43% of CISA's exploited vulnerabilities in 2025 were API-related. 59% need zero authentication to exploit. APIs are now the #1 attack surface — and most of these vulns are trivially easy to exploit. zuplo.link/4K76BEX

By popular demand - we're hosting another workshop on #mcp this Friday! This time around, we'll be focusing on adding security to your remote Model Context Protocol server - so you can safely expose your platform and APIs to LLMs and AI Agents.

At Zuplo we believe every API should have beautiful and powerful API documentation. So, we're excited to announce that we've launched a major update to the Developer Portal we provide for every Zuplo project! Interested? Of course you are:

Zudoku now has a native integration with Inkeep! You can now add AI search directly to your API documentation, which can: - Help potential customers navigate your catalog of APIs - Empower devs to onboard faster - Aid existing customers in their understanding of new APIs, versions, or migrations

We're hosting a Free Workshop on how teams are preparing for the rise of #AI agents by turning their APIs into secure, monetizable #MCP servers. Some of the topics we’ll be covering: ...

Model Context Protocol 2025-06-18 is finally here - and it's jam-packed with new features and changes.

"[Zuplo] could be a one-stop shop to govern AI agent access, spin up your tools, and even monetize your MCP server. " We're already the leading API management platform for MCP support according to Nordic APIs - here what else they have to say here: nordicapis.com/10-api-gatew...

How do you demonstrate the value of API governance?? How do you begin to implement API governance at a large org? Travis Gosselin, Distinguished Engineer at SPS Commerce talks about how they did it without getting in their developers way, and demonstrating value first.

Check out TNS's summary of our talk on API monetization! If you're looking to monetize your #API or #MCP server - then check out Zuplo - it's free! #apis #apimonetization #apiproduct #apimanagement

Have you ever heard of AuthZEN? AuthZEN is the new Standard for Authorization, backed by the OpenID group. It aims to standardize the way components can communicate authorization relation information. The goal is to make it easier for developers to implement fine-grained authorization in their apps

Beware API Drift! Especially if you're building MCPs from your APIs When preparing for LLMs and AI Agents, don't forget the basics of good API best practices, and beware API drift! Emmanuel Paraskakis: www.linkedin.com/in/emmanuelp... Subscribe to API Excellence: www.youtube.com/@Zuplo

🚀 We announced support for the creation of remote Model Context Protocol (MCP) servers for any API in Zuplo as part of our MCP Week. If you missed any of it you can catch up on all the posts, videos and conversation at zuplo.link/mcpweek 🤖

🤖 MCP Week Day 5: AI Agents Are Coming for Your APIs! The question isn't whether AI agents will use your APIs, but whether you'll be ready when they do. John McBride from Zuplo explains why agents are already using your APIs (whether you know it or not) zuplo.link/mcpweek5

🚀 MCP Week Day 4: Introducing our new policies! 🤖 Prompt Injection Detection: Uses LLMs to identify and block malicious prompt poisoning 🤫 Secret Masking: Automatically redacts API keys and sensitive data from outbound requests Find out more and see the walkthrough video: zuplo.link/mcpweek4

🤖 MCP Week Day 3! The harsh reality of AI agent reliability. Today we're exploring AI agent reliability when working with APIs, tool discovery, and API design challenges with Zdenek Nemec, Co-Founder and CTO at Superface. Lots more in the post (plus video): zuplo.link/mcpweek3

MCP Week Day 2! 🔥 Today we're launching the ability to create remote Model Context Protocol (MCP) servers for your APIs directly in Zuplo! 🔥 Quickly expose your API as MCP tools for Cursor, Anthropic Claude Desktop, OpenAI, and many more! Get started for free: zuplo.link/mcpweek2

🚀 It's MCP Week at Zuplo! Day 1 kicks off TODAY with API strategist Kevin Swiber, who explores how MCP is reshaping APIs rather than posing a threat that would kill it completely, and what it means for developers building the next generation of AI-powered applications. zuplo.link/mcpweek1

Explaining n+1 in GraphQL - and how Hasura solved it! What is n+1? Adam Malone from Hasura explains what it is and tells us why Hasura isn't prone to this due to their approach to multiple record queries. Subscribe to API Excellence to get these insights before anyone else: www.youtube.com/@Zuplo

What's the difference between GraphQL & REST?? Mike Watson from Apollo GraphQL discusses the differences between REST APIs and GraphQL APIs. Subscribe to API Excellence to get these insights before anyone else: www.youtube.com/@Zuplo Recorded at Kubecon North America, Utah, November 2024

Just dropped a quick tutorial video on using Zuplo's new Web Bot Auth policy with HTTP Message Signatures to control which bots can access your endpoints. Great for maintaining API performance, preventing unwanted data scraping and protecting your rate limits from unwanted traffic: zuplo.link/httpms

How should you adopt API Standards? What should you consider when adopting API standards at your organization? Is custom, in house standard always the best way or are there other choices out there that will work better? Travis Gosslin, Distinguished Engineer at SPS Commerce explains his journey:

Async APIs vs REST APIs - what's the difference??? When it comes to Event Driven Architecture (EDA), asynchronous APIs are necessary, but how should you think about them versus traditional REST APIs? Budhaditya Bhattacharya from Tyk explains.

What the Heck is PromptQL??? Adam Malone, Director of Worldwide Solutions Engineering at Hasura talks about PromptQL can be used to surface the unknown unknowns when building data products.

What Does API Governance Look Like At Scale? Travis Gosselin, Distinguished Engineer at SPS Commerce explains what API governance looks like for them and how they designed their approach to work internally, and at scale.

