This issue of the API Changelog was crafted with the help of Zuplo. Make your business API-first with the first-ever edge API Gateway that's multi-cloud ready.
Zuplo is the only API Gateway that runs your OpenAPI definition directly. If you care about high-quality developer documentation, API analytics, and zero configuration deployments, give Zuplo a try today.
This is issue 2023.45 of the API Changelog, a weekly mix of API news, commentary, and opinion. In this issue, you'll get to know the most relevant API-related information from the week of October 30, 2023. Subscribe now, so you never miss an issue of the API Changelog.
Announcements
Pathward announced the expansion of its partnership with TabaPay, enabling money movement solutions for clients with a unified API.
All four of Sri Lanka’s mobile operators announced the commercial launch of new industry-wide network APIs, giving developers and enterprises a standard way to technically and commercially reach over 21 million Sri Lankans regardless of their network operator.
Google released Credential Manager, an Android-specific API for storing credentials. This will make Android 14 more passkey-friendly for Apps. See additional coverage on The Verge and devclass.
Pixalate announced the general availability of its self-service Ad Fraud Prevention API, with no annual commitments or upfront costs. Find more on Medium, thesundaily, and Torontosun.
TripStax has announced a new strategic partnership with AI-powered firm Grapevine. Grapevine will be integrated via API with TripStax's Core.
Meta introduced a new API to help creators share content to a Facebook Story directly from a third-party desktop or web app, enabling their users to share directly to Facebook Stories with minimal friction. See additional coverage on Newsbytes and Themorungexpress.
SmartBear announced the availability of Bugsnag’s distributed tracing, its own developer portal, and n-Level folder structure for test cycles, among other features. See SD Times and AiThority for more coverage.
Google has officially abandoned its proposal for the Web Environment Integrity API, a controversial protocol designed to combat online fraud. Instead, Google is focusing on the Android WebView Media Integrity API, which specifically addresses the integrity of embedded media within Android apps. See additional coverage on Bollyinside and Mezha.
Funding
Railsbank, an early mover in the open API banking and embedded finance sectors secures $24m in funding. The financial injection comes just seven months after the firm was rescued from collapse by an investor consortium.
Graylog, a Security Information and Event Management (SIEM) and log management company, has raised $39M in funding. The company that entered the API Security market segment in July 2023, intends to use new funding to accelerate product development and differentiation, scale global go-to-market operations, and bridge to profitability. See additional coverage on database and innovationmap.
AI
Bill Siwicki wrote “How an AI-powered clinical notes API could boost telehealth.“ This article is an interview with Kwindla Hultman Kramer that covers the benefits of using AI in conjunction with APIs to save health professionals time.
Sparkling Ahfaz wrote an informative article on Medium that provides the ultimate guide for Making Money with APIs & AI.
xAI, Elon Musk’s new AI venture, launched its first AI chatbot technology named Grok. The company is planning an API for Grōk. See additional coverage on Slashdot.
Security
Security flaws were discovered in NGINX ingress controllers for Kubernetes, that could be weaponized by a threat actor to steal secret credentials from the cluster. See additional coverage on The Hacker News.
StackHawk announced a new code-based API discovery capability, GitHub Insights. The new code-based API discovery eliminates API blind spots and fosters collaboration among Developer and Security teams.
Beaujard Swan published “API Inventory: Navigating Through Invisible Threats.“ In this article, the author shows how to navigate your API landscape to find potential hidden security threats.
This SC Media article remembers the importance of prioritizing APIs security, in today's interconnected world, where many organizations rely on third-party APIs to enhance their products and services.
According to the Security brief, attacks of bad bots are evolving to become more sophisticated and they are targeting applications that use APIs.