--- type: "article" title: "From zero to V1 - what we learned designing the Tyk Governance Hub - API Developer Weekly" summary: "From zero to V1 - what we learned designing the Tyk Governance Hub" newsletter: "API Developer Weekly" newsletter_handle: "api-developer-weekly" newsletter_url: "https://usecommune.com/n/api-developer-weekly" author: "James Higginbotham (@jhigginbotham)" published: "2025-09-04T18:00:00.000Z" canonical_url: "https://usecommune.com/n/api-developer-weekly/a/from-zero-to-v1-what-we-learned-designing-the-tyk-governance" markdown_url: "https://usecommune.com/n/api-developer-weekly/a/from-zero-to-v1-what-we-learned-designing-the-tyk-governance.md" chat_url: "https://usecommune.com/n/api-developer-weekly/a/from-zero-to-v1-what-we-learned-designing-the-tyk-governance/chat" source_url: "http://eepurl.com/jmzRfw" body_source: "imported" likes: 0 replies: 0 body_words: 801 --- # From zero to V1 - what we learned designing the Tyk Governance Hub - API Developer Weekly ![](https://mcusercontent.com/5005148108dfbac726f74e31e/images/04b6c7bf-305e-b933-367e-a79a24d334d5.png) ![](https://mcusercontent.com/5005148108dfbac726f74e31e/images/9dff09fa-af28-ed1e-7fa6-a6589b89e5e1.png) # API Developer Weekly # Sept 4, 2025 - Issue #559 *This week's newsletter starts with an article from Budha at Tyk and how they focused on the people rather than just the technology aspects of building an governance hub for collaboration. I'm starting to see more tooling move into this area, but it is refreshing to see a people-first perspective to API tooling. We also noted an announcement from GitHub and their implementation of API resource limits for their GraphQL API. This isn't the first time this week I've witnessed organizations limiting GraphQL in an effort to tame resource utilization and avoid over-fetching. We also get an API security reality check, take a look at API gateways for those not familiar, and AI-related topics around MCP monitoring and the lost soul of software beyond code and AI. Finally, we look at apps beyond CRUD by taking a look at a video re-streaming platform case study.* *-- Happy Reading!* # Featured Articles [From zero to V1 - what we learned designing the Tyk Governance Hub](https://tyk.io/blog/from-zero-to-v1-what-we-learned-designing-the-tyk-governance-hub/) Discover the 10 key lessons learned from designing the Tyk Governance Hub, focusing on a people-centered approach to API governance, collaboration, and continuous improvement for seamless compliance and innovation. by Budhaditya Bhattacharya \[tyk.io\] [GraphQL API resource limits - GitHub Changelog](https://github.blog/changelog/2025-09-01-graphql-api-resource-limits/) At GitHub, we're committed to keeping the GraphQL API dependable for everyone. To reinforce the protection of our infrastructure, we're introducing new safeguards to limit resource consumption. What kind of... \[github.blog\] [The API Security Reality Check: Key Takeaways from Q2 2025 API ThreatStats Report](https://securityboulevard.com/2025/08/the-api-security-reality-check-key-takeaways-from-q2-2025-api-threatstats-report/) API security has never been more crucial. Vulnerabilities are growing in volume and severity. AI integrations are a burgeoning attack vector. Increasing GraphQL adoption presents hidden dangers. To protect your organization, you must secure your APIs. by by Tim Erlin on August 28, 2025 \[securityboulevard.com\] [Understanding API Gateways: The Core of Modern Microservice Communication](https://medium.com/@sampathadepu/understanding-api-gateways-the-core-of-modern-microservice-communication-7ae6468fb075) In modern backend systems, especially those built using microservices, client requests (coming from the outside world) often need to interact with multiple (internal) services. Without a centralized... by Sampath Adepu \[medium.com\] [Tips To Monitor MCP Ecosystems](https://nordicapis.com/tips-to-monitor-mcp-ecosystems/) Learn how to monitor MCP-based AI agent ecosystems to improve observability, security, and reliability in production workflows. by Kristopher Sandoval \[nordicapis.com\] # Business of APIs [The Lost Soul of Software: Meaning Beyond Code and Artificial Intelligence](https://medium.com/@erginakin/the-lost-soul-of-software-meaning-beyond-code-and-artificial-intelligence-8a33593f6582) Have you ever inherited a piece of software that was impossible to maintain? The