Data Sovereignty and Open Architecture in Government Platforms: Design Principles
Designing digital platforms for the State comes with a constraint that barely exists in the private sector: today's technical decisions shape the so…
Testing & QA
⚑ Report a ProblemLatest Testing & QA news from Tech News
All topics
agents
ai
api
architecture
automation
backend
beginners
career
claude
cybersecurity
devchallenge
devops
discuss
javascript
llm
machinelearning
mcp
node
opensource
performance
productivity
programming
python
security
showdev
softwareengineering
testing
tutorial
typescript
webdev
I asked 1,000 x402 endpoints to sell me something. 207 never quoted a price.
The Coinbase x402 discovery directory (the "Bazaar") lists 1,000 resources that are supposed to sell something to an agent. I wanted to know what ha…
APIWatch: Checking API Traffic and Subscription Controls with WSO2 API Manager
I recently worked on a project called APIWatch using Python and WSO2 API Manager. It is a small monitoring tool that reads API traffic logs and help…
5 Common JSON Mistakes That Break API Requests (With Fixes)
JSON is one of the most common formats used to exchange data between frontend applications, backend services, and APIs. It looks similar to a JavaSc…
Your retry logic has never seen a real 429. Here is how to test it with a local fault-injecting mock
Most LLM client code has a retry branch that has never actually run. The provider returns 200 in every test, so the 429 , 500 and timeout paths sit…
Secure Your APIs: OAuth2 and JWT for Beginners
Secure Your APIs: OAuth2 and JWT for Beginners APIs are frequent targets for bad actors since they expose data and functionality. Securing them whil…
Testing Idempotency, Webhooks, and Race Conditions in Payment APIs
Payment bugs do not always originate from a missing patch or weak password. Some appear when two requests arrive almost simultaneously, a callback i…
Fetch для QA: как тестировать API прямо в DevTools, не открывая Postman
Недавно у меня была итерация тестирования. Задача — проверить функционал, для которого нужно было создать 50+ сущностей. Однотипных,…
Design an Agent-Callable Action: Schema, Idempotency, Scoped Auth and Receipts
If you want an AI agent to act on your service without driving your web UI, the useful unit is one well-defined action. This is a design note, not a…
Live Sports Odds APIs: WebSocket vs REST, Latency and In-Play Feeds
This post first appeared on SportsAPIs.dev . What is a Live Sports Odds API? A live sports odds API (also called in-play or in-game betting API) pro…
WordPress REST API Deep Dive: Custom Routes, Multiple Methods on One Endpoint, and Full CRUD
🚪 Why the WP REST API Deserves Your Attention Every WordPress site already ships with a front door for data. Open yourdomain.com/wp-json/ and you'll…
A list of MCP servers (100 active ones), and why your agent needs a list, not ten pages
Ask an agent for "every MCP server on GitHub with more than 500 stars that was pushed to in the last month" and watch what happens. It searches. It…
Give your AI agent a brand: on-brand images from Claude or Cursor via MCP
AI-assisted draft. I wrote and verified the setup against the current Brandiseer MCP endpoint and developer docs. Disclosure: I work on Brandiseer.…
Idempotency keys done right: exactly-once effects over at-least-once networks
Why "just retry" creates duplicate payments, and a PostgreSQL-backed design for idempotency keys that survives double clicks, timeouts, crashes and…
I moved my webhook work into waitUntil() to fix a timeout. The failures didn't go away, they just stopped being visible.
My GitHub App takes a pull request, asks an LLM to review it, and posts the comments back. The first time I ran it end to end against a real reposit…
Don't Trust Us — Check the Chain: Public Verification for AI Agent Verdicts
This article originally appeared on the AgentBadge blog . What happens if we lie to you? Not a bug — a lie. The verdict endpoint says "approved," th…
Yahoo Finance Historical Data Download Is Now Paid: 7 Alternatives
Yahoo Finance now charges $479/year to download historical data. Here are 7 free and paid alternatives, with prices, history depth and Python code.*…
AI-written tests pass — and still miss the regression
A CI run went green on a Friday afternoon. We shipped. On Monday the mobile team said the detail screen was blank for every legacy account. The endp…
Your AI coding tool doesn't know your API — and it's inventing endpoints to prove it
You ship a small feature on a Tuesday. The assistant writes the whole thing in one pass: a fetch wrapper, a couple of loading states, error handling…
Is the LinkedIn API free? Pricing and posting access in 2026
LinkedIn charges nothing per API call, but posting to a company page takes its approval. Posting to your own profile is self-serve. Company pages ne…
Building a pay-per-use API platform on shared PHP hosting: no Node, no Docker, no queue
I'm a solo developer in Geneva and I just built Supercalcula API , a small platform of utility APIs sold by usage: QR codes and barcodes, email veri…
[Перевод] Все вызовы API успешны. Почему ИИ-агент всё равно нарушает правила?
Агент создал запись о подрядчике, отправил договор на подпись и подготовил выплату. Все вызовы API завершились успешно. Однако обязательную проверку…
Turn an authorized Instagram Reel link into a media-library record
A creator sends your content tool a link to one of their own public Instagram Reels. Your application needs a caption, thumbnail, duration, and a vi…
Behaviour driven development for API teams: a practical starter guide
Behaviour driven development often gets introduced to teams through UI testing, which is a shame. Some of its biggest wins actually show up at the A…
Building a Provider-Agnostic Sports Data Client: What 10 Different APIs Teach You About Design
Why you need a provider-agnostic client Most sports apps start with one API and one hard-coded JSON shape. Six months later the vendor changes prici…
CORS Explained: Why Your API Requests Fail
You fetch an API from JavaScript and get a cryptic "blocked by CORS policy" error. Nothing in your code is wrong — it's the browser enforcing a secu…
Designing APIs for AI Agents: Schemas, Security and MCP
TL;DR: Postman's 2025 State of the API report shows that 89% of developers use AI in their daily work, but only 24% design APIs with AI agents in mi…
30+ Free REST APIs You Can Call Without an API Key in 2026 (No Credit Card, Zero-Auth)
Every developer has been there: you get inspired to build a weekend project, a portfolio app, or test out a new frontend framework like Next.js 15,…
Enable MySQL HeatWave REST Service (MRS)
Introduce the MySQL HeatWave REST Service (MRS), a fully managed, integrated solution that lets you create RESTful API endpoints instantly, directly…
A Developer's Tour of IP99: Free IP Lookup, pDNS, CT and an MCP Endpoint in One Place
If you've ever needed to answer "where is this IP, and is it acting like a proxy right now?", you've probably used several tools to do it: one for g…