---
title: "Blog"
description:
  "Zuplo is fully-managed API Management designed for developers. Add
  rate-limiting, authentication and more as fast as you can commit to git."
canonicalUrl: "https://zuplo.com/blog"
sourceUrl: "https://zuplo.com/blog"
pageType: "other"
---

# Zuplo Blog — Insights on APIs and Developer Tools

> Tutorials, best practices, product updates, and deep dives from the Zuplo
> team. The archive holds 269 posts spanning September 2021 through July 2026,
> covering API gateways, rate limiting, authentication, API monetization, MCP
> servers, and AI/agent infrastructure.

The live page filters posts client-side by keyword (title, description, and
tags) and reveals them 20 at a time behind a "Load more" button — every post is
in the page on first load, the button only uncovers more. All 269 posts
are listed below, newest first; each link serves that post's markdown directly.

## All posts

- **Give Claude Tag One API Key, Not Ten** — Jul 22, 2026 — [/blog/claude-tag-single-api-proxy.md](/blog/claude-tag-single-api-proxy.md)
- **Per-Role Tool Catalogs for Your MCP Server** — Jul 16, 2026 — [/blog/per-role-mcp-tool-catalogs.md](/blog/per-role-mcp-tool-catalogs.md)
- **Decouple Agent Auth From Your MCP Server** — Jul 15, 2026 — [/blog/decouple-agent-auth-mcp-server.md](/blog/decouple-agent-auth-mcp-server.md)
- **Charge Agents for MCP Tool Calls** — Jul 14, 2026 — [/blog/charge-agents-for-mcp-tool-calls.md](/blog/charge-agents-for-mcp-tool-calls.md)
- **How to Avoid Shadow MCP Servers in the Enterprise** — Jul 13, 2026 — [/blog/how-to-avoid-shadow-mcp-servers.md](/blog/how-to-avoid-shadow-mcp-servers.md)
- **What Developers Want from an AI Gateway** — Jul 8, 2026 — [/blog/what-developers-want-from-an-ai-gateway.md](/blog/what-developers-want-from-an-ai-gateway.md)
- **MCP Registry vs. MCP Gateway: What's the Difference?** — Jul 6, 2026 — [/blog/mcp-registry-vs-mcp-gateway.md](/blog/mcp-registry-vs-mcp-gateway.md)
- **MCP, A2A, and Where ACP Went** — Jul 3, 2026 — [/blog/agent-protocol-stack-mcp-a2a-acp-2026.md](/blog/agent-protocol-stack-mcp-a2a-acp-2026.md)
- **AI Firewalls Are a Layer Not a Wall** — Jul 2, 2026 — [/blog/ai-firewalls-layer-not-wall.md](/blog/ai-firewalls-layer-not-wall.md)
- **Audit Every Tool Call Your Agents Make to MCP Servers** — Jun 30, 2026 — [/blog/audit-agent-mcp-tool-calls.md](/blog/audit-agent-mcp-tool-calls.md)
- **Publish an Agentic Resource Discovery Manifest with Zuplo** — Jun 30, 2026 — [/blog/agentic-resource-discovery.md](/blog/agentic-resource-discovery.md)
- **7 Common MCP Security Flaws and Vulnerabilities** — Jun 29, 2026 — [/blog/7-common-mcp-security-flaws.md](/blog/7-common-mcp-security-flaws.md)
- **Expose Only the MCP Tools You Choose** — Jun 25, 2026 — [/blog/expose-only-mcp-tools-you-choose.md](/blog/expose-only-mcp-tools-you-choose.md)
- **Zuplo Joins Okta's Cross App Access (XAA) Ecosystem** — Jun 23, 2026 — [/blog/zuplo-okta-cross-app-access-launch-partner.md](/blog/zuplo-okta-cross-app-access-launch-partner.md)
- **MCP Gateways: Buy or Build Your Own?** — Jun 22, 2026 — [/blog/mcp-gateway-buy-or-build.md](/blog/mcp-gateway-buy-or-build.md)
- **Use an MCP Gateway With Vercel Eve Agents** — Jun 19, 2026 — [/blog/use-an-mcp-gateway-with-vercel-eve-agents.md](/blog/use-an-mcp-gateway-with-vercel-eve-agents.md)
- **Expose Internal APIs as Governed MCP Tools** — Jun 17, 2026 — [/blog/expose-internal-apis-as-mcp-tools.md](/blog/expose-internal-apis-as-mcp-tools.md)
- **A Remote MCP Server Can Rug Pull You** — Jun 16, 2026 — [/blog/remote-mcp-server-rug-pull.md](/blog/remote-mcp-server-rug-pull.md)
- **What Regulators Now Expect From AI Agents** — Jun 15, 2026 — [/blog/what-regulators-expect-ai-agents.md](/blog/what-regulators-expect-ai-agents.md)
- **Bind Every MCP Token to One Server** — Jun 12, 2026 — [/blog/bind-mcp-tokens-to-one-server.md](/blog/bind-mcp-tokens-to-one-server.md)
- **Your Team Already Installed Shadow MCP** — Jun 11, 2026 — [/blog/shadow-mcp-governance.md](/blog/shadow-mcp-governance.md)
- **Wrap a Token-Only MCP Server in OAuth** — Jun 10, 2026 — [/blog/wrap-token-only-mcp-server-in-oauth.md](/blog/wrap-token-only-mcp-server-in-oauth.md)
- **Why Enterprises Need an MCP Gateway** — Jun 9, 2026 — [/blog/why-enterprises-need-an-mcp-gateway.md](/blog/why-enterprises-need-an-mcp-gateway.md)
- **RBAC Isn't Enough for AI Agents** — Jun 8, 2026 — [/blog/fine-grained-authz-ai-agents.md](/blog/fine-grained-authz-ai-agents.md)
- **What the Best MCP Gateways Do in 2026** — Jun 5, 2026 — [/blog/what-the-best-mcp-gateways-do-in-2026.md](/blog/what-the-best-mcp-gateways-do-in-2026.md)
- **Re-Evaluating Your MCP Gateway After the Portkey Acquisition** — Jun 5, 2026 — [/blog/mcp-gateway-after-the-portkey-acquisition.md](/blog/mcp-gateway-after-the-portkey-acquisition.md)
- **Anthropic Just Made the Case for MCP Gateways** — Jun 4, 2026 — [/blog/anthropic-made-the-case-for-mcp-gateways.md](/blog/anthropic-made-the-case-for-mcp-gateways.md)
- **Front a Third-Party Server with the Zuplo MCP Gateway** — Jun 3, 2026 — [/blog/set-up-virtual-mcp-server-portal.md](/blog/set-up-virtual-mcp-server-portal.md)
- **MCP Gateway Comparison: 10 Tools for Governing AI Agent Access** — Jun 2, 2026 — [/blog/mcp-gateway-comparison.md](/blog/mcp-gateway-comparison.md)
- **Introducing the Zuplo MCP Gateway** — Jun 2, 2026 — [/blog/introducing-zuplo-mcp-gateway.md](/blog/introducing-zuplo-mcp-gateway.md)