code is there: thousands of lines. It seems to work. But you're afraid that changing a single line will make the whole... by Ergin Akin # (Un)Related [API Security Hardening: Building Fortress-Level Java APIs in Production](https://medium.com/@shahharsh172/api-security-hardening-building-fortress-level-java-apis-in-production-aa668b4b6151) In today's interconnected digital landscape, APIs have become the backbone of modern applications. However, with great connectivity comes great vulnerability. Recent data shows that 57% of... by Harsh Shah [Beyond CRUD: System Design Lessons From a Video Re-Streaming Control Platform](https://medium.com/@sidharthd/beyond-crud-system-design-lessons-from-a-video-re-streaming-control-platform-26e8c1fe5d79) Most web apps boil down to CRUD: Create, Read, Update, Delete. And if you've built enough of them, you know the rhythm: define a model, wire up endpoints, connect it to a database. But every once in... by Sidharth Devaraj [The Case for Modular Monoliths: A Smarter Path to Microservices in .NET AI Applications](https://medium.com/@ai_92969/the-case-for-modular-monoliths-a-smarter-path-to-microservices-in-net-ai-applications-e42d8b38124a) The architectural debate of monolith vs microservices is often framed as an either/or decision. But for organizations building AI-driven solutions in .NET, there's a strategic third option: the... by AI n Dot Net ### Upcoming Events **API World 2025** Santa Clara, CA, USA September 3–5, 2025 [Details and registration](https://apiworld.co/conference/agenda/) **API Economy Summit /****London** "Beyond the hype. Making commercial sense of the API Economy" Featuring Caroline McIntyre and Stephen Haynes, both Natwest September 22, 12-5pm [Details and registration](https://ticket.apidays.global/event/apidays-london-2025/72d72730-dbf4-47d0-aa07-aa9da87d28ca/the-api-economy-summit-apidays-london-2025) (Contact Claire Barrett for more details) **Platform Summit 2025** Engineer next-gen API architectures Oct 13-15 Stockholm, Sweden **Discount code: ps25-apidvwk** - good for 15% off any ticket until Oct 15, whether for the full conference, the half-day API Security UnConference, or a bundle. [Tickets and registration](https://nordicapis.com/events/platform-summit-2025/) **API Economy Summit / Melbourne** "Turning API Economy aspirations into realities for people and teams" Headliners TBA October 30, 10am-3:30pm [Details and registration](https://ticket.apidays.global/event/apidays-australia-2025/e31942ab-2e0c-4f16-9c16-5658c63358c7/the-api-economy-summit-australia) (Contact Claire Barrett for more details) **apidays Amsterdam** Explores how APIs are the foundation of enterprise GenAI readiness. November 6, 2025 Amsterdam, Netherlands [Details and registration](https://www.apidays.global/amsterdam/) **apidays Paris** API governance, monetization, and future trends December 9–11, 2025 Paris, France [Details and registration](https://www.apidays.global/paris) **API Economy Summit / Paris** "Powering the API Economy" Headliners TBA December 10, 10am-4pm [Details and registration](https://ticket.apidays.global/event/apidays-paris-2025/3cccd07f-acb2-466e-8d91-ccb1f208ecf42/the-api-economy-summit-apidays-paris-2025) (Contact [Bertrand Masson](https://www.linkedin.com/in/bertrandmasson/)) ### Have something to share? As always, if you want to chat, share a link, or make a suggestion, feel free to drop us a quick note or tagging us on Twitter ([@launchany](https://twitter.com/launchany) and [@caseysoftware](https://twitter.com/caseysoftware)) or by emailing us at: [james@launchany.com](mailto:james@launchany.com). [![Twitter](https://cdn-images.mailchimp.com/icons/social-block-v2/outline-light-twitter-48.png)](https://www.twitter.com/launchany) [![LinkedInlinkedin.com/in/jameshigginbotham/](https://cdn-images.mailchimp.com/icons/social-block-v2/outline-light-linkedin-48.png)](http://www.linkedin.com) [![Website](https://cdn-images.mailchimp.com/icons/social-block-v2/outline-light-link-48.png)](https://launchany.com) Want to change how you receive these emails? You can [update your preferences](https://launchany.us2.list-manage.com/profile?u=5005148108dfbac726f74e31e&id=239e48d26e&e=[UNIQID]&c=45ad2ee983) or [unsubscribe from this list](https://launchany.us2.list-manage.com/unsubscribe?u=5005148108dfbac726f74e31e&id=239e48d26e&t=b&e=[UNIQID]&c=45ad2ee983). *** ## Discussion No replies yet.