--- type: "article" title: "Why JSON Schema matters more than ever in the age of generative AI - API Developer Weekly" summary: "Why JSON Schema matters more than ever in the age of generative AI" newsletter: "API Developer Weekly" newsletter_handle: "api-developer-weekly" newsletter_url: "https://usecommune.com/n/api-developer-weekly" author: "James Higginbotham (@jhigginbotham)" published: "2026-04-30T18:00:00.000Z" canonical_url: "https://usecommune.com/n/api-developer-weekly/a/why-json-schema-matters-more-than-ever-in-the-age-of-generat" markdown_url: "https://usecommune.com/n/api-developer-weekly/a/why-json-schema-matters-more-than-ever-in-the-age-of-generat.md" chat_url: "https://usecommune.com/n/api-developer-weekly/a/why-json-schema-matters-more-than-ever-in-the-age-of-generat/chat" source_url: "https://mailchi.mp/7ce84f55e8b7/key-takeaways-from-platform-summit-2024-api-developer-weekly-2679937" body_source: "imported" likes: 0 replies: 0 body_words: 922 --- # Why JSON Schema matters more than ever in the age of generative AI - API Developer Weekly ![](https://mcusercontent.com/5005148108dfbac726f74e31e/images/04b6c7bf-305e-b933-367e-a79a24d334d5.png) ![](https://mcusercontent.com/5005148108dfbac726f74e31e/images/9dff09fa-af28-ed1e-7fa6-a6589b89e5e1.png) # API Developer Weekly # April 30, 2026 - Issue #574 *After an extended break, we are back with more articles. In this edition, we look at why JSON Schema matters even more in the world of genAI, how to choose between JSON-RPC and REST, and MCP architecture for enterprises. We also have a spotlight on AI and API security, which is becoming more and more important as APIs are consumed by LLMs. We look at the business of APIs by exploring a new AI clause in SAP's API policy, how ING bank manages 2000 microservices, and a look at the USPS tracking API including pricing and terms of use. Finally, we have several thought pieces on AI, software development, and the potential end of 'Agile' as the SDLC changes to incorporate more AI workflows.* *-- Happy Reading!* # Featured Articles [Why JSON Schema matters more than ever in the age of generative AI](https://share.google/ttchCZmbfKUWPrSjU) JSON Schema is essential for grounding unpredictable AI outputs. Discover why this standard ensures enterprise data reliability in 2026. by Charles Humble \[share.google\] [JSON-RPC vs. REST: When Should API Developers Use Each?](https://nordicapis.com/json-rpc-vs-rest-when-should-api-developers-use-each/) Compare JSON-RPC vs REST to understand their differences, strengths, and when developers should use each API design approach. by J Simpson \[nordicapis.com\] [Cloudflare Outlines MCP Architecture as Enterprises Confront Security and Governance Risks](https://www.infoq.com/news/2026/04/cloudflare-mcp/) Cloudflare has outlined a reference architecture for scaling Model Context Protocol (MCP) deployments across the enterprise, positioning centralized governance, remote server infrastructure, and cost controls as key requirements for production-ready agent systems. \[infoq.com\] [Speeding up agentic workflows with WebSockets in the Responses API](https://share.google/VK3edCjapXZXAaoJL) A deep dive into the Codex agent loop, showing how WebSockets and connection-scoped caching reduced API overhead and improved model latency. \[share.google\] [Scaling MCP adoption: Our reference architecture for simpler, safer and cheaper enterprise deployments of MCP](https://share.google/5P7PS7xPpMwsVY1j3) We share Cloudflare's internal strategy for governing MCP using Access, AI Gateway, and MCP server portals. We also launch Code Mode to slash token costs and recommend new rules for detecting Shadow MCP in Cloudflare Gateway. \[share.google\] [As agentic AI explodes, Amazon doubles down on MCP](https://share.google/f4DJd9FzsAEUrVVXG) AWS engineer Clare Liguori shapes the MCP spec as Amazon builds managed servers, contributes new features, and tests draft concepts in production. by Alex Wilhelm \[share.google\] [Four Open-Source Agentic Authorization Alternatives](https://apichangelog.substack.com/p/four-agentic-authorization-alternatives) OAuth was built for people, not for AI. by Bruno Pedro \[apichangelog.substack.com\] [Give agents what they want. Start with APIs.](https://www.linkedin.com/pulse/give-agents-what-want-start-apis-emmanuel-paraskakis-sr5hc) Over the past two months, something happened that I've never seen before. The biggest names in tech started saying the same thing, independently, across podcasts, X threads, LinkedIn posts, and long-form essays. \[linkedin.com\] [Announcing Arazzo Editor: Build, Edit & Export API Workflows](https://jentic.com/blog/arazzo-editor) Build and export API workflows with form-based editing and live diagrams. Arazzo Editor is free, browser-based, and fully standards-compliant. No raw YAML. \[jentic.com\] # Spotlight: AI and API Security [MCP 'design flaw' puts 200k servers at risk: Researcher](https://share.google/FR0CcObaS5tPIn8Cf) Bug or feature? \[share.google\] [API attacks surge as AI exposure raises cyber risk](https://securitybrief.co.uk/story/api-attacks-surge-as-ai-exposure-raises-cyber-risk) Akamai survey finds APIs are now cybercriminals' main target, with AI-linked interfaces under attack and incidents costing organisations more than USD $700,000. by Sofiah Nichole Salivio \[securitybrief.co.uk\] [Cursor Extension Flaw Exposes Developer API Keys](https://www.infosecurity-magazine.com/news/cursor-extension-flaw-exposes-api/) Cursor flaw lets extensions steal API keys and session tokens without user interaction, according to researchers at LayerX by Alessandro Mascellino \[infosecurity-magazine.com\] [The Mother of All AI Supply Chains: Critical, Systemic Vulnerability at the Core of Anthropic's MCP](https://www.ox.security/blog/the-mother-of-all-ai-supply-chains-critical-systemic-vulnerability-at-the-core-of-the-mcp/) Anthropic design choice Exposes 150M+ Downloads and up to 200K Servers to complete takeover The OX Security Research team has uncovered a critical, systemic vulnerability at the core of the Model Context Protocol (MCP) - the industry standard for AI agent communication created and maintained by Anthropic. by Moshe Siman Tov Bustan \[ox.security\] [10 Tips for Securing Your API Keys From AI](https://nordicapis.com/10-tips-for-securing-your-api-keys-from-ai/) Learn API key security best practices to protect AI systems, prevent leaks, and secure access in modern API-driven architectures. by J Simpson \[nordicapis.com\] # Business of APIs [AI clause in new SAP API policy provokes lock-in concern](https://www.theregister.com/2026/04/29/new_sap_api_policy_provokes/) Expert says it could push customers and partners to work with undocumented APIs \[theregister.com\] [How ING Bank Manages 2,000 Microservices With Service Mesh](https://nordicapis.com/how-ing-bank-manages-2000-microservices-with-service-mesh/) How ING scaled 2,000 microservices with a service mesh, covering governance, discovery, and security lessons. by Bill Doerrfeld \[nordicapis.com\] [USPS Tracking API, by the numbers: Pricing, terms, and how it compares](https://medium.com/p/usps-tracking-api-by-the-numbers-pricing-terms-and-how-it-compares-8e61609c613b) USPS Tracking API, by the numbers: Pricing, terms, and how it compares Earlier I wrote about how USPS rolled out its API Access Control initiative without much advance communication. That post was ... by John M. Kuchta \[medium.com\] # (Un)Related [Shifting From Individual Contributor to Individual Architect](https://nordicapis.com/shifting-from-individual-contributor-to-individual-architect/) Learn how to develop a software architect mindset with systems thinking, ADRs, and practical strategies for better API and system design. by Art Anthony \[nordicapis.com\] [AI Didn't Kill Programming, You Did](https://learncodethehardway.com/blog/39-ai-didnt-kill-programming-you-did/) You spent decades sucking all humanity out of programming and you're surprised it worked? \[learncodethehardway.com\] [Cloudflare rebuilds Wrangler CLI for broader API coverage](https://www.theregister.com/2026/04/13/cloudflare_expanding_wrangler_cli_functionality/) What, you think basic usability is improved just for your benefit, human? \[theregister.com\] [Saying Goodbye to Agile](https://lewiscampbell.tech/blog/260414.html) Software's "Agile moment" has been and gone. \[lewiscampbell.tech\] [The keyboard was never the bottleneck](https://mamund.substack.com/p/the-keyboard-was-never-the-bottleneck) The art of programming isn't disappearing. It's migrating by Mike Amundsen \[mamund.substack.com\] ### Have something to share? As always, if you want to chat, share a link, or make a suggestion, feel free to drop us a quick note or tagging us on X/Twitter ([@launchany](https://x.com/launchany) and [@caseysoftware](https://x.com/caseysoftware)) or by emailing us at: [james@launchany.com](mailto:james@launchany.com). [![Twitter](https://cdn-images.mailchimp.com/icons/social-block-v2/outline-light-twitter-48.png)](https://www.twitter.com/launchany) [![LinkedInlinkedin.com/in/jameshigginbotham/](https://cdn-images.mailchimp.com/icons/social-block-v2/outline-light-linkedin-48.png)](http://www.linkedin.com) [![Website](https://cdn-images.mailchimp.com/icons/social-block-v2/outline-light-link-48.png)](https://launchany.com) Want to change how you receive these emails? You can [update your preferences](https://launchany.us2.list-manage.com/profile?u=5005148108dfbac726f74e31e&id=239e48d26e&e=[UNIQID]&c=2e3584f694) or [unsubscribe from this list](https://launchany.us2.list-manage.com/unsubscribe?u=5005148108dfbac726f74e31e&id=239e48d26e&t=b&e=[UNIQID]&c=2e3584f694). *** ## Discussion No replies yet.