Announcing OpenAPI v3.2; When response codes reveal business constraints - API Developer Weekly

API Developer Weekly Oct 16, 2025 - Issue #562 🍂The fall colors are fading in Colorado as we prepare for cold weather to settle in once again. It was a spectacular season full of vivid colors due to optimal weather this summer. On to the best of the API-related articles from the last two weeks... First, we have an article from Chris Wood that reviews the most recent changes to OpenAPI v3.2. We also have an interesting article about how an API's HTTP response code can have an impact on business and how business can inform our APIs about the appropriate HTTP response code. Next, we look at how contract-first development and an API documentation repository can help to improve your API first workflows. Of course, an edition of this newsletter isn't complete without plenty of thoughts on AI, LLMs, and MCP including a look at versioning with MCP, how to secure your MCP, and microservices in a genAI world. Finally, we have a look at why APIs in business are critical for connectivity and interoperability. -- Happy Reading! Featured Articles Announcing OpenAPI v3.2 We are delighted and proud to announce the release of v3.2.0 of the OpenAPI Specification! Our latest minor version brings a host of new features across a number of areas including supported HTTP methods, a new tag structure, support for streaming media types, and a whole lot more! by sensiblewood [openapis.org] 429 or 503? 429 or 503? The Economic-Technical Logic of Load-Shedding: Balancing Customer Experience, SLO, and Cost in Airline Systems An airline operations center manages not only aircraft but millions of ... by Umut Akbulut [medium.com] Contract shock therapy: the way to API-first documentation bliss Learn how to build a dedicated API documentation repository that becomes your team's single source of truth, enabling true contract-first development. [evilmartians.com] The Weak Point in MCP Nobody's Talking About: API Versioning API versioning is a weak point for MCP. Here are best practices to keep MCP workflows resilient against breaking API changes. by Kristopher Sandoval [nordicapis.com] OneLogin, Many Secrets: Clutch Uncovers Critical API Vulnerability Exposing Client Credentials Clutch Security discovered CVE-2025-59363, a critical OneLogin API vulnerability exposing OIDC client secrets across 110K+ applications. Learn the impact & fix. [clutch.security] 5 API Calls Attackers Commonly Exploit Learn five common API calls attackers exploit and how to monitor, log, and defend against malicious API traffic. by J Simpson [nordicapis.com] API Sprawl is the New Shadow IT: What Now? API sprawl is the new shadow IT. Learn the risks, causes, and strategies to control sprawl and protect your organization's APIs. by Kristopher Sandoval [nordicapis.com] Business of APIs 5 Compelling Reasons to Use APIs in Business Many businesses now operate across multiple platforms, including web, mobile, and social media. Thanks to API integrations, companies can modularize their operations and gain flexibility in how services are built and delivered. Think of an API in business as the nervous system: it connects various functions of your brand and responds instantly to specific signals. by Miller V [techbullion.com] APIs For The SMB Economy: A Guide For Product Leaders APIs are a way to make SMB tools work together, save owners time and build ecosystems that last. by Ashay Satav [forbes.com] Connected Travel: Why Interoperability Is The New Winning Edge APIs are not back-end technicalities. They are the lifeline that connects experiences, reduces friction and creates new business opportunities. by Sanjay Ghare [forbes.com] Revolutionizing Healthcare: Understanding the FHIR Protocol and Its Business Impact Explore how the FHIR protocol drives healthcare API interoperability, streamlines workflows, and transforms patient experiences. by Adriano Mota [nordicapis.com] (Un)Related Pros and cons of microservices in genAI systems Look past the trends to understand the fundamental business drivers and pitfalls of microservices in generative AI architectures. by Yash Mehta, Martin Heller, Matt Asay, Paul Krill [infoworld.com] Turning Constraints Into Architectural Advantage Personio's Yinka Omole explains how to turn regulatory and business constraints into an API design advantage. by Bill Doerrfeld [nordicapis.com] Secure MCP: A Production-Ready Architecture Secure MCP: A Production-Ready Architecture Can you imagine exposing your APIs to a generative AI model with the same confidence you have when deploying a web service to production? That's exactly ... by Jose Maria Flores Zazo [medium.com] Spec-Driven Development: Designing Before You Code (Again) Spec-Driven Development: Designing Before You Code (Again) AI has changed how we build software - developers now code alongside assistants that analyze repos, write tests, and design architectures ... by Dave Patten [medium.com] Upcoming Events API Economy Summit / Melbourne "Turning API Economy aspirations into realities for people and teams" Headliners TBA October 30, 10am-3:30pm Details and registration (Contact Claire Barrett for more details) apidays Amsterdam Explores how APIs are the foundation of enterprise GenAI readiness. November 6, 2025 Amsterdam, Netherlands Details and registration apidays Paris API governance, monetization, and future trends December 9–11, 2025 Paris, France Details and registration API Economy Summit / Paris "Powering the API Economy" Headliners TBA December 10, 10am-4pm Details and registration (Contact Bertrand Masson) Have something to share? As always, if you want to chat, share a link, or make a suggestion, feel free to drop us a quick note or tagging us on Twitter (@launchany and @caseysoftware) or by emailing us at: james@launchany.com. Want to change how you receive these emails? You can update your preferences or unsubscribe from this list.