Contents

• Interesting Content for the Week

• Product Updates/New Releases

• FeedBack & Share

• Upcoming Conferences

After some time of leave in August, we are back with some interesting content links for you this week.

Interesting Content for the Week

Runtime AI Governance

Solo.io Contributes agent gateway to Linux Foundation to Make AI Agents More Accessible, Capable, and Secure: This agent gateway is specifically designed to provide essential security, observability, and governance for the communication between AI agents, tools, and LLMs, a need that is not met by existing gateways. The contribution aims to foster a vendor-neutral, community-driven solution for the evolving demands of AI agent infrastructure.

Tracing GenAI Applications Is Not Enough: Krisztian Fekete discusses the limitations of relying solely on tracing to monitor Generative AI (GenAI) applications. A comprehensive approach is required, which includes using metrics and logs alongside traces to ensure full security, visibility, and cost-effectiveness for enterprise GenAI applications.

Tips To Monitor MCP Ecosystems: Kristopher Sandoval writes that while MCP allows for fine-grained control over agent workflows, a lack of monitoring can lead to significant issues like data leakage and "runaway agent drift." Therefore, observation is essential for ensuring reliable agent behaviour, secure API integrations, and faster development cycles.

AI Guardrails: Ensure Safe, Responsible, Cost-Effective AI Integration: Jason Matis highlights six categories of guardrails in Kong, including content moderation and cost controls, as necessary measures for responsible AI deployment.

Building Aira, Postman’s Product Research Agent: Numaan Ashraf writes about developing AI agents that can act as "colleagues," integrating seamlessly into existing workflows to save time and add value. This was achieved by designing the agent with composable capabilities and iterating on user feedback, ultimately leading to a more efficient process for gathering insights from user feedback.

API Production Governance

API Drift Detection Enhancing Data Protection: Anoop Gupta discusses that the increasing prevalence of data breaches in APIs is a significant concern, with Gartner predicting that data leakage will become more common as data volumes grow.

Open Policy Agent in Practice: Real-World Policy Enforcement: OPA allows for the central definition and independent enforcement of policies across various systems, overcoming the challenges of decentralised responsibilities. By deploying OPA as a sidecar with API gateways, it can evaluate requests and enforce policies, providing a scalable and effective solution for security and authorisation.

From zero to V1 – what we learned designing the Tyk Governance Hub: Budhaditya Bhattacharya details the process of designing the Tyk Governance Hub and discusses how effective governance must be a continuous practice that is embedded within developer workflows. He discusses how the Tyk Governance Hub was designed to enable this by empowering users and providing a shared language for collaboration.

Rate Limiting & Throttling with an API Gateway: Why It Matters: Prachi Jamdade discusses the importance of rate limiting and throttling for APIs, explaining how these measures are essential for ensuring fairness, stability, and cost-efficiency.

Building the Beating Heart of Your Enterprise: The API Catalog: “This guide explores how to transform your API catalog into the strategic core of your digital ecosystem — making APIs discoverable, reusable, and compliant, while unlocking innovation and AI-driven workflows.”

API Specificity with Overlays and Enums: Lorna Jane discusses how development teams can use OpenAPI Overlays and enums to add specificity to API standards for their unique applications without altering the original contract.

APIs Aren't Pipes (and That's a Good Thing): Matthew Reinbold disputes to the common notion "APIs are just data pipes" metaphor, saying it leads to poor design and strategic undervaluation of APIs.

Product updates/New releases

Terraform provider generation feature bonanza: Speakeasy announces new improvements to Speakeasy’s Terraform provider generation, the update automates repetitive tasks and improve efficiency through features such as provider-level globals for consistent configuration, automatic handling of paginated API responses, and dynamic server URL variables.

Feedback & Share

What do you think of this newsletter issue?

I appreciate your feedback. If you find my newsletter useful, please forward and share it with a friend.

Upcoming API Conferences

GraphQLConf 2025: Date: September 8th-10, 2025, Location: Amsterdam, Netherlands.

APIdays London: Theme: “No AI Without APIs” Conference Date: September 22nd - 24th, Location: Convene 155 Bishopsgate, London EC2M 3YD

Platform Summit 2025: Date: October 13-15, Location: Stockholm, Theme: Engineer Next-Gen API Architectures Register to get your tickets.

Kong API Summit Live 2025: Join developers, leaders, and visionaries from around the world as we explore the latest innovations around APIs, microservices, and AI. Date: Oct 14 - 15, 2025, Location: New York City

API Conference Berlin: Theme: The Conference for Web APIs, API Design & Management, Date: October 20 - 22, 2025. Register to get your tickets.

API World Conference 2025: Date: Sept 3-5 Location - Santa Clara, CA, Sept 10-12 - Live Online, Register to get your tickets

API Governance Consulting