GitHub just sent waves of budget panic across its developer base. Seat-based Copilot pricing is out. Consumption-based credits are in. And if you're building an AI-driven product today on flat-rate pricing? You're building a problem into your roadmap. GitHub just announced Copilot plans will shift…
[](/blog/enterprise/stop-subsidizing-innovation)
Key takeaways - An MCP server is a lightweight process that exposes tools, resources, and prompts to AI applications over a standardized protocol. - It acts as the bridge between an LLM-powered client and an external system — a database, API, file system, or SaaS product. - The protocol…
[](/blog/learning-center/what-is-an-mcp-server)
Three-quarters of enterprises are now piloting or deploying AI agents. But here’s the problem: actually integrating those agents with enterprise applications is proving to be one of the hardest parts of the whole endeavor. That’s the core finding of a recent Gartner research note, How to Integrate…
[](/blog/enterprise/ai-agent-integration-gartner-ai-control-layer)
An enterprise AI gateway should provide a centralized point of policy enforcement for routing, governing, securing, and observing artificial intelligence traffic at scale. LiteLLM is one of many AI gateways that can cover the foundational AI connectivity needs teams often start with. For…
[](/blog/enterprise/kong-ai-gateway-vs-litellm)
Most engineering teams adopt Apache Kafka for one simple reason: it works. It scales effortlessly, it is incredibly reliable, and it powers real-time systems across almost every industry. But as your Kafka usage expands across different teams, regions, and external consumers, success creates a…
[](/blog/enterprise/practical-guide-to-governing-real-time-data)
As organizations transition from experimental AI to production-grade systems, they often face a fragmented landscape of unmanaged LLM providers, complex tool integrations, and escalating security risks. Without a centralized orchestration layer, developers struggle to maintain consistent…
[](/blog/engineering/ai-infrastructure-with-kong-and-akamai)
Modern Kafka deployments struggle with a familiar tension. You want fine-grained access control per client, per team, and even per request. However, traditional ACLs force you into static, cluster-level configurations that are brittle, hard to scale, and painful to maintain. Administrators are…
[](/blog/engineering/dynamic-kafka-acls-identity-aware-policies)
At TDX earlier this month, Salesforce announced Headless 360: every capability in the platform now exposed as an API, MCP tool, or CLI command. Co-founder Parker Harris put the thesis bluntly last month: "Why should you ever log into Salesforce again?" That isn't a marketing question. It's an…
[](/blog/enterprise/salesforce-went-headless-the-world-must-follow)
Scaling LLM and agentic AI adoption from pilot programs to enterprise-wide deployments is a massive logistical rollout. As AI and agentic usage grow, so does a nagging question for leadership: Are agents using the right tools to get the job done? While raw infrastructure metrics might tell you if a…
[](/blog/product-releases/kong-ai-governance-metrics-a2a-mcp)
Whether you're drawn to Kong Insomnia's native OpenAPI support, its Git-based sync workflow, or its lightweight interface, migrating from Postman doesn't have to be a weekend project. Insomnia natively understands Postman's export format and can bring over your collections, environments, folder…
[](/blog/engineering/migrating-collections-and-requests-from-postman-to-insomnia)
Digital agreements are at the heart of many critical business processes. As companies modernize their technology stacks and adopt API-driven architectures, integrating agreement workflows directly into applications has become increasingly important. By combining the capabilities of Kong Konnect…
[](/blog/engineering/automating-agreement-workflows-kong-konnect-and-docusign-for-developers)
The best platform teams don't write glue code — they configure great infrastructure. But as API platform architectures get more complex, policy logic does not always fit into a one-size-fits-all model. Not only that, but security toil compounds with every new service, credential, and cloud provider…
[](/blog/product-releases/kong-gateway-3-14)
Modern API architectures are no longer linear. A single request can traverse multiple layers of authentication, transformation, enrichment, and observability. As these flows grow more dynamic, the need for fine-grained control over when plugins execute becomes critical. For years, the standard…
[](/blog/engineering/conditional-policy-execution)
OAuth 2.0 Token Exchange fundamentally alters how services establish trust. And the API gateway is the ideal location to enforce this new model. Modern applications don’t run as a single monolithic. They are composed of services — frontend APIs, backend microservices, third-party integrations —…
[](/blog/engineering/token-exchange-at-the-gateway)
Enterprise security teams have clear requirements: no static credentials, no exceptions. Every service-to-service connection, whether it's Kong talking to databases, caches, or vaults, should authenticate using the same IAM-based identity model that governs the rest of their cloud infrastructure.…
[](/blog/engineering/cloud-native-authentication)