- **How auth.md Standardises Agent Signup** — May 28, 2026 — [/blog/auth-md-agent-signup.md](/blog/auth-md-agent-signup.md)
- **Arazzo Goes Cross-Protocol** — May 21, 2026 — [/blog/arazzo-goes-cross-protocol.md](/blog/arazzo-goes-cross-protocol.md)
- **Meet the Zuplo MCP Server** — May 20, 2026 — [/blog/introducing-the-zuplo-mcp-server.md](/blog/introducing-the-zuplo-mcp-server.md)
- **Introducing Agents Analytics** — May 19, 2026 — [/blog/introducing-agents-analytics.md](/blog/introducing-agents-analytics.md)
- **Never Ship an MCP Server Without a Rate Limit** — May 18, 2026 — [/blog/never-ship-mcp-server-without-rate-limit.md](/blog/never-ship-mcp-server-without-rate-limit.md)
- **Rate Limiting and API Monetization Through the Developer Portal** — May 15, 2026 — [/blog/rate-limit-and-monetize-with-dev-portal.md](/blog/rate-limit-and-monetize-with-dev-portal.md)
- **Fire Email Alerts From a Zuplo Policy** — May 14, 2026 — [/blog/sending-email-from-a-zuplo-policy.md](/blog/sending-email-from-a-zuplo-policy.md)
- **Why Rate Limiting by IP Breaks Your API** — May 13, 2026 — [/blog/dont-rate-limit-by-ip.md](/blog/dont-rate-limit-by-ip.md)
- **Rate Limit LLM APIs by Tokens Not Requests** — May 12, 2026 — [/blog/rate-limit-llm-apis-by-tokens-not-requests.md](/blog/rate-limit-llm-apis-by-tokens-not-requests.md)
- **Canvas LMS Breach Forces Mass API Key Rotation** — May 11, 2026 — [/blog/instructure-canvas-breach-api-key-rotation-lessons.md](/blog/instructure-canvas-breach-api-key-rotation-lessons.md)
- **Provision API Keys at First Login** — May 8, 2026 — [/blog/provision-api-keys-at-first-login.md](/blog/provision-api-keys-at-first-login.md)
- **API Key Week Wrap Up** — May 8, 2026 — [/blog/api-key-week-wrap-up.md](/blog/api-key-week-wrap-up.md)
- **Using JWT and API Key Auth on the Same Route** — May 7, 2026 — [/blog/using-jwt-and-api-key-auth-on-the-same-route.md](/blog/using-jwt-and-api-key-auth-on-the-same-route.md)
- **How to Build a Production-Ready Flask REST API in 2026** — May 7, 2026 — [/blog/flask-api-tutorial.md](/blog/flask-api-tutorial.md)
- **Add Self-Serve API Keys to Your Own App** — May 6, 2026 — [/blog/add-self-serve-api-keys-to-your-own-app.md](/blog/add-self-serve-api-keys-to-your-own-app.md)
- **The Missing Manual for API Keys** — May 5, 2026 — [/blog/introducing-apikeys-guide.md](/blog/introducing-apikeys-guide.md)
- **API Key Best Practices for 2026: 9 Rules Top APIs Follow** — May 4, 2026 — [/blog/api-key-best-practices.md](/blog/api-key-best-practices.md)
- **How to Rate Limit an API** — May 1, 2026 — [/blog/how-to-rate-limit-an-api.md](/blog/how-to-rate-limit-an-api.md)
- **Monetize an n8n AI Workflow with Zuplo** — Apr 30, 2026 — [/blog/monetize-an-n8n-ai-workflow-with-zuplo.md](/blog/monetize-an-n8n-ai-workflow-with-zuplo.md)
- **Akamai's 2026 API Security Survey Shows an 87% Incident Rate** — Apr 30, 2026 — [/blog/akamai-2026-api-security-survey-takeaways.md](/blog/akamai-2026-api-security-survey-takeaways.md)
- **Enable Stripe Tax for Your Monetized API** — Apr 29, 2026 — [/blog/stripe-tax-for-your-monetized-api.md](/blog/stripe-tax-for-your-monetized-api.md)
- **Gate API Capabilities by Subscription Plan** — Apr 28, 2026 — [/blog/capability-gating-static-features.md](/blog/capability-gating-static-features.md)
- **How to Rate Limit AI Agents Beyond Request Counts** — Apr 27, 2026 — [/blog/rate-limit-ai-agents-beyond-request-counts.md](/blog/rate-limit-ai-agents-beyond-request-counts.md)
- **Hard Limits, Soft Limits, and Progressive Friction for Monetized APIs** — Apr 24, 2026 — [/blog/progressive-friction-for-monetized-apis.md](/blog/progressive-friction-for-monetized-apis.md)
- **OpenAI Codex Ships 90+ Plugins with MCP Servers Inside** — Apr 22, 2026 — [/blog/openai-codex-mcp-plugins-api-teams.md](/blog/openai-codex-mcp-plugins-api-teams.md)
- **Why Production AI Agent Endpoints Need an API Gateway** — Apr 21, 2026 — [/blog/flowise-rce-ai-agent-endpoints-need-api-gateway.md](/blog/flowise-rce-ai-agent-endpoints-need-api-gateway.md)
- **Managing API Keys for AI Agents: Rotation, Scanning & Scale** — Apr 20, 2026 — [/blog/managing-api-keys-for-ai-agents.md](/blog/managing-api-keys-for-ai-agents.md)
- **How to Write Your First Custom API Gateway Policy in TypeScript** — Apr 17, 2026 — [/blog/write-your-first-custom-api-gateway-policy-in-typescript.md](/blog/write-your-first-custom-api-gateway-policy-in-typescript.md)
- **Custom Enterprise API Pricing with Private Plans** — Apr 16, 2026 — [/blog/custom-enterprise-api-pricing-without-cpq.md](/blog/custom-enterprise-api-pricing-without-cpq.md)
- **Meter Only Successful API Responses, Not Errors** — Apr 15, 2026 — [/blog/stop-paying-for-500s.md](/blog/stop-paying-for-500s.md)
- **6 Stats That Should Change How You Think About API Security** — Apr 14, 2026 — [/blog/q1-2026-api-agent-security-scorecard.md](/blog/q1-2026-api-agent-security-scorecard.md)
- **Build a NestJS API with OpenAPI and Zuplo** — Apr 13, 2026 — [/blog/nestjs-api-tutorial.md](/blog/nestjs-api-tutorial.md)
- **Azure APIM's New Limits Make the Case for Zuplo** — Apr 10, 2026 — [/blog/azure-api-management-new-service-limits-migration-guide.md](/blog/azure-api-management-new-service-limits-migration-guide.md)
- **Stanford Found 1,748 API Keys on the Open Web — Here's How to Stop Being One of Them** — Apr 9, 2026 — [/blog/stanford-keys-on-doormats-api-key-security-lessons.md](/blog/stanford-keys-on-doormats-api-key-security-lessons.md)
