---
title: "API"
description: "81 posts about API, summarised, each linking to the original."
---

# API
> 81 posts about API, summarised, each linking to the original.

## Articles

### [Integrating Claude Code with Auth0 APIs](https://yomu.fyi/post/integrating-claude-code-with-auth0-apis.md)
- Company: [Auth0](https://yomu.fyi/company/auth0.md)
- Author: Manish Hatwalne
- Published: Sep 29, 2026
- Type: Tutorial

This tutorial explains how to integrate Claude Code with Auth0’s Management API using the Auth0 MCP Server, enabling AI-driven authentication configuration management from the terminal. The setup uses the OAuth 2.0 Device Authorization Flow to obtain scoped access tokens stored in the OS keychain, avoiding static secrets that risk exposure in source control. Developers initialize the MCP server with explicit scopes like read:clients or update:actions, then register it with Claude Code via the claude mcp add command, with credentials never stored in plain text. A CLAUDE.md file provides project context and constraints, guiding the agent to respect environment-specific configurations and security policies such as never modifying production callback URLs without confirmation. The tutorial demonstrates refactoring JWT validation code in a single terminal session, with human-in-the-loop confirmation ensuring safe agentic changes and all auth-critical paths undergoing manual PR review.


### [Introducing cf: the agentic CLI for the entire Cloudflare API](https://yomu.fyi/post/introducing-cf-the-agentic-cli-for-the-entire-cloudflare-api.md)
- Company: [Cloudflare](https://yomu.fyi/company/cloudflare.md)
- Author: Samuel Macleod
- Published: Sep 28, 2026
- Type: Announcement

Cloudflare introduced cf, a new CLI that provides access to the entire Cloudflare API surface of over 3,000 operations, far exceeding Wrangler’s roughly 280 commands. Cf is designed primarily for AI coding agents, which account for nearly half of Wrangler usage, and defaults to JSON output with condensed formatting to minimize token consumption. The CLI includes a natural language search command, cf cli search, that helps agents discover the right operation without bloating context, and uses TypeScript-based configuration via cloudflare.config.ts for type safety. Cf is generated by Forge, Cloudflare’s internal pipeline that produces CLI commands from OpenAPI schema annotations, enabling consistent and comprehensive API coverage. The open beta is available globally via npm, and cf adopts Vite as its default local development server, with a migration path from Wrangler and maintenance support for 18 months after beta ends.


### [Introducing Forge: the open source pipeline for generating SDKs, CLIs, docs, and more](https://yomu.fyi/post/introducing-forge-the-open-source-pipeline-for-generating-sdks-clis-do.md)
- Company: [Cloudflare](https://yomu.fyi/company/cloudflare.md)
- Author: Samuel Macleod
- Published: Sep 28, 2026
- Type: Announcement

Cloudflare introduced Forge, an open source, pluggable generation pipeline for producing SDKs, CLIs, documentation, and other API surfaces from API definitions. Forge runs in CI on each team’s API repositories, linting every change and generating preview builds of the CLI, docs, and SDKs with only the changes highlighted, similar to Workers Previews. It supports OpenAPI as input and can chain transformers to produce outputs like Cap’n Web bindings, TanStack Query, or MCP servers, enabling generation of bindings from Workers to other APIs. Forge is designed to reduce coordination overhead across Cloudflare’s hundreds of services and repos, and to enable better API versioning without breaking existing clients or SDKs. It is available under the Apache 2.0 license and can be run for free, privately or publicly, and already generates the output required for the cf CLI.


### [Holo4: powering generalist computer-use agents](https://yomu.fyi/post/holo4-powering-generalist-computer-use-agents.md)
- Company: [Hugging Face](https://yomu.fyi/company/hugging-face.md)
- Author: Tony Wu, Maxime Theillard, Frederic Renard, Vincent Coyette, Emrick Sinitambirivoutin, Avshalom Manevich, Antonio Loison, Antoine Bonnet, Maxime Langevin, Aleix Cambray (H-AI), Léonard Benedetti, Tony Wu, Mats L. Richter, Michael Eickenberg, Sławek Mucha, Matthias Brunel, Daniel Beechey
- Published: Sep 28, 2026
- Type: Announcement

