APIs
Public and internal APIs: design, auth, webhooks, quotas, and what callers — including other software — need back.
- Oct- 2025 -24 October
How to Version an API Without Stranding Old Clients
An API version is not a number. It is a promise about what will keep working, and the moment that promise gets fuzzy, the number stops meaning anything.
Read More » - Oct- 2025 -13 October
What a Deprecation Window Needs Before You Break an API
An API deprecation window is a promise with a deadline attached. The promise is that existing callers keep working for some period of time. The deadline is that the old surface goes away.
Read More » - Sep- 2025 -18 September
A Scraping API vs Running Your Own Crawler
Somewhere around the third week of a scraping project, the bill arrives and the argument begins.
Read More » - Sep- 2025 -17 September
Requirements for a File Upload Endpoint
A file upload endpoint looks like the simplest thing in an API. Take bytes, store bytes, return a URL.
Read More » - Sep- 2025 -4 September
Authentication Mistakes in a First-Party API
An API that only its own developers call has a particular failure mode, and it usually shows up in the gap between the browser and the server.
Read More » - Jul- 2025 -27 July
How to Rotate API Keys Across Staging and Production
Two environments, one key. That arrangement works right up until the moment it doesn't, and the failure is rarely dramatic.
Read More »