- **Apigee Needed a Simplification Tool. Zuplo Did Not.** — Apr 8, 2026 — [/blog/google-open-sources-apigee-feature-templater.md](/blog/google-open-sources-apigee-feature-templater.md)
- **OpenAPI Arazzo & Overlay: Workflows and Spec Management** — Apr 7, 2026 — [/blog/openapi-arazzo-overlay-specifications-guide.md](/blog/openapi-arazzo-overlay-specifications-guide.md)
- **AI Is Eating SaaS: Your Data Is the Product Now** — Apr 6, 2026 — [/blog/ai-is-eating-saas.md](/blog/ai-is-eating-saas.md)
- **Building a Monetized API, Part 4: Polishing the Developer Portal** — Apr 3, 2026 — [/blog/building-a-monetized-api-part-4.md](/blog/building-a-monetized-api-part-4.md)
- **Building a Monetized API, Part 3: How to Monetize an MCP Server** — Apr 2, 2026 — [/blog/monetize-an-mcp-server.md](/blog/monetize-an-mcp-server.md)
- **How to Make AI Coding Agents Understand Your API Gateway** — Apr 2, 2026 — [/blog/ai-coding-agents-understand-api-gateway.md](/blog/ai-coding-agents-understand-api-gateway.md)
- **Building a Monetized API, Part 2: Adding Monetization** — Apr 1, 2026 — [/blog/building-a-monetized-api-part-2.md](/blog/building-a-monetized-api-part-2.md)
- **10 API Monetization Anti-Patterns: What Not To Do** — Apr 1, 2026 — [/blog/api-monetization-anti-patterns.md](/blog/api-monetization-anti-patterns.md)
- **Building a Monetized API, Part 1: Setting Up the Gateway** — Mar 31, 2026 — [/blog/building-a-monetized-api-part-1.md](/blog/building-a-monetized-api-part-1.md)
- **Monetize Your API with Zuplo** — Mar 30, 2026 — [/blog/monetize-your-api-in-10-mins.md](/blog/monetize-your-api-in-10-mins.md)
- **Shadow APIs Outnumber Known APIs 10-to-1 in Financial Services** — Mar 27, 2026 — [/blog/shadow-apis-fintech-api-gateway-governance.md](/blog/shadow-apis-fintech-api-gateway-governance.md)
- **Gartner: 75% of API Gateways Will Integrate MCP by 2026** — Mar 26, 2026 — [/blog/gartner-75-percent-api-gateways-mcp.md](/blog/gartner-75-percent-api-gateways-mcp.md)
- **87% of Organizations Were Hit by API Attacks in 2025 — Akamai SOTI Report** — Mar 26, 2026 — [/blog/apis-number-one-attack-surface-2026-akamai-soti-report.md](/blog/apis-number-one-attack-surface-2026-akamai-soti-report.md)
- **Why MCP Is The Doorway To API-Based Business** — Mar 25, 2026 — [/blog/why-mcp-is-the-doorway-to-api-based-business.md](/blog/why-mcp-is-the-doorway-to-api-based-business.md)
- **How Stripe MPP Lets AI Agents Pay for Your API** — Mar 23, 2026 — [/blog/stripe-mpp-for-agentic-payments.md](/blog/stripe-mpp-for-agentic-payments.md)
- **Build and Secure an Express.js REST API with Zuplo** — Mar 20, 2026 — [/blog/expressjs-api-tutorial.md](/blog/expressjs-api-tutorial.md)
- **APIs Are Now the #1 Exploited Attack Surface** — Mar 19, 2026 — [/blog/wallarm-2026-api-threatstats-api-security.md](/blog/wallarm-2026-api-threatstats-api-security.md)
- **Apigee Edge Is Reaching End of Life — Here's a Better Path Forward** — Mar 19, 2026 — [/blog/apigee-edge-end-of-life-migrate-to-zuplo.md](/blog/apigee-edge-end-of-life-migrate-to-zuplo.md)
- **5 API Monetization Success Stories** — Mar 18, 2026 — [/blog/5-api-monetization-success-stories.md](/blog/5-api-monetization-success-stories.md)
- **How to implement a circuit breaker at the API gateway** — Mar 17, 2026 — [/blog/how-to-implement-circuit-breaker-at-the-api-gateway.md](/blog/how-to-implement-circuit-breaker-at-the-api-gateway.md)
- **WebMCP: How Websites Will Expose Tools to AI Agents** — Mar 13, 2026 — [/blog/what-is-webmcp.md](/blog/what-is-webmcp.md)
- **Why Your API Gateway Should Be TypeScript-Native** — Mar 12, 2026 — [/blog/typescript-number-one-language-api-gateway.md](/blog/typescript-number-one-language-api-gateway.md)
- **Why API Monetization Should Be Flexible** — Mar 11, 2026 — [/blog/why-api-monetization-should-be-flexible.md](/blog/why-api-monetization-should-be-flexible.md)
- **Make Your Lovable App's API Production-Ready with Zuplo** — Mar 10, 2026 — [/blog/add-api-gateway-to-lovable-project.md](/blog/add-api-gateway-to-lovable-project.md)
- **3,000 Google API Keys Just Got a Lot More Dangerous — Lessons for API Key Security** — Mar 8, 2026 — [/blog/google-api-key-gemini-vulnerability-lessons.md](/blog/google-api-key-gemini-vulnerability-lessons.md)
- **Why API Gateways Should Handle API Monetization Natively** — Mar 5, 2026 — [/blog/why-api-gateways-should-handle-monetization.md](/blog/why-api-gateways-should-handle-monetization.md)
- **API Monetization 101: Your Guide to Charging for Your API** — Feb 27, 2026 — [/blog/api-monetization-guide-to-charging-for-your-api.md](/blog/api-monetization-guide-to-charging-for-your-api.md)
- **Use AI to Plan Your API Pricing Strategy** — Feb 26, 2026 — [/blog/use-ai-to-plan-api-pricing.md](/blog/use-ai-to-plan-api-pricing.md)
- **How to Control AI Costs with an API Gateway** — Feb 26, 2026 — [/blog/control-ai-costs-api-gateway.md](/blog/control-ai-costs-api-gateway.md)
- **API Management for Startups: What to Look For (and What to Skip)** — Feb 26, 2026 — [/blog/api-management-for-startups.md](/blog/api-management-for-startups.md)
- **8 Types of API Pricing Models** — Feb 26, 2026 — [/blog/8-types-of-api-pricing-models.md](/blog/8-types-of-api-pricing-models.md)
- **API Pricing Plans, Phases, and Rate Cards Explained** — Feb 25, 2026 — [/blog/api-monetization-pricing-plans-phases.md](/blog/api-monetization-pricing-plans-phases.md)
