Upgrade to Pro — share decks privately, control downloads, hide ads and more …

apidays Singapore 2025 - Surviving an interconn...

apidays Singapore 2025 - Surviving an interconnected world with API governance, Mun Kiat Kok (Tyk)

Surviving an interconnected world with API governance
Mun Kiat Kok, Solution Architect at Tyk

apidays Singapore 2025
Where APIs Meet AI: Building Tomorrow's Intelligent Ecosystems
April 15 & 16, 2025

------

Check out our conferences at https://www.apidays.global/

Do you want to sponsor or talk at one of our conferences?
https://apidays.typeform.com/to/ILJeAaV8

Learn more on APIscene, the global media made by the community for the community:
https://www.apiscene.io

Explore the API ecosystem with the API Landscape:
https://apilandscape.apiscene.io/

Avatar for apidays

apidays

July 03, 2025
Tweet

More Decks by apidays

Other Decks in Programming

Transcript

  1. API Design • GET /deleteUser/123 ◦ Confusing - Fetch data

    or retrieve? ◦ Can anyone guess how the agent will behave? • 200 OK with “statusˮ: “errorˮ ◦ Is it ok or not ok? ◦ How will the agent behave?
  2. API Design • GET /deleteUser/123 ◦ Confusing - Fetch data

    or retrieve? ◦ Can anyone guess how the agent will behave? • 200 OK with “statusˮ: “errorˮ ◦ Is it ok or not ok? ◦ How will the agent behave? • Use design tools such as Stoplight, Postman and Tyk for linting
  3. Documentation • Undocumented endpoints • Poorly described functions • Poorly

    documented OpenAPI Good agents might catch ambiguity and not execute Bad agents might execute based on their “assumptionsˮ In either case, productivity is impacted
  4. Documentation • Undocumented endpoints → API gateways • Poorly described

    functions → Stoplight • Poorly documented OpenAPI → Stoplight Good agents might catch ambiguity and not execute Bad agents might execute based on their “assumptionsˮ In either case, productivity is impacted
  5. Access Management • What kind of access should agents have?

    • How do we even “trustˮ agents? • Can agents keep running API calls?
  6. Access Management • What kind of access should agents have?

    → OAuth • How do we even “trustˮ agents? → Dynamic Client Registration • Can agents keep running API calls? → Rate limits/Quotas
  7. Summary AI is driving consumption of APIs via Tools APIs

    → MCP  Agents → Outcomes Good APIs are more important than ever for positive outcomes Governance is important to ensure good APIs and good
  8. Thank you! Come talk to us to continue the discussion

    or reach out: Mun Kiat Kok https://www.linkedin.com/in/munkiat-kok/ Scan to download the deck