Holo4 is a new series of agentic models designed to interact with software through any available interface: GUIs, code, MCP, and APIs. It comes in two sizes, a 27B dense model and a 35B-A3B Mixture of Experts model, both available on the H Models API. The models were trained through supervised and reinforcement learning on environments and tasks generated by the Agentic Task Factory, which produces verifiable tasks from documentation alone. On the OSWorld 2.0 benchmark, Holo4 27B scores 61.7% against 81.8% for Opus 5.5, achieving competitive performance at a fraction of the cost. The company also released Holotron4 Nano, an updated version of Holotron 3 built on the Nemotron 3 Nano Omni model using the same post-training stack.


### [How to Build an RCS Business Messaging Campaign with Twilio](https://yomu.fyi/post/how-to-build-an-rcs-business-messaging-campaign-with-twilio.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Dhruv Patel
- Published: Sep 28, 2026
- Type: Tutorial

Rich Communication Services (RCS) upgrades SMS with branded conversations, images, carousels, and read receipts delivered through the default messaging app. Twilio Programmable Messaging supports RCS as a first-class channel, reusing the same API as SMS. This tutorial covers building an RCS campaign in Node.js, including RCS Sender registration (a manual review process with test device support), creating a twilio/card content template with dynamic variables, and broadcasting personalized messages from a JSON list. Delivery status is tracked through a status callback webhook exposed via ngrok, and replies are captured through an inbound webhook when users tap suggested reply buttons. The guide also includes troubleshooting for common issues such as messages falling back to SMS, error codes 30001 and 63001, and webhook configuration errors.


### [Turn your REST APIs into MCP tools with Google Cloud API Gateway](https://yomu.fyi/post/turn-your-rest-apis-into-mcp-tools-with-google-cloud-api-gateway.md)
- Company: [Google](https://yomu.fyi/company/google.md)
- Author: Sanjay Pujare, Paul Howell
- Published: Sep 24, 2026
- Type: Announcement

Most enterprise REST APIs are invisible to AI agents, forcing teams to run separate MCP servers that duplicate their existing gateway logic. Google Cloud API Gateway in Public Preview solves this by acting as a remote MCP server — annotate the OpenAPI 3.0.x/3.1.x spec with x-google-api-management.mcp and deploy it with no extra infrastructure. The gateway accepts MCP JSON-RPC requests on a single /mcp endpoint, transcodes tools/call into the corresponding REST call, runs it through existing policies, and returns the response as an MCP result. Authentication via JWT or API key works unchanged for REST operations; tools/list is unauthenticated by default and requires JWT in production for security. With no separate server to operate, teams in Public Preview can expose up to 1,000 tools per gateway that support existing authentication and quota, and the MCP server is automatically discoverable via API hub and Agent Registry.


### [How to test that a dozen MongoDB drivers, in a dozen languages, conform to a dozen specs](https://yomu.fyi/post/how-to-test-that-a-dozen-mongodb-drivers-in-a-dozen-languages-conform.md)
- Company: [MongoDB](https://yomu.fyi/company/mongodb.md)
- Published: Sep 23, 2026
- Type: Problem & solution

MongoDB develops a dozen native client library drivers in a dozen languages, each idiomatic to its language but needing consistent API behavior. Instead of relying on English specs or Cucumber tests, engineers created a YAML-based domain-specific test language interpreted by runners in each driver. The Unified Test Format, built on this YAML language, now contains nearly 1,500 files testing conformance to specs covering retries, transactions, client-side encryption, and more. A natural experiment showed four of five drivers had lower nonconformance bug rates after adopting YAML tests; Node.js improved after fixing its test runner. The IEEE ISSRE 2026 accepted a paper on this approach, which has saved over 22,000 lines of test-runner code across seven drivers.


### [The Headless Dashboard Initiative](https://yomu.fyi/post/the-headless-dashboard-initiative.md)
- Company: [Resend](https://yomu.fyi/company/resend.md)
- Published: Sep 22, 2026
- Type: Announcement

Resend announced a headless dashboard initiative to make all dashboard capabilities available programmatically via the MCP, CLI, and API. Recent releases include the Email Metrics API for deliverability and engagement data, a Headless Webhook API for listing events and replaying deliveries, and a Cancel Broadcast API. The Duplicate Broadcast API copies any broadcast into a draft, and the Share Email API provides expiring read-only email links. The team aims to make the dashboard best-in-class while committing to full headless operation for every future entity. Developers can start building today by connecting the MCP server or using the CLI.