- **How API Metering, Features and Quota Enforcement Work** — Feb 24, 2026 — [/blog/api-monetization-metering-and-enforcement.md](/blog/api-monetization-metering-and-enforcement.md)
- **API Monetization Matters More Than Ever in the AI Age** — Feb 24, 2026 — [/blog/api-monetization-matters-more-than-ever.md](/blog/api-monetization-matters-more-than-ever.md)
- **Introducing Zuplo API Monetization** — Feb 23, 2026 — [/blog/zuplo-api-monetization.md](/blog/zuplo-api-monetization.md)
- **How to Manage Your API Gateway with GitOps** — Feb 18, 2026 — [/blog/manage-your-apis-with-gitops.md](/blog/manage-your-apis-with-gitops.md)
- **How to Implement Geolocation Routing on Your API** — Feb 11, 2026 — [/blog/geolocation-routing-for-apis.md](/blog/geolocation-routing-for-apis.md)
- **What Is Canary Routing and How Do You Implement It?** — Feb 4, 2026 — [/blog/what-is-canary-routing.md](/blog/what-is-canary-routing.md)
- **How to Route API Requests to Different Backends** — Feb 2, 2026 — [/blog/route-api-requests-to-different-backends.md](/blog/route-api-requests-to-different-backends.md)
- **API Monetization in 2026: The Ultimate Guide to Selling Your Data** — Jan 21, 2026 — [/blog/api-monetization-ultimate-guide.md](/blog/api-monetization-ultimate-guide.md)
- **Semantic Caching: What it is & Why You Need it** — Jan 15, 2026 — [/blog/what-is-semantic-caching.md](/blog/what-is-semantic-caching.md)
- **MCP or CLI? What Actually Makes Sense for Developer Tools** — Jan 14, 2026 — [/blog/cli-or-mcp.md](/blog/cli-or-mcp.md)
- **The Zuplo State of MCP Report** — Jan 13, 2026 — [/blog/mcp-survey.md](/blog/mcp-survey.md)
- **Deep Dive: Empowering MCP Apps with Zuplo MCP Server Handler** — Jan 8, 2026 — [/blog/mcp-openai-apps-sdk.md](/blog/mcp-openai-apps-sdk.md)
- **Securing your API with API Keys & JSON Web Tokens (JWT)** — Jan 7, 2026 — [/blog/authentication-with-both-jwt-and-api-keys.md](/blog/authentication-with-both-jwt-and-api-keys.md)
- **MCP Week Roundup** — Dec 8, 2025 — [/blog/mcp-week.md](/blog/mcp-week.md)
- **Build Apps for ChatGPT with OpenAI Apps SDK and Zuplo** — Dec 5, 2025 — [/blog/openai-apps-sdk-zuplo.md](/blog/openai-apps-sdk-zuplo.md)
- **Zuplo MCP Gateway: Enterprise Governance for MCP at Scale** — Dec 4, 2025 — [/blog/zuplo-mcp-gateway.md](/blog/zuplo-mcp-gateway.md)
- **Turn Any GraphQL API into an MCP Server** — Dec 3, 2025 — [/blog/mcp-server-graphql.md](/blog/mcp-server-graphql.md)
- **Using MCP Custom Tools to Build Multi-Step AI Workflows** — Dec 2, 2025 — [/blog/mcp-server-custom-tools.md](/blog/mcp-server-custom-tools.md)
- **Add Reusable MCP Tool Workflows to AI with MCP Prompts** — Dec 1, 2025 — [/blog/mcp-server-prompts.md](/blog/mcp-server-prompts.md)
- **One Year of MCP** — Nov 24, 2025 — [/blog/one-year-of-mcp.md](/blog/one-year-of-mcp.md)
- **Introducing Galileo Tracing for Zuplo AI Gateway** — Nov 20, 2025 — [/blog/galileo-ai-observability.md](/blog/galileo-ai-observability.md)
- **Autonomous API & MCP Server Payments with x402** — Nov 11, 2025 — [/blog/mcp-api-payments-with-x402.md](/blog/mcp-api-payments-with-x402.md)
- **TypeScript Type Safety: From Runtime Errors to Compile-Time Guarantees** — Nov 4, 2025 — [/blog/typescript.md](/blog/typescript.md)
- **What Are MCP Resources? Model Context Protocol Explained** — Oct 17, 2025 — [/blog/mcp-resources.md](/blog/mcp-resources.md)
- **AI Week Roundup** — Oct 6, 2025 — [/blog/ai-week.md](/blog/ai-week.md)
- **AI Week: What Autonomous Agents Actually Need from Your APIs** — Oct 3, 2025 — [/blog/what-autonomous-agents-actually-need-from-your-apis.md](/blog/what-autonomous-agents-actually-need-from-your-apis.md)
- **How to Use Block's goose AI Agent with Zuplo AI Gateway** — Oct 3, 2025 — [/blog/ai-gateway-with-goose.md](/blog/ai-gateway-with-goose.md)
- **AI Week: Your AI Models Aren't Learning From Production Data** — Oct 2, 2025 — [/blog/comet-ml-opik.md](/blog/comet-ml-opik.md)
- **AI Week: Using Claude Code with Zuplo AI Gateway** — Oct 2, 2025 — [/blog/ai-gateway-with-claude-code.md](/blog/ai-gateway-with-claude-code.md)
- **AI Week: Is Spec-Driven Development the Future of AI Coding?** — Oct 1, 2025 — [/blog/spec-driven-ai-development.md](/blog/spec-driven-ai-development.md)
- **AI Week: Using AI Gateway with the LangChain SDK** — Oct 1, 2025 — [/blog/ai-gateway-with-langchain.md](/blog/ai-gateway-with-langchain.md)
- **AI Week: Introducing the Zuplo AI Gateway** — Sep 29, 2025 — [/blog/zuplo-ai-gateway.md](/blog/zuplo-ai-gateway.md)
- **AccuWeather Launches New Developer Portal on Zuplo** — Sep 25, 2025 — [/blog/accuweather-launches-new-developer-portal.md](/blog/accuweather-launches-new-developer-portal.md)
- **Create Reusable Prompt Templates with Zuplo MCP Servers** — Sep 1, 2025 — [/blog/mcp-prompt-templates.md](/blog/mcp-prompt-templates.md)
- **Protecting MCP Servers from Prompt Injection Attacks** — Aug 25, 2025 — [/blog/protect-mcp-against-prompt-injection.md](/blog/protect-mcp-against-prompt-injection.md)
- **Add Remote MCP Server with OAuth to Your Existing API** — Aug 6, 2025 — [/blog/building-secure-mcp-servers-with-oauth.md](/blog/building-secure-mcp-servers-with-oauth.md)
- **Introducing New Zuplo Developer Portals** — Jul 1, 2025 — [/blog/new-zuplo-developer-portal.md](/blog/new-zuplo-developer-portal.md)
- **MCP Week Roundup** — Jun 16, 2025 — [/blog/mcp-week-roundup.md](/blog/mcp-week-roundup.md)
- **AI Agents Are Coming For Your APIs** — Jun 13, 2025 — [/blog/ai-agents-are-coming-for-your-apis.md](/blog/ai-agents-are-coming-for-your-apis.md)
