DEV Community

API

Application Programming Interface

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Free financial data for AI agents: what it took to wire four regulators into one schema

Free financial data for AI agents: what it took to wire four regulators into one schema

Comments 2
7 min read
I Built an API Marketplace Where AI Agents Pay Per Request in USDC — Canary Live, MCP Discovery, 100 Endpoints in 8 Days, Solo"

I Built an API Marketplace Where AI Agents Pay Per Request in USDC — Canary Live, MCP Discovery, 100 Endpoints in 8 Days, Solo"

Comments
8 min read
The Easiest Way to Look Up GeoIP in Laravel

The Easiest Way to Look Up GeoIP in Laravel

Comments
5 min read
One API key across OpenAI, Claude and Gemini: how to compare token cost per model

One API key across OpenAI, Claude and Gemini: how to compare token cost per model

Comments
7 min read
Working: HTTP parameter pollution attacks APIs because WAFs evaluate one parameter value while frameworks execute a different one

Working: HTTP parameter pollution attacks APIs because WAFs evaluate one parameter value while frameworks execute a different one

Comments
5 min read
PDF Tamper Detection API for C#: ASP.NET Core Integration Guide

PDF Tamper Detection API for C#: ASP.NET Core Integration Guide

1
Comments
18 min read
HTTP Verb Tampering in REST APIs: When OPTIONS and HEAD Bypass Access Control

HTTP Verb Tampering in REST APIs: When OPTIONS and HEAD Bypass Access Control

Comments
5 min read
HTTP/2 Rapid Reset: How the Protocol Amplifies DoS Against API Gateways

HTTP/2 Rapid Reset: How the Protocol Amplifies DoS Against API Gateways

Comments
5 min read
API Gateway Path Normalization Bypass: When HAProxy Sees /admin and Your App Sees /admin

API Gateway Path Normalization Bypass: When HAProxy Sees /admin and Your App Sees /admin

Comments
5 min read
API Key Scope Validation Failures: When 'Read-Only' Is a Documentation Claim, Not a Backend Constraint

API Key Scope Validation Failures: When 'Read-Only' Is a Documentation Claim, Not a Backend Constraint

Comments
5 min read
Server-Sent Events Security: How EventSource Breaks Your API Authentication Model

Server-Sent Events Security: How EventSource Breaks Your API Authentication Model

Comments
4 min read
Postman's Secret Variables Are Not Secret: How Public Workspaces Expose 4,000+ Live Credentials

Postman's Secret Variables Are Not Secret: How Public Workspaces Expose 4,000+ Live Credentials

Comments
6 min read
Webhook Signature Bypass: When the Receiver Skips the HMAC Check

Webhook Signature Bypass: When the Receiver Skips the HMAC Check

Comments
5 min read
Web Cache Deception Against APIs: CDNs Cache What Backends Serve Privately

Web Cache Deception Against APIs: CDNs Cache What Backends Serve Privately

Comments
6 min read
API SSRF: Allowlists Fail Because They Validate the URL, Not the Resolved IP

API SSRF: Allowlists Fail Because They Validate the URL, Not the Resolved IP

Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.