### [Introducing Our New Dropbox API Documentation](https://yomu.fyi/post/introducing-our-new-dropbox-api-documentation.md)
- Company: [Dropbox](https://yomu.fyi/company/dropbox.md)
- Author: Dropbox Developer Support Team
- Published: Sep 21, 2026
- Type: Announcement

Dropbox has launched a modernized API documentation site at https://docs.dropboxapi.com, rebuilt to make integration faster and more intuitive. The new documentation features interactive API testing that lets developers set parameters, issue API calls, and view real responses from the Dropbox API directly in their browser without switching tools. An embedded AI assistant offers instant help with endpoint questions, troubleshooting, and code examples, while the documentation integrates with MCP (Model Context Protocol) so AI tools like Claude Code and Cursor can access up-to-date API information. Through the MCP server at https://docs.dropboxapi.com/\_mcp/server, developers can connect their AI assistants to answer questions, explore the API, and assist with integrations using information directly from the docs. The update delivers a clean, responsive, searchable interface that brings endpoints, types, schemas, and related documentation together, with improved navigation, and provides comprehensive information including detailed error responses, type definitions, and full request/response schemas.


### [How CSIRO built scalable, cost-optimized genomic variant querying on AWS](https://yomu.fyi/post/how-csiro-built-scalable-cost-optimized-genomic-variant-querying-on-aw.md)
- Company: [AWS](https://yomu.fyi/company/aws.md)
- Author: Prof. Denis Bauer
- Published: Sep 18, 2026
- Type: Explainer

CSIRO built Serverless Beacon (sBeacon), a production-ready implementation of the Global Alliance for Genomics and Health (GA4GH) Beacon protocol for secure genomic variant querying. Its serverless architecture combines Amazon S3, AWS Lambda, Amazon DynamoDB, and Amazon Athena: genomic data remains in its original S3 location, while metadata is indexed in ORC tables and ontology indexes for query processing. Standard VCF files can be queried through API Gateway, with modular Lambda functions resolving ontology terms, querying Athena, and, when needed, issuing HTTP byte-range requests to source buckets so raw VCF bytes do not leave their owning organization. The post reports support for hundreds of millions of individuals and billions of genomic locations, approximately USD 0.40 monthly operation for a 1000 Genomes-scale dataset, roughly five-second real-world queries, and about 18-second generation-to-use onboarding, while noting that whole-genome range queries can time out.


### [A skills library for every agent](https://yomu.fyi/post/a-skills-library-for-every-agent.md)
- Company: [Notion](https://yomu.fyi/company/notion.md)
- Author: Geoffrey Litt
- Published: Sep 17, 2026
- Type: Announcement

The post introduces Notion’s skills library and Skills API, aimed at helping teams share organizational knowledge across AI agents and workflows. The library is designed for nontechnical and technical users, with collaborative editing, database organization, supporting files, permissions, suggested edits, version history, usage analytics, and controls over skill distribution. The API provides endpoints for loading skills in spec-compliant file formats, with examples including synchronization to GitHub, installation through Vercel’s Skills CLI, and uploads or edits through MCP tools. Notion says early customers and partners are already using the API across agents and tools, while an open-source starter kit supports Notion-to-GitHub synchronization. Vercel’s Skills CLI can install individual Notion skill pages or workspace plugins, using standards-compliant files without handling Notion-specific formats.


### [Give every teammate and agent the right level of access to your Workers](https://yomu.fyi/post/give-every-teammate-and-agent-the-right-level-of-access-to-your-worker.md)
- Company: [Cloudflare](https://yomu.fyi/company/cloudflare.md)
- Author: Dina Kozlov
- Published: Sep 15, 2026
- Type: Announcement

Cloudflare has introduced resource-level access controls for Workers, allowing a teammate or agent to access one specific Worker rather than other resources in an account. Four roles define progressively broader capabilities: Metadata Read-Only exposes settings and observability data, Content Read-Only permits code or product-content reads, Editor allows content and settings changes without resource deletion, and Admin provides full control. These roles can be assigned to dashboard users or attached to scoped API tokens, supporting debugging without source exposure, code review without deployment, and CI/CD deployments limited to one Worker. Worker-level access also governs Durable Objects, while routes and Custom Domains require both Worker Editor access and Workers Routes permission; existing legacy permissions continue to work, but the new roles are recommended for granular access and are planned for D1, R2, and KV.