- **Two Essential Security Policies for AI & MCP** — Jun 12, 2025 — [/blog/essential-security-policies-for-mcp-and-ai.md](/blog/essential-security-policies-for-mcp-and-ai.md)
- **The AI Agent Reality Gap** — Jun 11, 2025 — [/blog/ai-agent-reality-gap.md](/blog/ai-agent-reality-gap.md)
- **Introducing: Remote MCP Servers for your APIs** — Jun 10, 2025 — [/blog/introducing-remote-mcp-servers.md](/blog/introducing-remote-mcp-servers.md)
- **Why MCP Won't Kill APIs (And What It Will Do Instead)** — Jun 9, 2025 — [/blog/why-mcp-wont-kill-apis.md](/blog/why-mcp-wont-kill-apis.md)
- **Identify AI Agents with HTTP Message Signatures** — Jun 5, 2025 — [/blog/identify-ai-agents-with-http-message-signatures.md](/blog/identify-ai-agents-with-http-message-signatures.md)
- **Documenting Your Rails API Shouldn’t Be Painful (Rails + OasRails)** — May 15, 2025 — [/blog/documenting-ruby-on-rails-api.md](/blog/documenting-ruby-on-rails-api.md)
- **Providing Secure Access to Databases for LLMs and AI-Agents** — Apr 30, 2025 — [/blog/secure-database-access-for-llms-and-agents.md](/blog/secure-database-access-for-llms-and-agents.md)
- **Typesafe APIs Made Simple with oRPC** — Apr 22, 2025 — [/blog/typesafe-apis-made-simple-with-orpc.md](/blog/typesafe-apis-made-simple-with-orpc.md)
- **APIs, Units, and Quantities: Building Unit-Agnostic Integrations** — Apr 22, 2025 — [/blog/building-unit-agnostic-apis.md](/blog/building-unit-agnostic-apis.md)
- **How to Build an API with Go and Huma** — Apr 20, 2025 — [/blog/how-to-build-an-api-with-go-and-huma.md](/blog/how-to-build-an-api-with-go-and-huma.md)
- **.Net API Tutorial: Build, Document, and Secure a REST API** — Apr 20, 2025 — [/blog/building-and-securing-dotnet-rest-api-tutorial.md](/blog/building-and-securing-dotnet-rest-api-tutorial.md)
- **Building High Performance Ruby REST APIs with Rage** — Apr 13, 2025 — [/blog/ruby-rage-rest-api-tutorial.md](/blog/ruby-rage-rest-api-tutorial.md)
- **API-First Development in Scala** — Apr 11, 2025 — [/blog/api-first-development-in-scala.md](/blog/api-first-development-in-scala.md)
- **gRPC API Gateway: Bridging the Gap Between REST and gRPC** — Apr 9, 2025 — [/blog/grpc-api-gateway.md](/blog/grpc-api-gateway.md)
- **Spring Boot API Tutorial: Build, Document, and Secure a REST API** — Apr 7, 2025 — [/blog/java-spring-boot-rest-api-tutorial.md](/blog/java-spring-boot-rest-api-tutorial.md)
- **API Workflows and How to Define Them** — Mar 31, 2025 — [/blog/api-workflows-and-arazzo.md](/blog/api-workflows-and-arazzo.md)
- **Automated Documentation for APIs** — Mar 29, 2025 — [/blog/automated-documentation-for-apis.md](/blog/automated-documentation-for-apis.md)
- **Why Your API Needs to Run at the Edge** — Mar 24, 2025 — [/blog/apis-at-the-edge.md](/blog/apis-at-the-edge.md)
- **A Holistic View on APIs as an Ecosystem** — Mar 4, 2025 — [/blog/holistic-view-of-apis.md](/blog/holistic-view-of-apis.md)
- **Laravel API Tutorial: Build, Document, and Secure a REST API** — Feb 3, 2025 — [/blog/laravel-api-tutorial.md](/blog/laravel-api-tutorial.md)
- **Create a Server Driven CLI from your REST API** — Feb 2, 2025 — [/blog/generate-cli-from-api-with-climate.md](/blog/generate-cli-from-api-with-climate.md)
- **FastAPI Tutorial: Build, Deploy, and Secure an API for Free** — Jan 26, 2025 — [/blog/fastapi-tutorial.md](/blog/fastapi-tutorial.md)
- **How to build an API with Ruby and Sinatra** — Jan 7, 2025 — [/blog/how-to-build-an-api-with-ruby-and-sinatra.md](/blog/how-to-build-an-api-with-ruby-and-sinatra.md)
- **Tutorial: How to Extract JWT Data** — Dec 30, 2024 — [/blog/extracting-jwt-data-tutorial.md](/blog/extracting-jwt-data-tutorial.md)
- **Introducing Dedicated Managed and Fully Self-Hosted Zuplo** — Nov 12, 2024 — [/blog/managed-self-hosted.md](/blog/managed-self-hosted.md)
- **Tutorial: How to Combine API Calls** — Oct 8, 2024 — [/blog/combine-api-calls-tutorial.md](/blog/combine-api-calls-tutorial.md)
- **Zudoku: Open-Source API Docs Framework** — Sep 5, 2024 — [/blog/zudoku-open-source-api-documentation-framework.md](/blog/zudoku-open-source-api-documentation-framework.md)
- **Improve OpenAPI specs with Rate My OpenAPI** — Aug 13, 2024 — [/blog/improve-open-api-specifications.md](/blog/improve-open-api-specifications.md)
- **Tutorial: How to Quota an API** — Jul 26, 2024 — [/blog/api-quota-tutorial.md](/blog/api-quota-tutorial.md)
- **The API Gateway Powering the AI Revolution** — Jul 26, 2024 — [/blog/api-gateway-powering-ai.md](/blog/api-gateway-powering-ai.md)
- **JSON Schema Validation: Tools & Best Practices** — Jul 19, 2024 — [/blog/verify-json-schema.md](/blog/verify-json-schema.md)
- **Adding AI Magic To Your Firestore API** — Jul 12, 2024 — [/blog/adding-ai-to-firestore-api.md](/blog/adding-ai-to-firestore-api.md)
- **Adding Monetization Capabilities to Your Firestore API** — Jul 11, 2024 — [/blog/adding-monetization-capabilities-to-firestore.md](/blog/adding-monetization-capabilities-to-firestore.md)
- **Adding Developer Portal Access and Request Validation to a Firestore API** — Jul 10, 2024 — [/blog/adding-dev-portal-and-request-validation-firebase.md](/blog/adding-dev-portal-and-request-validation-firebase.md)
- **Adding API Key Authentication to a Firestore API** — Jul 9, 2024 — [/blog/zuplo-plus-firebase-adding-api-key-auth.md](/blog/zuplo-plus-firebase-adding-api-key-auth.md)
