Wait... it's June already?! Apparently so. Here are some great articles that look at how AI systems are really API systems, GraphQL's possible comeback with AI (I'm still not convinced), Arazzo v1.1.0 specification is released, and a series of articles on API security issues and exploits. We also look at the business of APIs, starting with Boomi's acquisition of Lunar.dev, Strava's lock down of their API prior to the IPO, and Palantir's super API for the IRS. Finally, we take a look at an agentic future and how enterprise MCP adoption best practices are shaping up.
-- Happy Reading!
Featured Articles
APIs First: Why AI Systems Are Still API Systems
AI and APIs Over the past several years, the industry has seen an explosion of interest in large language models and AI driven applications. Much of the... [community.f5.com]
GraphQL Comeback Because of AI?
GraphQL lost to REST years ago. But AI agents are a new kind of API consumer -- small context, runtime schema discovery, field-level scopes -- and on those axes GraphQL fits better. [amazingcto.com]
Announcing Arazzo Specification 1.1
We are proud to announce the release of Arazzo Specification v1.1.0! The headline addition is AsyncAPI support - for the first time, Arazzo workflows can declaratively describe sequences of calls that span both synchronous and asynchronous APIs. by Chris Wood [openapis.org]
Turn Your Existing APIs Into AI-Ready Systems
 Learn intent-based patterns that let LLMs execute real work using the backend systems and APIs you already have. Explore why your current REST APIs break down when LLMs try to use them — and the specific design shift that fixes it. Finally, learn more about the patterns and practices that will help your team prepare your APIs for real-world AI use.
Learn more and download the full report.
10 Security Issues With API Keys
API keys introduce significant security risks due to their static, reusable nature and lack of identity context. Learn the top API key vulnerabilities and how to secure modern APIs. by Bill Doerrfeld [nordicapis.com]
JWT vs Opaque Tokens: Choosing the Right Token for API Security
Compare JWT vs opaque tokens for API security. Learn the differences in validation, performance, and when to use each approach. by Adriano Mota [nordicapis.com]
When AI Becomes the First Evaluator
To be realistic, the use of AI is situational and unpredictable. Some retrieval patterns are already observable through search, AI, and social platforms, and many user intents can still be grouped into familiar categories such as informational, commercial, or transactional queries. We can identify patterns, but we cannot safely assume a single dominant discovery workflow anymore. [pronovix.com]
5 Key Takeaways From apidays New York 2026
Explore apidays New York 2026 takeaways on APIs as the AI execution layer for agents, security, governance, and optimization. by Bill Doerrfeld [nordicapis.com]
Cisco Patches CVSS 10.0 Secure Workload REST API Flaw Enabling Data Access
Cisco patches critical CVSS 10.0 flaw in Secure Workload - unauthenticated attackers can steal data & escalate privileges across tenants. [thehackernews.com]
Business of APIs
Boomi Announces Intent to Acquire Lunar.dev to Deliver Governed Agent Connectivity Across the Enterprise
May 13, 2026 - Boomi today announced it has signed a letter of intent to acquire Lunar.dev, an innovator in AI and MCP gateway. [boomi.com]
Strava locks down API with new fees as IPO looms
Fitness app shifts to paid developer access, targeting scrapers before public debut by The Tech Buzz Team [techbuzz.ai]
Here is the Contract for Palantir's Super API for the IRS
The API would make IRS data available to any app the agency wishes. The Criminal Investigation arm of the IRS is also modernizing its own systems. [404media.co]
(Un)Related
The Path Toward a Truly Agentic Future: What Is Required?
Learn how to prepare for agentic AI with identity control, short-lived access, and just-in-time authorization for secure API-driven systems. by Kristopher Sandoval [nordicapis.com]
6 Enterprise MCP Adoption Best Practices
Explore enterprise MCP adoption best practices for credentials, authorization, observability, networking, and runtime governance. by Eyal Solomon [nordicapis.com]
|
|
