OpenAPI Spec 3.2 is coming

The OpenAPI team is looking to bring new features to a close for the upcoming version 3.2. There are a bunch of new features coming in the next version. Support for the new QUERY HTTP method, enhanced multipart support, support and guidance for event streams and a new Tag Object format. The Tag Object is an interesting one as it comes with the ability to create hierarchical structures through categories and nested tags.

Ready for more? You can check the release milestone on GitHub for more info.

-- Alexander

Help shape the future of APIs

If you build, manage, or use APIs, your insights can help highlight key trends and challenges in the ecosystem.

Take the 10 minute survey, and you'll get early access to the report — plus a chance to win a PS5, NuPhy mechanical keyboard, and more!

Take the Survey

The API Roundup

API News, links, and tools from around the web

Secure Express API with Cedar

Cedar is an open-source language for defining permissions as policies and then evaluating them. Recently, they released a plugin for ExpressJS, allowing you to add policy-based authorisation in your Express API within minutes. The Cedar approach to authorisation decouples the logic from your application, making it easier to maintain and audit.

Stop Converting Your REST APIs to MCP

An interesting article arguing against turning your OpenAPI Spec into an MCP server. The article claims an OpenAPI spec is rich in context for humans, but an OpenAPI spec for MCP should be "ruthlessly curated and minimalist". An interesting read, but I find myself disagreeing. For example, the issue of the LLM calling the delete everything endpoint. Why is there a delete everything endpoint? Sounds like design first might have been thrown out the window.

Generating Client Libraries with OpenAPI

Good OpenAPI specs can be used for more than just describing APIs; they can also be used to generate code. In this article, learn how to create a working Go HTTP server and a Python HTTP client with an OpenAPI spec. Dig into generating the client interfaces and some gotchas to watch out for.

How to Automate Your API Governance

A five-step process for automating API governance, from adopting OpenAPI specifications to gateways, rules, and automating documentation generation. Stop development bottlenecks through API consistency and by integrating these tools into your CI/CD.

APIs You Won't Hate

The latest from the team at API's You Won't Hate.

Powerful HTTP/API Clients: Alternatives to Postman

This isn't a new article, but it has been growing in popularity the last few weeks. We created a comparison of quick and easy graphical HTTP clients you can use if you're considering alternatives to Postman.

From our Community

Articles written and shared in our free Slack community.

OpenAPI Community Calendar

Although I've worked with OpenAPI for years, today I learned that they share a calendar with all their working group meetings, which you're welcome to attend.

Thanks so much to our members: Kin L, Juxt, Alex R, Nolan S, Frank, James D, Rich, Ryan T, and Umair. Your support means the world to us!

✌️ Until next time,
Alexander, Phil & Mike