Fall is upon us 🍂 in Colorado with cooler weather and the start of fall colors in the high country. Let's see what API insights we have this week.
First, we look beyond the response code when monitoring REST APIs. This is a great article that asks, "What should we be monitoring when we receive a 200 OK response?". Nordic APIs has a look at the ways that traditional API design has changed forever, from designing for machines to moving toward capabilities. I covered this in my recent report as well, so check that out if you haven't yet. We also explore how developer portals need to evolve with AI agents, and Bump's API workflow specification called Flower Spec. Kin Lane looks at how OpenAPI is used (and spelled) across his catalog. Finally, we have an article for GraphQL fans - how Reverb moved from a monolith GraphQL stack to a federated GraphQL model with zero client disruption.
-- Happy Reading!
Featured Articles
REST API Monitoring Beyond Status Codes
A 200 status doesn't mean your API returned something useful. Learn why response validation, chained workflow testing, and global monitoring matter more than status codes. [sitepoint.com]
6 Ways Traditional API Design Has Changed Forever
Explore six ways API design is evolving for AI agents, machine consumers, security, reliability, and regulatory compliance. by J Simpson [nordicapis.com]
Why Developer Portals Must Evolve in the AI Agent Age
Why developer portals must evolve to support AI agents with machine-readable discovery, governance, and agent-ready API access. by Kristopher Sandoval [nordicapis.com]
GitHub - bump-sh/flower-spec: The flower specification to define API workflows
The flower specification to define API workflows. Contribute to bump-sh/flower-spec development by creating an account on GitHub. by bump-sh [github.com]
Agent Resource Discovery (ARD): Sixty-Two Companies Declared An OpenAPI. They Spelled It Eleven Ways.
There is a new file companies are starting to put on their domain, and almost nobody has noticed it yet. It is called an AI Catalog manifest, it lives at a w... [apievangelist.com]
A New Dawn: Enterprise AI's Shadow - Trillions of Tokens, Zero Governance
A decade ago, cloud and API sprawl got ahead of governance, and enterprises spent years trying to account for costs they'd never tracked. Today, we're seeing the same pattern around AI. by Augusto Marietti [konghq.com]
From Ruby Monolith to Federation: How Reverb Runs GraphQL with Hive
Reverb, the world's largest online marketplace for musical instruments, migrated a decade-old GraphQL stack to a federated supergraph - query by query, with zero client disruption - using Hive Gateway and The Guild's open source tooling. [the-guild.dev]
Cisco Zero-Day Highlights API Endpoint Authentication Issues
The authentication bypass flaw CVE-2026-76460 impacts Cisco's Identity Services Engine (ISE) and received a maximum 10 out of 10 CVSS score. [darkreading.com]
AI-Assisted API Design
 The traditional API design process today is bottlenecked by limited time and budgets, forcing teams to choose between delivery speed and design quality. This report reveals a game-changing shift: using LLMs as interactive API design coaches.
Learn more and download the full report.
Business of APIs
OpenAI Says Its Models Searched GitHub for Leaked API Keys During Training
OpenAI disclosed six misalignment reports describing models that used leaked API keys, uploaded data publicly and bypassed network limits. by Eduard Kovacs, (Sravish Sridhar), (Matt Honea), (Etay Maor), (Danelle Au), (Torsten George) [securityweek.com]
I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty.
(See original article: I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty. ) I was poking at a fintech's mobile API an... [theguptalog.blogspot.com]
Beyond the 200 OK: Architecting Observability for AI
Learn how AI observability tracks quality, cost, retrieval, and agent behavior beyond traditional APM metrics. by Adriano Mota [nordicapis.com]
(Un)Related
Delivery Groups - Per-tenant webhook delivery rates for Hookdeck Event Gateway
Per-tenant webhook delivery rates. [hookdeck.com]
|
|