- **Creating a Simple CRUD API with Zuplo and Firestore** — Jul 8, 2024 — [/blog/zuplo-plus-firebase-creating-a-simple-crud-api.md](/blog/zuplo-plus-firebase-creating-a-simple-crud-api.md)
- **Elevate Your API Security with Fine-Grained Authorization from Zuplo + OktaFGA** — Jul 5, 2024 — [/blog/elevate-your-api-security.md](/blog/elevate-your-api-security.md)
- **Master Your Code with Zuplo’s Debugging Tools** — Jul 2, 2024 — [/blog/master-your-code-with-zuplos-debugging-tools.md](/blog/master-your-code-with-zuplos-debugging-tools.md)
- **Why Zuplo Has the Best Damn Rate Limiter on the Planet** — Jun 25, 2024 — [/blog/why-zuplo-has-the-best-damn-rate-limiter-on-the-planet.md](/blog/why-zuplo-has-the-best-damn-rate-limiter-on-the-planet.md)
- **Enhance Your API Monitoring with Zuplo’s OpenTelemetry Plugin** — May 20, 2024 — [/blog/enhance-your-api-monitoring-with-zuplo-opentelemetry-plugin.md](/blog/enhance-your-api-monitoring-with-zuplo-opentelemetry-plugin.md)
- **April's Product Release** — May 16, 2024 — [/blog/april-product-release.md](/blog/april-product-release.md)
- **Building a Stripe-like Search Language from Scratch** — Apr 27, 2024 — [/blog/building-a-stripe-like-search-language-parser.md](/blog/building-a-stripe-like-search-language-parser.md)
- **Integrating Clerk With Zuplo For Seamless API Authentication** — Apr 24, 2024 — [/blog/integrating-clerk-with-zuplo-for-seamless-api-authentication.md](/blog/integrating-clerk-with-zuplo-for-seamless-api-authentication.md)
- **6 Tips on How to Market Your API** — Apr 15, 2024 — [/blog/six-tips-on-how-to-market-your-api.md](/blog/six-tips-on-how-to-market-your-api.md)
- **Rebuttal: API keys can do everything** — Mar 7, 2024 — [/blog/rebuttal-api-keys-can-do-everything.md](/blog/rebuttal-api-keys-can-do-everything.md)
- **Announcing Zuplo's API Monetization** — Mar 5, 2024 — [/blog/api-monetization-release.md](/blog/api-monetization-release.md)
- **How to Make A Rickdiculous Developer Experience For Your API** — Feb 13, 2024 — [/blog/rickdiculous-dev-experience-for-apis.md](/blog/rickdiculous-dev-experience-for-apis.md)
- **Increase revenue by improving your API quality** — Feb 2, 2024 — [/blog/increase-revenue-by-improving-api-quality.md](/blog/increase-revenue-by-improving-api-quality.md)
- **How To Make API Governance Easier** — Jan 30, 2024 — [/blog/how-to-make-api-governance-easier.md](/blog/how-to-make-api-governance-easier.md)
- **RateMyOpenAPI: now with AI suggestions for your OpenAPI!** — Jan 25, 2024 — [/blog/ratemyopenapi-ai-release.md](/blog/ratemyopenapi-ai-release.md)
- **Your API business needs to operate on the worldwide edge** — Jan 23, 2024 — [/blog/api-business-edge.md](/blog/api-business-edge.md)
- **What's new on Zuplo?** — Jan 17, 2024 — [/blog/zuplo-newsletter-updates.md](/blog/zuplo-newsletter-updates.md)
- **New Year, Better Pricing** — Jan 11, 2024 — [/blog/new-year-better-pricing.md](/blog/new-year-better-pricing.md)
- **How to Create a Business Model Around an API** — Jan 10, 2024 — [/blog/how-to-create-business-model-around-api.md](/blog/how-to-create-business-model-around-api.md)
- **Monetizing APIs: a step easier with Moesif** — Dec 20, 2023 — [/blog/monetizing-apis-with-moesif.md](/blog/monetizing-apis-with-moesif.md)
- **How Imburse Payments Ships High-Quality APIs Faster** — Nov 29, 2023 — [/blog/why-imburse-payments-chose-zuplo.md](/blog/why-imburse-payments-chose-zuplo.md)
- **Bringing Feedback Loops to API Development** — Nov 15, 2023 — [/blog/tightening-the-feedback-loop.md](/blog/tightening-the-feedback-loop.md)
- **Time for GitOps to come to APIs** — Nov 9, 2023 — [/blog/time-for-gitops-to-come-to-apis.md](/blog/time-for-gitops-to-come-to-apis.md)
- **Zuplo's $9M Raise** — Nov 8, 2023 — [/blog/announcing-9m-raise.md](/blog/announcing-9m-raise.md)
- **Optimize Time-To-First-Call with API key auth** — Oct 23, 2023 — [/blog/optimize-ttfc-with-api-keys.md](/blog/optimize-ttfc-with-api-keys.md)
- **Announcing RateMyOpenAPI!** — Oct 17, 2023 — [/blog/announcing-rate-my-openapi.md](/blog/announcing-rate-my-openapi.md)
- **New API Playground in the Zuplo Developer Portal** — Oct 12, 2023 — [/blog/new-api-playground.md](/blog/new-api-playground.md)
- **Rate Limiting OpenAI Requests with an API Gateway** — Oct 11, 2023 — [/blog/rate-limiting-openai-requests.md](/blog/rate-limiting-openai-requests.md)
- **Announcing Local Development Support!** — Oct 5, 2023 — [/blog/local-dev-support.md](/blog/local-dev-support.md)
- **Caching OpenAI API responses** — Oct 3, 2023 — [/blog/cachin-your-ai-responses.md](/blog/cachin-your-ai-responses.md)
- **Announcing Supabase Auth for your API Developer Portal! - Supaweek Day 5** — Sep 29, 2023 — [/blog/announcing-supabase-auth-for-dev-portal.md](/blog/announcing-supabase-auth-for-dev-portal.md)
- **Monetizing your Supabase API! - Supaweek Day 4** — Sep 28, 2023 — [/blog/monetizing-apis.md](/blog/monetizing-apis.md)
- **Documentation for your Supabase API! - Supaweek Day 3** — Sep 27, 2023 — [/blog/documentation-for-your-supabase-api.md](/blog/documentation-for-your-supabase-api.md)
- **User-level auth in your Supabase API - Supaweek Day 2** — Sep 26, 2023 — [/blog/handling-user-requests-dynamically.md](/blog/handling-user-requests-dynamically.md)
- **Using Supabase and OpenAI to create an API - Supaweek Day 1** — Sep 25, 2023 — [/blog/using-openai-and-supabase-db-to-create-an-api.md](/blog/using-openai-and-supabase-db-to-create-an-api.md)
