Systems | Development | Analytics | API | Testing

You've diagnosed the problem. Your agentic AI initiatives are stalling — not because the models are wrong, but because the integration layer underneath them wasn't built for this. Batch data, rigid schemas, fragmented governance, no real-time event delivery. Now the question is: what do you actually build, and how do you build it without tearing down the infrastructure you already have?

If you've been around long enough to remember when iPaaS was the answer to everything, you know the pattern. New paradigms arrive. Someone realizes that wiring it into existing infrastructure is harder than the demos suggested. An integration layer gets built. That layer slowly becomes load-bearing. Eventually, the integration layer becomes the bottleneck. We're at that moment again — except this time, the new paradigm is agentic AI, and the bottleneck is forming faster than usual.

You swapped in a better model. You fine-tuned it. You threw more tokens at the problem. And still — your agents hallucinate, break under load, and deliver answers that were accurate about three hours ago. The model isn't the problem. Gartner recently flagged that up to 40% of enterprise agentic AI initiatives are at risk of failure. Executives see that number and immediately audit their LLM provider. Their infrastructure team. Their prompts.

The new Konnect Dev Portal Toolkit extension for Visual Studio Code gives you a live, portal-accurate preview of your content right beside the file you are editing. You watch a page take shape exactly as it will appear to your developers, as you type, without ever leaving your local editor.

*You wouldn't expose a REST API without a gateway. What about Kafka?* You would never expose a REST API without an API gateway in front of it. Authentication, rate limiting, observability, access control — these aren't optional extras. They're mandatory, and we've spent the last decade building the API gateway pattern to solve exactly this problem. So here's the question worth sitting with: would you expose Kafka or any event stream without a gateway?

If you've been following the agentic AI wave, you've probably noticed that the conversation tends to center on the agents themselves: which LLM to use, which orchestration framework to pick, which use cases to tackle first. But a growing body of analyst research is pointing to a different bottleneck, one that's hiding in plain sight: integration. Forrester's David Mooter argues that integration must sit at the center of your AI strategy — not as plumbing, but as a strategic capability.

As APIs grow across teams, keeping them consistent becomes difficult. Some APIs follow naming conventions and include clear descriptions, while others don’t. Over time, these differences make APIs harder to understand, review, and maintain. That is where API linting helps. That made it possible to apply custom Spectral rules as part of local development, Git workflows, or CI checks.. Teams can now upload and manage custom Spectral rulesets directly from the Insomnia UI.

Production AI no longer generates one kind of traffic. It generates four patterns, and most teams govern only one. **AI traffic management** starts with a single decision: **proxy AI traffic** through one control point instead of letting it flow straight from application code to model providers. Skip that step and security teams have no policy chokepoint, token spend climbs with no meter, and every new provider adds an integration nobody owns.

We're thrilled to announce a strategic technology partnership between **Kong** and **ModelOp**. As enterprises rapidly transition into the agentic era, they face a critical challenge: how to deploy AI fast enough to stay competitive without taking on unacceptable regulatory or security risks. Together, **ModelOp** and **Kong** are solving the "last mile" problem of enterprise AI delivery.

We have big news for platform and AI infra teams: *Kong AI Gateway 2.0 is available today in private beta*. It runs on its own dedicated runtime, ships on its own release cadence, and carries a completely reimagined user experience designed around the way teams actually build with AI: models, MCP servers, and agents as first-class citizens, not plugins bolted onto an API gateway.

Running Apache Kafka on Amazon Managed Streaming for Apache Kafka (MSK) gives you a managed broker with no ZooKeeper to operate, automated patching, and multi-AZ replication handled by the service. What it doesn't give you is a safe, governed way to expose Kafka access beyond your VPC boundary. That problem looks simple on the surface. It isn't. And how you solve it has significant implications for security posture, operational complexity, and monthly cost.

Thirteen vendors were formally evaluated. The market is projected to grow from $65 million in 2024 to **$1.434 trillion by 2030 **(in other words, this is a MAJOR emerging need)..

This post is the technical follow-up, written for solution architects and developers wanting to take the next step on leveraging Kong Konnect Metering & Billing's new prepaid credits in addition to post-consumption invoice billing.

Shadow AI detection is the practice of finding and governing unsanctioned AI tools, models, and API integrations that employees deploy without security approval. It has become urgent because these tools route live enterprise data to external models in real time, and traditional security stacks cannot see them. The 2026 Cordyceps disclosure, which exposed identical AI-generated vulnerabilities across 300+ GitHub repositories, showed how fast ungoverned AI can turn into a supply-chain crisis.

*Kong makes every MCP client and server work with Enterprise-Managed Authorization, whether they speak the protocol or not.* The MCP demo impressed the room. Then someone asked how 5,000 employees would connect to 40 MCP servers, and the answer was: one OAuth consent screen at a time. Per user. Per server. No central policy, no unified audit trail, and nothing stopping a personal account from getting wired into a work tool.

Enterprise AI adoption is accelerating. In PwC's April 2025 survey of 308 US business executives, 88% said they plan to increase AI-related budgets in the next 12 months . But scaling AI from pilot to production exposes a structural problem most teams discover too late: **direct LLM API integration** creates fragility at scale. The question is not whether your organization will consume multiple LLMs. It is how you will govern that consumption without building bespoke infrastructure for every provider.

LLM provider switching went from a theoretical concern to an operational emergency in June 2026, when Anthropic disabled Claude Fable 5 and Mythos 5 following a US government directive . The shutdown was swift, with access suspended just days after the models launched. Enterprises that had built production workflows around those models lost access overnight. The event was a wake-up call, but the underlying risk had been building for years.

In late June 2026, two of the most widely used AI agent platforms were compromised within the same week. Langflow disclosed a critical unauthenticated remote code execution flaw. Dify, powering over one million applications, revealed four vulnerabilities that exposed private conversations and internal APIs across tenant boundaries. These weren't theoretical risks. They were production exploits hitting real infrastructure.