43% of CISA's exploited vulnerabilities in 2025 were API-related. 59% need zero authentication to exploit.
APIs are now the #1 attack surface — and most of these vulns are trivially easy to exploit.
zuplo.link/4K76BEX
We'll be covering:
- Authentication
- Authorization
- Rate Limiting
- Observability
...and more!
We had 100+ registrants on our last event. RSVP now to secure your spot: lu.ma/f6zz2aro
#modelcontextprotocol #mcp #mcpmanagement #mcpsecurity
By popular demand - we're hosting another workshop on #mcp this Friday!
This time around, we'll be focusing on adding security to your remote Model Context Protocol server - so you can safely expose your platform and APIs to LLMs and AI Agents.
At Zuplo we believe every API should have beautiful and powerful API documentation.
So, we're excited to announce that we've launched a major update to the Developer Portal we provide for every Zuplo project!
Interested? Of course you are:
Zudoku now has a native integration with Inkeep!
You can now add AI search directly to your API documentation, which can:
- Help potential customers navigate your catalog of APIs
- Empower devs to onboard faster
- Aid existing customers in their understanding of new APIs, versions, or migrations
We’ve already helped engineering teams at several high-growth companies implement this. Don't fall behind - get MCP ready NOW!
lu.ma/8cu6h1mi
- What is #modelcontextprotocol (MCP), and why AI labs are betting big on it
- How to turn existing APIs into Remote MCP servers in minutes, not days
- New opportunities for monetization through agent-based access
- Monitoring, Securing, and rate-limiting AI traffic from tools like ChatGPT
We're hosting a Free Workshop on how teams are preparing for the rise of #AI agents by turning their APIs into secure, monetizable #MCP servers.
Some of the topics we’ll be covering:
...
Keeping up with new MCP features like this is tough, which is why we sprinted 🏃 to update Zuplo's API to MCP server generation to the latest version, with FULL SUPPORT for Structured Tool Outputs - with no additional work on your side.
Just give us your OpenAPI and we will take care of the rest.
The schema is defined by the outputSchema property on your tool, which clients can use to validate your outputs. Clients are going to start keeping you honest! 🤯
One of the ones we are most excited about is support for "Structured Tool Outputs"
Previously, most responses were just raw text being piped back arbitrarily to clients. But now, you can send back schematized JSON in the structuredContent field.
Model Context Protocol 2025-06-18 is finally here - and it's jam-packed with new features and changes.
"[Zuplo] could be a one-stop shop to govern AI agent access, spin up your tools, and even monetize your MCP server. "
We're already the leading API management platform for MCP support according to Nordic APIs - here what else they have to say here: nordicapis.com/10-api-gatew...
SPS Commerce: www.spscommerce.com
Travis Gosselin: travisgosselin.com
Subscribe to API Excellence to get these insights before anyone else: www.youtube.com/@Zuplo
How do you demonstrate the value of API governance??
How do you begin to implement API governance at a large org? Travis Gosselin, Distinguished Engineer at SPS Commerce talks about how they did it without getting in their developers way, and demonstrating value first.
Check out TNS's summary of our talk on API monetization!
If you're looking to monetize your #API or #MCP server - then check out Zuplo - it's free!
#apis #apimonetization #apiproduct #apimanagement
The lovely folks at IdentityServer just wrote a tutorial on how to integrate Zuplo with AuthZen and Enforcer to add Attribute Based Access Control - Check it out! 👀 👇
www.identityserver.com/articles/ext...
Have you ever heard of AuthZEN?
AuthZEN is the new Standard for Authorization, backed by the OpenID group. It aims to standardize the way components can communicate authorization relation information. The goal is to make it easier for developers to implement fine-grained authorization in their apps
Beware API Drift! Especially if you're building MCPs from your APIs
When preparing for LLMs and AI Agents, don't forget the basics of good API best practices, and beware API drift!
Emmanuel Paraskakis: www.linkedin.com/in/emmanuelp...
Subscribe to API Excellence: www.youtube.com/@Zuplo
🚀 We announced support for the creation of remote Model Context Protocol (MCP) servers for any API in Zuplo as part of our MCP Week.
If you missed any of it you can catch up on all the posts, videos and conversation at zuplo.link/mcpweek 🤖
🤖 MCP Week Day 5: AI Agents Are Coming for Your APIs!
The question isn't whether AI agents will use your APIs, but whether you'll be ready when they do. John McBride from Zuplo explains why agents are already using your APIs (whether you know it or not)
zuplo.link/mcpweek5
🚀 MCP Week Day 4: Introducing our new policies!
🤖 Prompt Injection Detection: Uses LLMs to identify and block malicious prompt poisoning
🤫 Secret Masking: Automatically redacts API keys and sensitive data from outbound requests
Find out more and see the walkthrough video: zuplo.link/mcpweek4
🤖 MCP Week Day 3! The harsh reality of AI agent reliability.
Today we're exploring AI agent reliability when working with APIs, tool discovery, and API design challenges with Zdenek Nemec, Co-Founder and CTO at Superface.
Lots more in the post (plus video): zuplo.link/mcpweek3
MCP Week Day 2! 🔥 Today we're launching the ability to create remote Model Context Protocol (MCP) servers for your APIs directly in Zuplo! 🔥
Quickly expose your API as MCP tools for Cursor, Anthropic Claude Desktop, OpenAI, and many more!
Get started for free: zuplo.link/mcpweek2
🚀 It's MCP Week at Zuplo!
Day 1 kicks off TODAY with API strategist Kevin Swiber, who explores how MCP is reshaping APIs rather than posing a threat that would kill it completely, and what it means for developers building the next generation of AI-powered applications.
zuplo.link/mcpweek1
Explaining n+1 in GraphQL - and how Hasura solved it!
What is n+1? Adam Malone from Hasura explains what it is and tells us why Hasura isn't prone to this due to their approach to multiple record queries.
Subscribe to API Excellence to get these insights before anyone else: www.youtube.com/@Zuplo
What's the difference between GraphQL & REST??
Mike Watson from Apollo GraphQL discusses the differences between REST APIs and GraphQL APIs.
Subscribe to API Excellence to get these insights before anyone else: www.youtube.com/@Zuplo
Recorded at Kubecon North America, Utah, November 2024
Just dropped a quick tutorial video on using Zuplo's new Web Bot Auth policy with HTTP Message Signatures to control which bots can access your endpoints. Great for maintaining API performance, preventing unwanted data scraping and protecting your rate limits from unwanted traffic: zuplo.link/httpms
