The latest news and announcements about Kong, our products, and our ecosystem, as well as voices from across our community.
TL;DR? You’ve been asked to make a slate of popular services like GitHub, Figma, or Salesforce available as MCP servers to agents inside your organization. Your employees expect to access these through their existing single-sign-on provided by your corporate identity provider. Your security team…
Let’s say someone logs in with a real account and a valid token, and your system treats them like any other customer. Then they start changing the invoice number in their requests and reading invoices that belong to other people. That’s a classic case of security breach, but nothing in that story…
Bots make up more than a third of internet traffic, and API endpoints attract more of it than web pages do. Scanners hunting for .env files, credential-stuffing scripts, LLM training crawlers, and the long tail of low-effort probes all hit your gateway before they ever reach a service. Every one of…
Kong Identity can now securely broker downstream credentials for AI agents, giving them access to the systems they need without putting those credentials in the agents themselves. AI agents are getting access to more of the enterprise. An engineering agent might need GitHub and Jira. A support…
We're excited to announce the expansion of Kong Identity to include centralized principals, which is a single source of truth for every entity (machine, agent, processes, etc) that needs to be authenticated across API gateways, event gateways, and developer portal applications. For platform teams…
The MCP demo impressed the room. Then someone asked how 5,000 employees would connect to 40 MCP servers, and the answer was: one OAuth consent screen at a time. Per user. Per server. No central policy, no unified audit trail, and nothing stopping a personal account from getting wired into a work…
Digital agreements are at the heart of many critical business processes. As companies modernize their technology stacks and adopt API-driven architectures, integrating agreement workflows directly into applications has become increasingly important. By combining the capabilities of Kong Konnect…
Enterprise security teams have clear requirements: no static credentials, no exceptions. Every service-to-service connection, whether it's Kong talking to databases, caches, or vaults, should authenticate using the same IAM-based identity model that governs the rest of their cloud infrastructure.…
AI APIs don't get enough credit for how much weight they're actually carrying. These AI APIs aren't merely technical connectors. They're, in fact, cost drivers and potential revenue engines. And when something goes sideways, they're ground zero. In production, they behave nothing like the…
For enterprise teams evaluating API testing tools like Insomnia and Postman, understanding the real cost is critical. Postman’s recent changes and Insomnia’s alternative approach tell different stories. Let’s dive in. TL;DR: Free collaboration with Postman — a myth On March 1st, 2026, Postman…
Event-driven architectures (EDAs) have pretty quickly transformed from a niche engineering pattern to the all-pervasive central nervous system of the modern enterprise. With Apache Kafka at the helm, enterprises are rapidly shifting gears from synchronous REST APIs to asynchronous event streams to…
Bringing APIs and events together has always been a challenge. REST APIs give developers a familiar interface, while event brokers like Solace Broker excel at fan-out, filtering, and scalable, reliable event delivery. The tricky part? Bridging these two worlds without building a lot of custom glue.…
API endpoints process requests that power our digital world—from social feeds updating in real-time to enterprise systems syncing global inventories across continents. APIs comprise over 57% of Internet traffic, yet API endpoints often remain misunderstood. This leads to design inconsistencies,…
Discover expanded OpenTelemetry support, full cloud-native authentication, powerful Datakit orchestrations, and PCI DSS 4.0 attestation for Kong Konnect and Cloud Gateways. As API ecosystems grow more complex, maintaining visibility and security shouldn't be a hurdle. Kong Gateway 3.13 simplifies…
2025 was a breakout year for Kong Cloud Gateways. As organizations continue to modernize architectures, adopt AI-driven workloads, and operate in increasingly regulated environments, the need for secure, high-performance, and flexible API infrastructure has never been greater. This year, Kong Cloud…