API Evangelist Daily — Thursday, October 29, 2026

← All episodes of the API Evangelist Daily

Listen: SoundCloud · YouTube · Podcast RSS

Show notes

This is the API Evangelist Daily for Thursday, October 29, 2026 — what is new across APIs.io, API Evangelist and API Commons, plus a few things from the shelf.

New on API Evangelist

API Evangelist Is Now A Financial Contributor To OpenLint — API Evangelist just became a financial contributor to OpenLint on Open Collective, with a €1,000 contribution. I want to explain why, and ask you to do the same if your work depends on API linting.
Automate Branch Cleanup And Push Notifications With GitLab — If you manage a software team, you have seen the repository that nobody tidies: hundreds of old branches, release branches someone forgot to protect, and a chat channel that never hears about a push until somebody complains. Those are housekeeping jobs, and housekeeping is exactly what software is good at.
Automate Ecommerce Email Campaigns And Segment Shoppers With Omnisend — If you run an online store, you already know the email that earns money: the welcome note to a new subscriber, the campaign to people who bought last spring, the reminder to someone who left a cart. The hard part is keeping your subscriber list, your product catalog and your campaigns in step with what is actually happening in the store.
Plus 7 more today: E-Invoicing: The Shape Of The Answer; Google Ships Agent Skills Like Products, And That’s The Lifecycle They Need; Lint An OpenAPI And Find Out Which Rules Decide If It Passes; Manage Event Contacts, Discount Codes And Campaign Email With Cvent Event Cloud; Run Code Without Managing Servers And Release It Safely With AWS Lambda; Run Traffic Reports And Build Audience Segments With Adobe Analytics; Skills Over MCP Is Now Officially Beta

New on APIs.io

Barndoor Sorts Okta’s MCP Tools Into Allow, Hold and Deny — Barndoor has written a gating plan for Okta’s open-source MCP server, which lets agents run Okta management operations through Okta’s Admin Management APIs. The post walks the real server.
Traefik Puts Runtime Governance in Front of OCI Agents — Traefik Labs built a full agent stack in an Oracle Cloud tenancy and wrote up what it took to let those agents act: OCI Enterprise AI Sandbox, Identity Domains, Guardrails, Generative AI and Kubernetes Engine, with Traefik Hub as the one path out of the sandbox. Then they poisoned a runbook.
Vercel: The MCP Server Now Takes Feedback From the Agent — Vercel’s changelog entry of October 23 adds a submitfeedback tool to the Vercel MCP server: a way to send bug reports, friction reports and feature requests to the Vercel team directly from an agent or harness. You ask in plain language, and the assistant attaches structured context describing the task, the expected behavior and what went wrong.
Plus 2 more today: WorkOS: Zero Trust Means Checking Every MCP Tool Call; Zapier MCP and the Recruiters Who Turned the Knob

Kin Score mover

Spendesk rose 29.1 points, from 30.5 to 59.6 (strong), between the 2026-10-11 and 2026-10-17 scoring runs.

Provider spotlight

Rollee — Rollee is an Open Finance / employment-data platform that lets fintechs, lenders, and HR platforms verify the income, employment, and work history of both salaried and self-employed workers in real time. Kin Score 55.6 (strong), agent readiness 36.9 (agent-ready).

From the conversations

API Evangelist Conversation with Lorna Mitchell, OpenAPI Specification Maintainer with the OpenAPI Initiative — Lorna Mitchell, OpenAPI Specification Maintainer with the OpenAPI Initiative, and overall API experience expert came by to educate me (us) on OpenAPI Overlays, helping contrast with the core OpenAPI spec, as well as with Arazzo Workflows, sharing how it will help bring more stakeholders into the API lifecycle and contribute to better API experiences. Lorna is a well spring of knowledge when it comes to OpenAPI, but…

FAQ

How do I manage policies consistently across multiple API gateways? Define the policy once in a vendor-neutral form, generate or verify each gateway’s configuration from it, and report coverage across all of them. Hand-maintaining parallel policy sets never stays in sync.

Guidance

Production — Governing APIs that are live and serving real traffic

Standard

Privacy By Design — A framework and approach that embeds privacy protections into the design and operation of IT systems, networked infrastructure, and business practices from the ground up, rather than as an afterthought.

Investor

Fifth Wall — Fifth Wall is a venture capital firm founded in 2016 by Brendan F. Wallace and Brad Greiwe and headquartered in Los Angeles, California, with additional offices in New York, San Francisco, and London.

Country

🇳🇴 Norway — 34 API providers on APIs.io; the most in IoT & Connected Devices (6), Artificial Intelligence (6), Energy (4).

Regulation

eIDAS Regulation (Electronic Identification and Trust Services) — eIDAS is the EU regulation governing electronic identification and trust services — including the qualified website (QWAC) and seal (QSEAL) certificates that identify regulated third parties in open banking.

