Modern Kafka deployments struggle with a familiar tension. You want fine-grained access control per client, per team, and even per request. However, traditional ACLs force you into static, cluster-level configurations that are brittle, hard to scale, and painful to maintain. Administrators are…
[](/blog/engineering/dynamic-kafka-acls-identity-aware-policies)
At TDX earlier this month, Salesforce announced Headless 360: every capability in the platform now exposed as an API, MCP tool, or CLI command. Co-founder Parker Harris put the thesis bluntly last month: "Why should you ever log into Salesforce again?" That isn't a marketing question. It's an…
[](/blog/enterprise/salesforce-went-headless-the-world-must-follow)
Scaling LLM and agentic AI adoption from pilot programs to enterprise-wide deployments is a massive logistical rollout. As AI and agentic usage grow, so does a nagging question for leadership: Are agents using the right tools to get the job done? While raw infrastructure metrics might tell you if a…
[](/blog/product-releases/kong-ai-governance-metrics-a2a-mcp)
Whether you're drawn to Kong Insomnia's native OpenAPI support, its Git-based sync workflow, or its lightweight interface, migrating from Postman doesn't have to be a weekend project. Insomnia natively understands Postman's export format and can bring over your collections, environments, folder…
[](/blog/engineering/migrating-collections-and-requests-from-postman-to-insomnia)
Digital agreements are at the heart of many critical business processes. As companies modernize their technology stacks and adopt API-driven architectures, integrating agreement workflows directly into applications has become increasingly important. By combining the capabilities of Kong Konnect…
[](/blog/engineering/automating-agreement-workflows-kong-konnect-and-docusign-for-developers)
The best platform teams don't write glue code — they configure great infrastructure. But as API platform architectures get more complex, policy logic does not always fit into a one-size-fits-all model. Not only that, but security toil compounds with every new service, credential, and cloud provider…
[](/blog/product-releases/kong-gateway-3-14)
Modern API architectures are no longer linear. A single request can traverse multiple layers of authentication, transformation, enrichment, and observability. As these flows grow more dynamic, the need for fine-grained control over when plugins execute becomes critical. For years, the standard…
[](/blog/engineering/conditional-policy-execution)
OAuth 2.0 Token Exchange fundamentally alters how services establish trust. And the API gateway is the ideal location to enforce this new model. Modern applications don’t run as a single monolithic. They are composed of services — frontend APIs, backend microservices, third-party integrations —…
[](/blog/engineering/token-exchange-at-the-gateway)
Enterprise security teams have clear requirements: no static credentials, no exceptions. Every service-to-service connection, whether it's Kong talking to databases, caches, or vaults, should authenticate using the same IAM-based identity model that governs the rest of their cloud infrastructure.…
[](/blog/engineering/cloud-native-authentication)
The shift from single-model AI features to multi-agent pipelines is no longer a future concern — it's running in production today. MCP has become the de facto protocol for tool-calling, agent-to-agent (A2A) communication patterns are proliferating, and enterprise teams are wiring together complex…
[](/blog/product-releases/kong-ai-gateway-3-14)
When enterprises started experimenting with LLMs, the governance challenge — while still difficult — was relatively contained once you had an AI Gateway for LLM traffic. You had a request going to a model, a response coming back, and a gateway in between to enforce policy. With the right solutions,…
[](/blog/product-releases/kong-agent-gateway)
You whipped up a simple MCP server prototype over the weekend. It routed a single AI agent to a few internal tools, your demo impressed leadership, and the team asked the dreaded question: "When can we ship?" You smiled and said, "Give me two weeks." Fast-forward three months . You’re firefighting…
[](/blog/enterprise/build-vs-buy-mcp-server-infrastructure)
API gateways and service meshes often create confusion in microservices architectures. Rather than competing, they work together, much like a front door lock paired with room-by-room security. Organizations need both to achieve comprehensive protection, because each addresses a different layer of…
[](/blog/enterprise/the-difference-between-api-gateways-and-service-mesh)
Every few weeks, the AI-adjacent internet crowns a new corpse. SaaS is dead. OpenAI is dead. The IDE is dead. Humans writing code is dead. The structure is always the same: take a real observation, strip it of all nuance, and toll the death knell to feed the hype train. Rinse and repeat. The…
[](/blog/enterprise/cli-vs-mcp-enterprise-ai-governance)
The global financial services industry is undergoing a massive, API-driven revolution. With the global open banking market valued at $31.61 billion in 2024 and projected to grow to $135.17 billion by 2030, this shift is accelerating worldwide. This definitive guide explores the core APIs, the…
[](/blog/learning-center/guide-on-open-banking)Secure your AI infrastructure with prompt guards, PII sanitization, and centralized governance. Control LLM costs with token-based rate limiting and semantic routing across providers.