- **Using PropelAuth to secure your API at the Gateway** — Sep 14, 2023 — [/blog/propel-auth-zuplo-jwt.md](/blog/propel-auth-zuplo-jwt.md)
- **Backend for Frontend (BFF) Authentication** — Sep 11, 2023 — [/blog/backend-for-frontend-authentication.md](/blog/backend-for-frontend-authentication.md)
- **Day 5 - Announcing v2 of react-api-key-manager** — Aug 11, 2023 — [/blog/v2-of-api-key-manager-already.md](/blog/v2-of-api-key-manager-already.md)
- **Day 4 - Eating our own dogfood 🐶🥣** — Aug 10, 2023 — [/blog/eating-our-own-dogfood.md](/blog/eating-our-own-dogfood.md)
- **Day 3 - Analytics for Developers Using your API** — Aug 9, 2023 — [/blog/analytics-for-developers-using-your-api.md](/blog/analytics-for-developers-using-your-api.md)
- **Day 2 - Announcing our Open-Source React Component** — Aug 8, 2023 — [/blog/open-source-release.md](/blog/open-source-release.md)
- **Day 1 - Introducing the ZAPI Management API** — Aug 7, 2023 — [/blog/welcome-to-api-key-week.md](/blog/welcome-to-api-key-week.md)
- **Introducing - The Posters of Facebook** — Jul 24, 2023 — [/blog/introducing-the-posters-of-facebook.md](/blog/introducing-the-posters-of-facebook.md)
- **Zero Downtime migration of API Authentication** — Jul 16, 2023 — [/blog/zero-downtime-api-auth-migration.md](/blog/zero-downtime-api-auth-migration.md)
- **Why Imburse Payments Chose Zuplo Over Azure API Management** — Jul 11, 2023 — [/blog/imburse-choose-zuplo-over-azure-api-management.md](/blog/imburse-choose-zuplo-over-azure-api-management.md)
- **A better deal for startups and small businesses** — Jun 28, 2023 — [/blog/better-pricing-for-small-businesses.md](/blog/better-pricing-for-small-businesses.md)
- **Generate Firebase JWT tokens in seconds** — Jun 27, 2023 — [/blog/firebase-jwt-generator.md](/blog/firebase-jwt-generator.md)
- **Use Firestore Data as a User Authenticated API** — Jun 23, 2023 — [/blog/use-firestore-data-as-a-user-authenticated-api.md](/blog/use-firestore-data-as-a-user-authenticated-api.md)
- **Turn Firebase Firestore Data into a simple REST API** — Jun 12, 2023 — [/blog/turn-firebase-firestore-data-into-a-public-private-api.md](/blog/turn-firebase-firestore-data-into-a-public-private-api.md)
- **Announcing rapid API mocking via OpenAPI** — May 18, 2023 — [/blog/rapid-api-mocking-using-openapi.md](/blog/rapid-api-mocking-using-openapi.md)
- **How Common Paper shipped their API fast with Zuplo** — May 16, 2023 — [/blog/how-common-paper-shipped-api-fast-with-zuplo.md](/blog/how-common-paper-shipped-api-fast-with-zuplo.md)
- **GraphQL vs REST: Choosing the Right API Design for Your Audience** — May 10, 2023 — [/blog/graphql-vs-rest-the-right-api-design-for-your-audience.md](/blog/graphql-vs-rest-the-right-api-design-for-your-audience.md)
- **Shipping a ChatGPT Plugin in record time (detailed walkthrough)** — May 5, 2023 — [/blog/shipping-a-chat-gpt-plugin-in-record-time.md](/blog/shipping-a-chat-gpt-plugin-in-record-time.md)
- **The subtle art of API Rate-Limiting** — May 2, 2023 — [/blog/subtle-art-of-rate-limiting-an-api.md](/blog/subtle-art-of-rate-limiting-an-api.md)
- **Useful resources for API developers** — Apr 24, 2023 — [/blog/useful-resources-for-api-builders.md](/blog/useful-resources-for-api-builders.md)
- **Rewiring America deploys Zuplo to accelerate their API program** — Apr 21, 2023 — [/blog/rewiring-america-accelerates-api-program-with-zuplo.md](/blog/rewiring-america-accelerates-api-program-with-zuplo.md)
- **Bringing Types to APIs with TypeSpec** — Apr 19, 2023 — [/blog/bringing-types-to-apis-with-typespec.md](/blog/bringing-types-to-apis-with-typespec.md)
- **The Power of Problem Details for HTTP APIs** — Apr 11, 2023 — [/blog/the-power-of-problem-details.md](/blog/the-power-of-problem-details.md)
- **Using jose to validate a Firebase JWT token** — Apr 5, 2023 — [/blog/using-jose-to-validate-a-firebase-jwt.md](/blog/using-jose-to-validate-a-firebase-jwt.md)
- **useEffect is trying to kill you** — Apr 3, 2023 — [/blog/useeffect-is-trying-to-kill-you.md](/blog/useeffect-is-trying-to-kill-you.md)
- **Fastest way to ship a ChatGPT plugin** — Mar 26, 2023 — [/blog/fastest-way-to-build-chat-gpt-plugin.md](/blog/fastest-way-to-build-chat-gpt-plugin.md)
- **Mirroring Docker Images with Github Actions** — Mar 15, 2023 — [/blog/mirroring-docker-images-with-github-actions.md](/blog/mirroring-docker-images-with-github-actions.md)
- **Zuplo now natively supports OpenAPI** — Mar 6, 2023 — [/blog/announcing-open-api-native-support.md](/blog/announcing-open-api-native-support.md)
- **Protect your OpenAI API Keys** — Feb 27, 2023 — [/blog/protect-open-ai-api-keys.md](/blog/protect-open-ai-api-keys.md)
- **Smart Routing for Microservices (or isolated customer backends)** — Jan 29, 2023 — [/blog/smart-routing-for-microservices.md](/blog/smart-routing-for-microservices.md)
- **Per-User Rate Limiting for Supabase APIs with JWT Auth** — Jan 9, 2023 — [/blog/per-user-rate-limit-for-supabase.md](/blog/per-user-rate-limit-for-supabase.md)
- **Simple Query Parameter Validator using Custom Policies** — Jan 6, 2023 — [/blog/a-simple-query-param-validator.md](/blog/a-simple-query-param-validator.md)
- **Auth Helper for Supabase JWT tokens** — Jan 5, 2023 — [/blog/supabase-jwt-auth-helper.md](/blog/supabase-jwt-auth-helper.md)
- **Announcing Free Plan of Zuplo's Serverless API Gateway** — Dec 6, 2022 — [/blog/announcing-zuplo-free-plan-beta.md](/blog/announcing-zuplo-free-plan-beta.md)
