000 Google API keys were accidentally exposed. Data breaches are always damaging, but a data breach due to an authenticated, active API key can be catastrophic. An active API key allows actors to access uploaded files, cached data, and charge LLM-usage to your account, as ...

Since the advent of the internet, software developers have used online assistants, like search engines, to improve their time to market. In the AI era, you can think of AI agents as a new type of user agent that goes beyond the capabilities of search engines to perform concrete tasks and provide fur...

At some point or another, most software developers find themselves at a career crossroads. In one direction is comfort, ease, and predictability. In the other? Challenge, intention, and responsibility. (And, yes, higher salaries to go along with them.) That second route is what happens when develope...

Analysts are predicting that the digital economy is growing at three times the rate of national GDPs, driven largely by AI in various ways. Some speculators think AI-enhanced workplaces could generate nearly USD $4.91 trillion by 2026. With that kind of money involved, it’s no surprise that a whole ...

“Web APIs today are broken.” A bold statement made by Microsoft’s Darrel Miller during his talk at the November 2025 A2ASummit. It’s a sentiment shared by many industry leaders. The interfaces that we see as the glue holding the digital world together have become too brittle to support modern applic...

While some commentators in tech say that microservices architecture has seen its heyday, in reality, it’s still foundational to some massive distributed digital systems, from Netflix, to Amazon, SoundCloud, and beyond. But how exactly do you operationalize thousands of distributed microservices livi...

New data underscores what many of us have known all along: APIs are now the most common doorway for attackers. But while the reigning API security risks may not look all that new, the new technology around agentic AI, like Model Context Protocol (MCP), seems to be disproportionately exacerbating cla...

In recent months, the hype machine around agentic API consumption has been working overtime. In 2025, Kong reported that as many as 90% of enterprises are actively adopting AI agents and 79% expect full-scale adoption within three years. The agents aren’t coming; they’re here. The importance of agen...

It’s 2026, and if you follow the tech industry, you are likely already familiar with terms like MCP servers and clients, LLMs, AI agents, and RAG applications. These components represent the visible surface when it comes to the AI conversation. But have you ever stopped to consider the underlying in...

In 2020, software engineer Ivan Velichko published an article titled “API Developers Never REST,” detailing the rise of alternate design strategies that have emerged since Roy Fielding published his dissertation in 2000. Yes, the title is a jokey hook designed to snag eyeballs and attention, but lik...

Enterprise teams treated bots like volume problems for years. Scrapers. Credential stuffing. Occasional denial of service spikes. Sure, it was frustrating. But mostly it was manageable. That old playbook doesn’t work anymore. The most harmful automation of today flies under the radar, appearing as “...

In October 2025, Anthropic released Agent Skills as a feature for Claude. Within two months, early Agentic Skills had been built by partners like Atlassian, Figma, Canva, Stripe, Notion, and Zapier. How did a brand-new feature evolve into a pattern adopted so quickly across the enterprise? The rapid...

APIs are the modern doorway for systems to share data, but this common pathway is often unlocked. As a result, over the past two years, we’ve witnessed a string of API security incidents, including headline-worthy API exploits at 23andMe, Avelo Airlines, Authy, Optus, Trello, Volkswagen, WhatsApp, a...

The autonomous future is nearly upon us. Every day seems to bring a fresh wave of headlines involving autonomous cars or self-driving trucks. Users are taking more than 700,000 autonomous taxi rides each week, according to McKinsey, while the first autonomous truck pilots are starting to hit the pav...

When it comes to APIs, security has always been a serious concern. Developers who design and build APIs strive to mitigate vulnerabilities before attackers find them. Consumers want to be reassured that the APIs their applications integrate with won’t compromise data or application integrity. Howeve...

On January 7, 2026, Dr. Wayne Liu, president and chief growth officer of Perfect Corp., delivered a presentation at the Consumer Electronics Show (CES) titled “API-First Innovation: Scalable AI for the Modern Beauty Shopper,” discussing the many different ways that AI is impacting the beauty industr...

Model Context Protocol (MCP) has been absolutely everywhere since it was first released in November 2024. Sometimes referred to as the “USB-C of AI,” MCP has come forward to help tame some of AI’s most glaring issues, namely a lack of standardization around integration as well as the context to unde...

If your application calls even one third-party API, its reliability ceiling is no longer yours to control. That is the uncomfortable truth behind the uptime numbers API Status Check has been tracking since late 2025 across more than 215 services spanning cloud infrastructure, AI, payments, developer...

If you build distributed applications, you’re likely already familiar with microservices. While the definition varies across the tech industry, I prefer the one from Sam Newman’s book Building Microservices. In it, he concisely describes microservices as “small, autonomous services that work togethe...

Over the past decade or two, APIs have quietly shifted from behind-the-scenes infrastructure to fully-fledged products. And companies that treat them as such are making big bucks doing so. According to Postman’s 2025 State of the API Report, 65% of organizations now generate revenue from their API p...