### [A Developer's Guide to API Access Policies in Auth0](https://yomu.fyi/post/a-developer-s-guide-to-api-access-policies-in-auth0.md)
- Company: [Auth0](https://yomu.fyi/company/auth0.md)
- Author: Madhuri Ravindra Mohan
- Published: Sep 11, 2026
- Type: Tutorial

Auth0 API Access Policies for Applications control whether an application can obtain an access token for a registered API, separately for user-delegated and client access. The FinFlow example separates a browser application that should reach both APIs from a machine-to-machine Risk Engine restricted to the Payments API. Policies provide three choices—allow\_all, require\_client\_grant, and deny\_all—while client grants specify an application's audience and permitted scopes, with the audience determining which API policy is evaluated. The guide shows Dashboard and Management API configuration, including subject\_type\_authorization settings and grants for user and client access. It also explains that third-party applications still require grants under allow\_all, while default third-party grants establish a baseline and per-application grants take precedence for exceptions.


### [Higher usage limits and a SpaceX compute deal](https://yomu.fyi/post/higher-usage-limits-and-a-spacex-compute-deal.md)
- Company: [Anthropic](https://yomu.fyi/company/anthropic.md)
- Published: Sep 9, 2026
- Type: Announcement

An agreement with SpaceX will give the company access to all compute capacity at the Colossus 1 data center, adding more than 300 megawatts and over 220,000 NVIDIA GPUs within the month. Combined with other compute partnerships, the expansion supports higher usage limits: Claude Code five-hour limits double for Pro, Max, Team, and seat-based Enterprise plans, peak-hour reductions end for Pro and Max, and Claude Opus API limits rise considerably. The company says the new capacity will directly improve service for Claude Pro and Claude Max subscribers while it trains and runs Claude on AWS Trainium, Google TPUs, and NVIDIA GPUs. It is also expanding inference capacity in Asia and Europe and exploring orbital AI compute with SpaceX.


### [Introducing Claude](https://yomu.fyi/post/introducing-claude.md)
- Company: [Anthropic](https://yomu.fyi/company/anthropic.md)
- Published: Sep 9, 2026
- Type: Announcement

Anthropic is offering Claude more broadly after a closed alpha with partners including Notion, Quora, and DuckDuckGo, positioning it as an AI assistant for conversational and text-processing work. Available through a chat interface and API in the developer console, Claude supports summarization, search, writing, question answering, coding, and other tasks, while accepting direction on personality, tone, and behavior. The announcement introduces Claude, a high-performance model, alongside Claude Instant, a lighter, less expensive, faster option, and says both are being developed around helpfulness, honesty, harmlessness, reliability, and predictability. Partner deployments include Poe, Juni Learning’s Discord tutor, Notion AI, DuckAssist, Robin AI’s contract tools, and AssemblyAI’s audio platform. Reported benefits include natural conversation, richer tutoring responses, contract drafting and explanation, improved engagement, and stronger feedback, though these are partner and user reports rather than a controlled evaluation.


### [Anthropic acquires Stainless](https://yomu.fyi/post/anthropic-acquires-stainless.md)
- Company: [Anthropic](https://yomu.fyi/company/anthropic.md)
- Published: Sep 9, 2026
- Type: Announcement

Anthropic is acquiring Stainless, an SDK and MCP server tooling company founded in 2022, to expand how Claude and other agents connect to data and tools. Stainless has generated every official Anthropic SDK since the API’s early days and is used by hundreds of companies to produce SDKs, CLIs, and MCP servers from API specifications. Its tooling supports TypeScript, Python, Go, Java, and other languages, with libraries designed to feel native while remaining fast and reliable. The companies say combining their teams will advance developer experience and agent connectivity on the Claude Platform, while Stainless’s founder, Alex Rattray, said the team will continue its work within Anthropic.