- **Supa-dynamic rate-limiting based on data (using supabase)** — Dec 5, 2022 — [/blog/supa-dynamic-rate-limiting-based-on-data.md](/blog/supa-dynamic-rate-limiting-based-on-data.md)
- **API Key Authentication Best Practices** — Dec 1, 2022 — [/blog/api-key-authentication.md](/blog/api-key-authentication.md)
- **Shipping a public API backed by Supabase** — Nov 18, 2022 — [/blog/shipping-a-public-api-backed-by-supabase.md](/blog/shipping-a-public-api-backed-by-supabase.md)
- **API Authentication using Supabase JWT tokens** — Nov 15, 2022 — [/blog/api-authentication-with-supabase-jwt.md](/blog/api-authentication-with-supabase-jwt.md)
- **Using Cloudflare Workers to Optimize Auth0 Universal Login** — Oct 19, 2022 — [/blog/using-cloudflare-workers-to-fix-auth0-universal-login.md](/blog/using-cloudflare-workers-to-fix-auth0-universal-login.md)
- **Introducing API Key Leak Prevention** — Jun 30, 2022 — [/blog/api-key-leak-prevention-announcement.md](/blog/api-key-leak-prevention-announcement.md)
- **What the GitHub API Gets Wrong** — Jun 1, 2022 — [/blog/what-the-github-api-gets-wrong.md](/blog/what-the-github-api-gets-wrong.md)
- **How to get clients to move off the old version of your API** — May 25, 2022 — [/blog/how-to-get-clients-to-move-off-old-version-of-api.md](/blog/how-to-get-clients-to-move-off-old-version-of-api.md)
- **How to version an API** — May 17, 2022 — [/blog/how-to-version-an-api.md](/blog/how-to-version-an-api.md)
- **The three pillars of an API program** — May 11, 2022 — [/blog/the-three-pillars-of-an-api-program.md](/blog/the-three-pillars-of-an-api-program.md)
- **Introducing API Keys as a service** — May 5, 2022 — [/blog/introducing-api-keys-as-a-service.md](/blog/introducing-api-keys-as-a-service.md)
- **Wait, you're not using API keys?** — May 3, 2022 — [/blog/you-should-be-using-api-keys.md](/blog/you-should-be-using-api-keys.md)
- **Running GitHub Actions After Cloudflare Pages Deploy** — Apr 28, 2022 — [/blog/github-actions-after-cloudflare-pages-deploy.md](/blog/github-actions-after-cloudflare-pages-deploy.md)
- **Dynamic API Rate Limiting - You're a while loop away from DDOS** — Apr 28, 2022 — [/blog/dynamic-rate-limiting.md](/blog/dynamic-rate-limiting.md)
- **JWT vs API Key Auth for Machine to Machine APIs** — Apr 25, 2022 — [/blog/jwt-vs-api-key-authentication.md](/blog/jwt-vs-api-key-authentication.md)
- **The twelve days of Zuplo** — Apr 11, 2022 — [/blog/the-twelve-days-of-zuplo.md](/blog/the-twelve-days-of-zuplo.md)
- **A better AWS API Gateway?** — Mar 30, 2022 — [/blog/a-better-aws-api-gateway.md](/blog/a-better-aws-api-gateway.md)
- **Zuplo Portal Tour: Logging, Analytics, and Crazy fast deployments** — Mar 29, 2022 — [/blog/tour-of-the-portal.md](/blog/tour-of-the-portal.md)
- **The JsFiddle of APIs?** — Mar 28, 2022 — [/blog/the-jsfiddle-of-apis.md](/blog/the-jsfiddle-of-apis.md)
- **Web Form to AirTable** — Mar 25, 2022 — [/blog/web-form-to-airtable.md](/blog/web-form-to-airtable.md)
- **An API gateway over SaaS?** — Mar 24, 2022 — [/blog/an-api-gateway-over-saas.md](/blog/an-api-gateway-over-saas.md)
- **Custom policies in code, archiving requests to S3 for replay later** — Mar 22, 2022 — [/blog/custom-policies-in-code-archiving-requests-to-s3.md](/blog/custom-policies-in-code-archiving-requests-to-s3.md)
- **Basic Authentication and Environment Variables** — Mar 21, 2022 — [/blog/basic-authentication-and-environment-variables.md](/blog/basic-authentication-and-environment-variables.md)
- **Incoming body validation with JSON Schema** — Mar 18, 2022 — [/blog/incoming-body-validation-with-json-schema.md](/blog/incoming-body-validation-with-json-schema.md)
- **Smart API routing by Auth0 JWT Contents** — Mar 17, 2022 — [/blog/smart-api-routing-by-auth0-jwt-contents.md](/blog/smart-api-routing-by-auth0-jwt-contents.md)
- **JWT Authentication with Auth0** — Mar 16, 2022 — [/blog/jwt-authentication-with-auth0.md](/blog/jwt-authentication-with-auth0.md)
- **Programmable to the max - making an API with Zuplo** — Mar 15, 2022 — [/blog/programmable-to-the-max.md](/blog/programmable-to-the-max.md)
- **How to proxy an API, add rate limiting, and go LIVE** — Mar 14, 2022 — [/blog/proxying-an-api-making-it-prettier-go-live.md](/blog/proxying-an-api-making-it-prettier-go-live.md)
- **"The script will never generate a response" on CloudFlare Workers** — Mar 4, 2022 — [/blog/the-script-will-never-generate-a-response.md](/blog/the-script-will-never-generate-a-response.md)
- **A New Hope for API Management** — Sep 1, 2021 — [/blog/a-new-hope-for-api-management.md](/blog/a-new-hope-for-api-management.md)

## Archive by year

| Year | Posts | Range                       |
| ---- | ----- | --------------------------- |
| 2026 | 109   | Jan 7, 2026 – Jul 22, 2026  |
| 2025 | 49    | Jan 7, 2025 – Dec 8, 2025   |
| 2024 | 31    | Jan 10, 2024 – Dec 30, 2024 |
| 2023 | 49    | Jan 5, 2023 – Dec 20, 2023  |
| 2022 | 30    | Mar 4, 2022 – Dec 6, 2022   |
| 2021 | 1     | Sep 1, 2021                 |

Recurring themes across the archive: MCP servers and MCP gateways, AI/agent
infrastructure and governance, API key management, rate limiting strategies,
authentication (JWT, OAuth, API keys), API monetization, and Zuplo product
changelog-style deep dives.

## Next steps

- Browse the full, searchable archive at [/blog](/blog)
- Read the docs at [zuplo.com/docs](https://zuplo.com/docs)
- Start a free account or talk to sales via the main site navigation