Tool

Apache Cocoon — Web application framework built around the areas of pipeline processing and separation of concerns using XML.

Everything mentioned is linked in the show notes. Find any API at apis.io, and see what we are working on at apievangelist.com.

Transcript

This is the API Evangelist Daily for Thursday, October 29th, 2026. What is new across APIs.io, API Evangelist, and API Commons. Plus a few things from the shelf. New on API Evangelist. API Evangelist is now a financial contributor to OpenLint. API Evangelist just became a financial contributor to OpenLint on OpenCollective.

I want to explain why and ask you to do the same if your work depends on API linting. Automate branch cleanup and push notifications with GitLab. If you manage a software team, you’ve seen the repository that nobody tidies, hundreds of old branches, release branches someone forgot to protect, and a chat channel that never hears about a push until someone complains.

Those are housekeeping jobs, and housekeeping is exactly what software is good at. Automate e-commerce email campaigns and segment shoppers with Omnisend. If you run an online store, you already know the email that earns money. The welcome note to a new subscriber. The campaign to people who bought last spring.

The reminder to someone who left a cart. The hard part is keeping your subscriber list, your product catalog, and your campaigns in step with what actually is happening in the store. Plus seven more today. E-invoicing, the shape of the answer. Google ships agent skills like products, and that’s the lifecycle they need.

Lint an open API and find out which rules decide if it passes. Manage event contacts, discount codes, and campaign email with Cvent Event Cloud. Run code without managing servers and release it safely with AWS Lambda. Run traffic reports and build audience segments with Adobe Analytics.

Skills over MCP is now officially beta. New on APIs.io. Barndoor sorts Okta’s MCP tools into allow, hold, and deny. Barndoor has written a plan for Okta’s open source MCP server, which lets agents run Okta management operations through Okta’s admin management APIs. The post walks through the real server.

Traffic puts runtime governance in front of OCI agents. Traffic Labs built a full agent stack in an Oracle Cloud tenancy and wrote up what it looks like to let those agents act. OCI Enterprise AI sandbox, identity domains, guardrails, generative AI, and Kubernetes engine with traffic hub and one path out of the sandbox.

Then they poisoned a run book. Vercel, the MCP server, now takes feedback from the agent. Vercel’s changelog entry of October 23rd adds a submit feedback tool to the Vercel MCP server. A way to send bug reports, friction reports, and feature requests to the Vercel team directly from an agent or a harness.

You ask in plain language and the assistant attaches structured content describing the task and expected behavior and what went wrong.

Plus two more today. WorkOS. Zero trust means checking every MCP tool call. Zapier MCP and the recruiters who turn the knob. Kin score mover. Spendesk grows 29.1 points from 30.5 to 59.6 strong between the 2026-1011 and 2026-1017 scoring rounds. Provider spotlight. Provider spotlight.

Rollee. Rollee is an open finance employment data platform that lets fintech lenders and HR platforms verify the income, employment, and work history of both salaried and self-employed workers in real time. Kin score 55.6 strong. Agent readiness 36.9. Agent ready. From the conversations. API Evangelist conversation with Lorna Mitchell, open API specification maintainer with the open API initiative.

Lorna Mitchell, open API specification maintainer with the open API initiative and overall API experience expert came by to educate me on open API overlays. Helping contrast the core open API spec as well as with the Razzle workflows sharing how to bring more stakeholders to the API lifecycle and contribute to better API experiences.

Lorna is a wellspring of knowledge when it comes to open API. FAQs. How do I manage policies consistently across multiple API gateways? Define the policy once in a vendor-neutral form, generate or verify each gateway’s configuration from it, and report coverage across all of them.

Hand-maintaining parallel policy sets never stay in sync.

Guidance. Production.

Governing APIs that are live and serving real traffic.

Standard. Privacy by Design. Privacy by Design. A framework and approach that embeds privacy protections into the design and operations of IT systems, networked infrastructure, and business practices from the ground up, rather than as an afterthought.

Investors.

Fifth Wall.

Fifth Wall is a venture capital firm founded in 2016 by Brendan F. Wallace and Brad Grew, and headquartered in Los Angeles, California, with additional offices in New York, San Francisco, and London.

Country. Norway. 34 API providers on APIs.io, most in IoT and connected devices, 6. Artificial intelligence, 6. And energy, 4. Regulations. EIDAS Regulation, Electronic Identification and Trust Services.

EIDAS is the EU regulation governing electronic identification and trust services, including the qualified website and SEAL certificates that identify regulated third parties in open banking.

Tools. Apache Cocoon, web application framework built around the areas of pipeline processing and separation of concerns using XML.

Everything mentioned is linked in the show notes. You can find any of the APIs here at APIs.io and see what we’re working on at apievangelist.com.