### [ClickHouse as a streaming HTTP API](https://yomu.fyi/post/clickhouse-as-a-streaming-http-api.md)
- Company: [Clickhouse](https://yomu.fyi/company/clickhouse.md)
- Published: Sep 5, 2026
- Type: Tutorial

ClickHouse 26.8 can serve as a streaming HTTP API for controlled queries, using named handlers rather than requiring a separate pass-through layer. Using the UK property prices dataset, it sets up a MergeTree table with 30,452,463 transactions spanning 1995-01-01 to 2025-07-31 and occupying 339.08 MiB. The implementation covers named endpoints, typed query-string and URL-path parameters, result modification, direct table exposure, and framing formats that stream query data and progress in one response. It also uses an API user with a default JSONEachRow format and row limit, query logs for request visibility, and a SQL SECURITY DEFINER view to expose aggregates without granting access to source transactions. These features can replace a pass-through service for controlled queries, while business logic, orchestration, or application-specific validation still require an application layer.


### [Elevating security, control, and accessibility: Stack Internal 2026.6](https://yomu.fyi/post/elevating-security-control-and-accessibility-stack-internal-2026-6.md)
- Company: [Stack Overflow](https://yomu.fyi/company/stack-overflow.md)
- Author: Carrie Koos
- Published: Sep 3, 2026
- Type: Announcement

Stack Internal 2026.6 is a release focused on administrative security, API control, developer portal integration, knowledge-health automation, and accessibility for enterprise AI workflows. Its new Admin Security page supports X-API-Key headers for API v2.3 requests, inactivity windows, per-application daily limits up to 10,000 requests per day, and service-credential rotation with non-displayable secrets. The release adds scheduled expiration for Announcement articles, generally available community broadcasts, expanded custom award limits, tag preference and synonym APIs, richer user data, and a Backstage plugin update supporting the New Frontend System alongside the legacy architecture. Accessibility work improves screen-reader announcements, keyboard and reflow navigation, focus management, high-zoom layouts, contrast, and semantic markup, while additional fixes address tags, suggested edits, and Slack rendering.


### [How to Approve Real Users and Block Fake Accounts at Sign Up with Lookup and Verify in PHP](https://yomu.fyi/post/how-to-approve-real-users-and-block-fake-accounts-at-sign-up-with-look-php.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Kelley Robinson, Matthew Setter
- Published: Aug 31, 2026
- Type: Tutorial

The tutorial shows how to combine Twilio Lookup and Verify in a PHP sign-up flow that screens phone numbers before sending an OTP. It starts with Line Type Intelligence to accept mobile numbers, optionally checks reachability with Line Status, and uses Identity Match to compare submitted first and last names against authoritative sources without revealing underlying data. If those checks pass, the application sends a six-digit verification code and validates it through a Verify service. The provided implementation uses PHP 8.5, Slim, Twig, Monolog, and the Twilio REST client, with environment flags controlling optional checks and logs recorded in data/app.log. Testing covers mobile, toll-free, VoIP, and name-mismatch cases, while the pricing discussion recommends ordering cheaper checks before more expensive Identity Match and Verify calls.


### [How to Confirm Phone Number Ownership with Lookup Identity Match](https://yomu.fyi/post/how-to-confirm-phone-number-ownership-with-lookup-identity-match.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Kelley Robinson
- Published: Aug 31, 2026
- Type: Tutorial

The tutorial shows how to use Twilio Lookup Identity Match to confirm that a person is linked to a submitted phone number and reduce sign-up fraud. It describes a zero-knowledge match against authoritative sources such as mobile carrier records, with possible use during sign-up, login, account changes, or checkout. The implementation starts from an international telephone input project, collects first and last names alongside an E.164 phone number, and passes them to the Lookup API with the identity\_match field; the response exposes per-field statuses and a summary score. The sample JavaScript treats the check as successful when the phone is valid and both names are exact or high partial matches, then displays the result, while the post also notes approval requirements outside the US, test parameters, and alternative Lookup packages.


[Newer posts](https://yomu.fyi/topic/api.md) · [Older posts](https://yomu.fyi/topic/api/page/3.md)