Systems | Development | Analytics | API | Testing

Starlette vs FastAPI: what FastAPI actually adds

FastAPI has become one of the most popular web frameworks among Python developers. It's so popular that it often overshadows the technologies it's built on. FastAPI is built on Starlette and Pydantic. Starlette handles the HTTP layer (routing, middleware, WebSockets, the ASGI plumbing) and Pydantic handles data validation. FastAPI is the layer on top that ties them together with type-driven parameter parsing, dependency injection, and automatic OpenAPI documentation.

Enforce API Standards with Custom Linting in Kong Insomnia 13

As APIs grow across teams, keeping them consistent becomes difficult. Some APIs follow naming conventions and include clear descriptions, while others don’t. Over time, these differences make APIs harder to understand, review, and maintain. That is where API linting helps. That made it possible to apply custom Spectral rules as part of local development, Git workflows, or CI checks.. Teams can now upload and manage custom Spectral rulesets directly from the Insomnia UI.

How to Proxy Every AI Traffic Pattern Through One Gateway

Production AI no longer generates one kind of traffic. It generates four patterns, and most teams govern only one. **AI traffic management** starts with a single decision: **proxy AI traffic** through one control point instead of letting it flow straight from application code to model providers. Skip that step and security teams have no policy chokepoint, token spend climbs with no meter, and every new provider adds an integration nobody owns.

WSO2 API Platform: Monetize Your APIs With Stripe

See how to set up API monetization in WSO2 API Platform, from connecting Stripe to letting consumers subscribe and pay for API access. This demo walks through the full monetization flow in WSO2 API Platform. You'll start by connecting Stripe as your payment provider, adding your secret key and publishable key from the Stripe dashboard. From there, you'll create a subscription plan, set a rate limit, and choose a pricing model. WSO2 API Platform supports five pricing models: free, flat rate, per unit, volume, and graduated tier. This walkthrough sets up a flat rate plan billed monthly at $12.

Announcing Kong AI Gateway 2.0: Built for the Pace of Agentic AI

We have big news for platform and AI infra teams: *Kong AI Gateway 2.0 is available today in private beta*. It runs on its own dedicated runtime, ships on its own release cadence, and carries a completely reimagined user experience designed around the way teams actually build with AI: models, MCP servers, and agents as first-class citizens, not plugins bolted onto an API gateway.

Kong and ModelOp Partner to Deliver Zero-Trust Security for the Agentic Enterprise

We're thrilled to announce a strategic technology partnership between **Kong** and **ModelOp**. As enterprises rapidly transition into the agentic era, they face a critical challenge: how to deploy AI fast enough to stay competitive without taking on unacceptable regulatory or security risks. Together, **ModelOp** and **Kong** are solving the "last mile" problem of enterprise AI delivery.

How to design & test APIs with OpenAPI & Swagger | What's changed in 3.1 & 3.2

Outdated API docs and last-minute bugs cost teams time and trust. Learn how the OpenAPI Specification help you document, govern, and test your APIs from design to deployment – all inside SmartBear Swagger. SmartBear's Yousaf Nabi, Developer Advocate, and Chris Armstrong, Manager of Developer Relations, explain why API documentation drifts out of sync and walk through what's changed between OpenAPI 3.0, 3.1, and 3.2. After covering a brief history of Swagger and the OpenAPI specification, they demo the full API workflow across Swagger.

Kafka in a DMZ: Protecting AWS MSK with Kong Event Gateway

Running Apache Kafka on Amazon Managed Streaming for Apache Kafka (MSK) gives you a managed broker with no ZooKeeper to operate, automated patching, and multi-AZ replication handled by the service. What it doesn't give you is a safe, governed way to expose Kafka access beyond your VPC boundary. That problem looks simple on the surface. It isn't. And how you solve it has significant implications for security posture, operational complexity, and monthly cost.

AI is Exposing Observability's Dirty Secret

The 3 pillars of observability are breaking. For years, dev teams relied on Logs, Metrics, and Traces to know when something went wrong. But now? AI agents are writing, deploying, and changing code in real-time. When an AI hallucination pushes a bug to production, standard monitoring sees nothing wrong.To survive the AI era, we need a 4th Pillar of Observability. Watch to find out what it is and why the old way of monitoring just became obsolete.
Sponsored Post

Build WireMock mappings fast from real traffic

I'm a big fan of service mocking. I've been working in and around software for about 25 years, and one thing never changes: when you sit down to work on your code, you almost never have everything available. The database, the third-party API, the message queue, the service two teams over. Something's missing. So you've got to stub it out or mock it out and keep moving.