API Content Hub
Engineering insights, tutorials, and updates from the WSO2 API Platform team.
Guided tracks, start to production.
API best practices & fundamentals
REST API design, authentication, versioning, error handling, and the foundational patterns every API developer needs.
API tools, management & gateways
Buyer's guides, head-to-head comparisons, and deep dives on API management platforms, gateways, and tooling.
AI gateways
What AI gateways are, how they work, and how to use them for routing, caching, and governance of LLM traffic.
API governance
Frameworks, tools, and best practices for governing APIs at scale — from design linting to lifecycle management and compliance.
Latest articles
43 articlesMCP Governance: Controlling Third-Party MCP Tools
A practical guide to MCP governance: registries, allowlists, RBAC, and policy to safely govern third-party MCP tools and servers across the enterprise.
MCP Monitoring: Observability for MCP Servers
How to monitor MCP servers: the metrics that matter (tool latency, error rates, usage patterns), logging and tracing with OpenTelemetry, and what not to log.
MCP Security: Risks, Threats and Controls
Understand MCP security: the top risks (prompt injection, tool poisoning, excessive permissions) and the controls that secure Model Context Protocol servers and agents.
MCP Server Catalog: Building an Internal Registry
What an MCP server catalog is, public directories vs a governed internal registry, and how enterprises curate approved MCP servers with provenance and access control.
MCP Server Security: 8 Best Practices
MCP server security best practices: OAuth 2.1, least privilege, scope control, credential vaults, and auditing to ship production-ready AI agents safely.
MCP Tool Poisoning: How It Works & How to Stop It
MCP tool poisoning hides malicious instructions in tool metadata. Learn how the attack works, real CVEs, and how an MCP gateway detects and blocks it.
What Is an MCP Gateway? Features & Benefits
Learn what an MCP gateway is, how it works, and why it's essential for securing AI agents and MCP servers at enterprise scale: features, benefits, and architecture.
What Is an AI Gateway? Features, Benefits and How It Works
Learn what an AI gateway is, how it works, and how it differs from an API gateway: multi-model routing, token cost control, guardrails, and observability for LLM traffic.
The open, universal platform for managing every API and AI service at scale. 100% open source.