Skip to main content
All Posts
2026Agent API Permissions: Identity, OAuth & Access ControlAgent Platform Architecture: Orchestration to ObservabilityAgent Observability: Tracing Agents from LLM to Tool CallsAgentic Enterprise: A Practical Roadmap to Get There (2026)AI Agent Memory: Types, Architecture & How to Implement ItIdempotent Tool Design: Building Agent Tools Safe to RetryMulti-Agent Calendar Assistant: A Real-World Case StudyREST API vs MCP: Which Do AI Agents Actually Need?Function Calling vs. Tool Calling vs. MCP: What's the Difference?Agent-Ready APIs: What They Are and How to Build ThemAPI Compliance: GDPR, HIPAA, SOC 2 & PCI GuideBuilding an API Governance Framework: Step by StepAPI Governance Best Practices for Enterprise TeamsAPI Governance: The Complete Framework & Implementation GuideAPI Governance Tools: Standards, Linting & Catalog (2026)API Lifecycle Management: Design to Retirement GuideAPI Security Governance: A Practical FrameworkOWASP API Security Top 10: Full Guide & MitigationsFederated vs. Centralized API Governance: Which Fits?AI API vs Traditional API: What's Actually DifferentBuilding LLM-Backed APIs: A Practical Architecture GuideEmbedding APIs Explained: How They Work and When to Use ThemLLM Rate Limiting: Token Buckets and Concurrency ControlCost Optimization for LLM APIs: Caching, Routing, and Model SelectionOpen vs Proprietary LLM APIs: Trade-offs for ProductionStreaming LLM Responses: Patterns and PitfallsOpenAI API vs Anthropic API vs Gemini API: Production Trade-offsRAG APIs: Architecting Retrieval-Augmented Generation EndpointsVertical AI API Strategy: Building Domain-Specific AI APIsSmarter AI Traffic with Jev: How WSO2 AI Gateway Mediates LLM and MCP CallsAPI Analytics: The Metrics That Actually Matter (2026 Guide)How to Build a CI/CD Pipeline for APIsAPI Design Tools: Choosing the Right Stack for API-First TeamsAPI Gateway vs Load Balancer vs Reverse Proxy: Clearing the ConfusionAPI Management Platforms: Cloud vs. Self-Hosted (2026)API Management Tools: A Complete Buyer's Guide for 2026Cloud Native API Gateway: Architecture Guide for 2026Envoy vs NGINX: Which Proxy Fits Your API Gateway?Internal Developer Portal: What It Is and How to Build OneKong vs Tyk: Open Source API Gateway ShowdownKubernetes API Gateway: The 2026 Guide to Gateway APIMuleSoft vs WSO2: Enterprise API Management ComparedOpen Source API Gateways Compared: Kong, Tyk, Gravitee, WSO2What Is an API Gateway? Functions, Architecture & Use CasesAPI Architecture: Patterns, Principles & Modern ApproachesAPI Caching Strategies: Edge, Gateway, and Application LayersAPI-First Architecture: Why Design Before Code WinsAPI Federation: Patterns for Multi-Team API ProgramsAPI Gateway Architecture: How API Gateways Actually WorkCircuit Breakers and Resilience Patterns for APIsAPI Security Architecture: Layered Defense for Modern APIsBackend-for-Frontend (BFF) Pattern: When and WhyAPI Architecture Diagrams: From L0 to Ln (Complete Guide)Event-Driven APIs: Webhooks, WebSockets, and SSEMicroservices vs Monolithic: Trade-offs and When to ChooseService Mesh vs API Gateway: When You Need Each (or Both)API Authentication Best Practices: OAuth, Keys, mTLS, JWTAPI Documentation Best Practices: Beyond Reference to Developer ExperienceAPI Error Handling: Best Practices for REST APIsAPI Pagination: Design Patterns & Best PracticesAPI Rate Limiting: How It Works and Best PracticesAPI Versioning Best Practices: Strategies for Long-Lived APIsGraphQL vs REST: Key Differences & When to Use EachHTTP Status Codes for API Design: A Practical GuideIdempotency Keys for APIs: The Complete GuideJWT vs OAuth: What's the Difference and When to Use EachREST API Design: A Complete Guide for 2026OAuth 2.1: What's New and How It Differs from OAuth 2.0What Is a REST API? A Plain-English GuideAI Agent API Integration: Patterns & Best PracticesEnterprise MCP: The Control Plane for AI AgentsMCP Governance: Controlling Third-Party MCP ToolsMCP Gateway vs MCP Proxy: What's the Difference?MCP Monitoring: Observability for MCP ServersMCP Security: Risks, Threats and ControlsMCP Server Catalog: Building an Internal RegistryMCP Server Security: 8 Best PracticesMCP Tool Poisoning: How It Works & How to Stop ItWhat Is an MCP Gateway? Features & BenefitsWhat Is an AI Gateway? Features, Benefits and How It WorksAI Gateway Comparison: Top Solutions in 2026AI Gateway Security: Guardrails for LLM TrafficAI Gateway vs API Gateway: Key DifferencesAI Gateway Observability: Key Metrics, Logging, and Tracing for LLM TrafficBest LiteLLM Alternatives in 2026LLM Cost Control: Strategies to Cut AI SpendLLM Routing: How It Works, Strategies, and Why It MattersPrompt Injection Defense: Techniques That Actually Work7 Billion Calls a Day: One WSO2 GatewayLLM Fallback: How to Build Resilient AI ApplicationsREST API to MCP Server: A Practical GuideAzure API Management vs AWS API Gateway: Key Differences and FeaturesMuleSoft vs AWS API Gateway: Key Differences and FeaturesMuleSoft vs Azure API Management: Key Differences and FeaturesApigee vs AWS API Gateway: Key Differences and FeaturesApigee vs Azure API Management: Key Differences and FeaturesApigee vs MuleSoft: Key Differences and FeaturesGravitee vs AWS API Gateway: Key Differences and FeaturesGravitee vs Azure API Management: Key Differences and FeaturesGravitee vs MuleSoft: Key Differences and FeaturesGravitee vs Apigee: Key Differences and FeaturesKong vs AWS API Gateway: Key Differences and FeaturesKong vs Azure API Management: Key Differences and FeaturesKong vs MuleSoft: Key Differences and FeaturesKong vs Apigee: Key Differences and FeaturesKong vs Gravitee: Key Differences and FeaturesTop 6 AWS API Gateway Alternatives of 2026Top 6 Azure API Management Alternatives of 2026Top 6 MuleSoft Alternatives of 2026Top 10 Apigee Alternatives of 2026Top 4 Gravitee Alternatives of 2026Top 6 Kong Alternatives of 2026