Call us germaphobes - but we've been a bit obsessed with SOAP lately We've just completed an entire anthology on SOAP APIs on our blog - here's what you missed:

Zuplo has landed on the AWS Marketplace! Tired of wrangling multiple AWS services together, just to get a functional API out the door? Ditch AWS API Gateway's service spaghetti and finally experience REAL API Management. Check it out: zuplo.link/aws

If you're a #Golang API Developer - you need to start using Huma! It's a lightweight and easy-to-use framework for building APIs in Go, with built-in support for OpenAPI and some neat features that make it a great choice for developers.

API gateway setup: 👨‍💻 Traditionally? Hours of configs, docs, YAML pain 😭 ⚡ With Zuplo? 10 minutes. Done. In our latest video, Zuplo co-founder and CEO Josh walks you through it step by step. Including: Rate limiting, auth, RBAC, dev portal, and global deployment! 👉 zuplo.link/10minwin

API Management vs API Gateways - what's the difference? API Gateways are the traffic controllers of your API ecosystem. They direct the flow between clients and backend services, acting as a single entry point for all API calls.

Want to know how Hookdeck embedded code directly into their API docs? Well the answer is Markdown - and if you aren't using Markdown to explain workflows within your API, your docs are half-baked.

What exactly does "API Brownout" actually mean? Look no further than out latest video where Martyn digs into what brownout is, how it's used and how it can be implemented in code and at the gateway level! 📼 zuplo.link/api-brownout

There are generally two ways to build Scala APIs that have a specification: - the code-first approach and - the API-first approach (schema-first)

Got a minute for a cup of #java ☕️? Check out my latest tutorial for my good friends at @zuplo.com #springboot #fintech #apis #apimanagement zuplo.com/blog/2025/04...

🚀 The latest version of Zudoku is out! 🆕 Schema Processing: Transform your OpenAPI schemas before use in docs ⌨️ Search: Supports Windows keyboard shortcut ⬆️ Updated Lucide React 🐛 Sidebar last elements no longer buried in the gradient (thanks to github.com/nocturnalpol...) 👉 lnkd.in/ezidTHQK

Has the lack of quality API tooling for Ruby ever thrown you into a Rage? Sure, Ruby on Rails has an API-only mode, but this is missing many features that modern API frameworks have, like OpenAPI generation. Additionally, it's simply not a performant framework compared to other scripting languages.

OpenAI just released Codex, a terminal-based coding assistant that uses their new o4-mini model. So we asked Codex to write an OpenAPI document, lint it using Rate My OpenAPI, analyze and implement the feedback, and give us a final version. How well did that go? zuplo.link/codex-openapi

AsyncAPI is quickly emerging as the defacto standard for describing all non-REST APIs. If you're already familiar with OpenAPI, below is a quick overview of AsyncAPI and analogous properties. Fundamentally AsyncAPI is channel-first - it defines how data flows via topics, events, or message brokers.

Quick start templates are great, but they often leave you high-and-dry. For example, Spring Initializer is a slick experience for setting up your first Spring Boot API - but what's step 2?

New video! Gemini 2.5 Pro meets our OpenAPI generation test with a minimal prompt, no hand-holding. In this video, Martyn walks through the full process so if you're curious about how well LLMs can handle real-world API design, this is one to check out. zuplo.link/gemini-openapi

Thrilled to announce that @zuplo.com (the Serverless API Gateway for developers) is now sponsoring oRPC! 🙏 Their belief in our pre-stable project makes me incredibly happy and confident in oRPC's solid future. Huge thanks to our new sponsors! 🙏🙏 #oRPC #API #Serverless

#python #flask #apis #zuplo #apimanagement 🤔 Read it on my new blog post 🥳 zuplo.com/blog/2025/03... cc @zuplo.com

Generating API documentation for APIs that are already in production is a HUGE challenge - especially if you're not using a framework with native OpenAPI generation capabilities.

🚀 Zudoku 0.39.0 just came out of the oven 🥧 The latest update to Zudoku, the free and open source API documentation framework, brings a handful of improvements and fixes to make your API docs clearer, cleaner, and more powerful. 👉 zuplo.link/git-zudoku

💡 When prototyping your APIs using LLMs, don't completely ignore the human-in-the-loop moments. Run your outputs through several checkpoints that involve deterministic tools like Rate My OpenAPI, Vacuum or API Doctor. Check out the full video and prototyping workflow here: zuplo.link/prototypeapis

🚀 Just launched Part 1 of a new video series where we take an MCP server from local development to a production-ready using the Zuplo API Gateway and Cloudflare. Part 1: zuplo.link/mcp1

Essential Components of Effective API Documentation The difference between documentation that works and documentation that fails comes down to including these critical elements:

You might have thought we were joking yesterday, but we are actually welcoming a Peter to our team!

As you may know - we've been hiring at Zuplo recently, and we are proud to announce our latest hire - Peter Griffin! Peter hails from Quahog, and is joining us as our newest DevRel! Here's his first explainer video on #apidevelopment - fresh off the press: We hope you enjoy this new video format!

Using LLMs to generate OpenAPI documents that are actually up to par takes some finely honed prompt engineering. Our Prototype APIs using LLMs and Free Tools video is a full breakdown of how to build your own LLM powered API design workflow that ensures speed, and quality. zuplo.link/prototypeapis

Zudoku release update! 🚀 OpenAPI extension update allows you to show all tags (categories) with lightning speed 🛠️ A new expandAllTags API option 🔧 Fixes for the create-app template for a cleaner first run experience 📘 Updated: Multiple APIs docs and examples Zudoku GitHub: zuplo.link/git-zudoku