15 posts tagged with "Tutorials"

Step-by-step tutorials and implementation guides.

View All Tags
TutorialsPolicies

Using Amazon Bedrock as an LLM Provider and Bedrock Guardrails with WSO2 AI Gateway

A full walkthrough registering Amazon Bedrock as a provider and attaching its native guardrail to a WSO2 AI Gateway, with both requests and responses validated.

Dakshitha SuriyaaratchieOct 15, 202631 min
TutorialsAI

OpenAPI for AI Agents: Write Specs Agents Can Use

Learn how to write OpenAPI specs that AI agents can use, with clear descriptions, unique operationIds, complete schemas, and agent metadata extensions.

Milanka TharanganaOct 7, 202614 min
TutorialsAI

Building and Managing an API Catalog

Learn what an API catalog is, how it differs from an API portal and an API registry, and how to build one that serves both developers and AI agents.

Praveena HennadigeOct 7, 202614 min
TutorialsAI

Multi-Step MCP Tools: How to Order API Calls with Arazzo

Learn how the Arazzo specification describes multi-step API workflows and how to turn one into a single MCP tool for AI agents, governed by the WSO2 AI Gateway.

Milanka TharanganaOct 5, 202614 min
TutorialsAPI gateway

WebSocket APIs: How to Build a Real-Time Notification System

Learn how to build a real-time notification system with WebSocket APIs. Import an AsyncAPI definition and deploy a WebSocket API proxy on WSO2 API Platform.

Milanka TharanganaOct 2, 202610 min
TutorialsAI

AI Gateway Guardrails for LLMs: Block Prompt Injection and Unsafe Requests

Block prompt injection and unsafe LLM requests before they reach the model. Chain content length, word count, regex, and semantic prompt guard on the WSO2 AI Gateway.

Milanka TharanganaOct 1, 202622 min
TutorialsMCP

MCP Registry: How to Build a Governed Catalog for MCP Servers

Learn what an MCP registry is and how to build one. Publish MCP servers to a governed catalog with WSO2, then discover and connect to them from Claude Desktop.

Praveena HennadigeSep 30, 202611 min
TutorialsAPI governance

Managing API Breaking Changes: Detect, Version, Deprecate

Learn how to catch breaking API changes with diff tooling, version them with semver, and communicate deprecations using sunset headers.

Dakshitha SuriyaaratchieSep 26, 202634 min
TutorialsAI gateway

Self-Hosted LLM Gateway: Open-source options and how to deploy one

Why and how to run a self-hosted LLM gateway: open-source options, deployment (Docker/Kubernetes), data control, and SaaS vs self-hosted trade-offs.

Praveena HennadigeAug 24, 202615 min
TutorialsMCP

MCP Server Authentication: OAuth 2.1 Guide

How MCP server authentication works: OAuth 2.1 with PKCE, token validation, the confused-deputy problem, and delegating auth to an identity provider. With examples.

Senthuran AmbalavanarAug 12, 202615 min
TutorialsPII

PII Redaction for LLMs: How to Do It Right

How to redact PII before it reaches an LLM: detection with regex and NER, gateway-level filtering of prompts and responses, and compliance with GDPR, HIPAA, and PCI. Includes a complete, end-to-end WSO2 AI Workspace tutorial.

Dakshitha SuriyaaratchieAug 12, 202617 min
TutorialsMCP

MCP Implementations: How to Implement MCP

A practical guide to MCP implementations: architecture, official SDKs, reference/example servers, a step-by-step build, and a hands-on walkthrough governing an existing server with WSO2 AI Workspace.

Dakshitha SuriyaaratchieAug 11, 202625 min
TutorialsPolicies

Semantic Caching for LLMs: Cut Cost & Latency

What semantic caching is, how it works (embeddings + similarity), and how it cuts LLM cost and latency, plus best practices and gateway-level implementation.

Abu SakibAug 7, 202610 min
TutorialsMCP

Govern write-capable MCP tools at the gateway in WSO2 API Platform

Secure write-capable MCP tools at the gateway using access control, scope authorization, rate limiting, and Moesif analytics.

Abu SakibJul 14, 202612 min
TutorialsAI gateway

Controlling Claude Code AI Costs Across a Large Engineering Team with the AI Gateway and AI Workspace

Route every developer's Claude Code traffic through the WSO2 AI Gateway so you can track, throttle, and cap AI spend for your whole engineering org from one dashboard.

Shanaka MadushankaJul 10, 202617 min
WSO2 API PlatformWSO2 API Platform

The open, universal platform for managing every API and AI service at scale. 100% open source.

Explore

BlogTutorialsTopics
© WSO2 LLC. All rights reserved.
WSO2 LegalDo Not Sell My Personal InformationModern Slavery Statement