search
API clients
Trends
- 1Cloudflare open sources Forge code generation pipeline▼Introducing Forge: the open source pipeline for generating SDKs, CLIs, docs, and more
Cloudflare has introduced Forge, an open source pipeline that automatically generates software development kits, command-line interfaces, documentation and other developer assets. By releasing the tool publicly, the company aims to let teams standardize how they produce client libraries and docs from API definitions, reducing manual maintenance work as developer tooling ecosystems continue to grow.
- 2
Figma has restricted access to its Model Context Protocol server to a whitelist of approved clients, and Pi is not among them. The move limits which AI tools can connect to Figma's API through MCP, drawing attention from developers concerned about openness and interoperability. Discussion is focused on what criteria Figma used for the whitelist and how excluded tools like Pi will respond.
- 3JPA-Inspired ORM Brings Shared Java Entities to SQLite●Use managed ORM sessions, relationships, lazy loading, JPQL queries, and optimistic locking with shared Java entities on
Developers are discussing an approach that brings Java Persistence API-style features to SQLite, allowing managed ORM sessions, relationships, lazy loading, JPQL queries, and optimistic locking with entities shared between a mobile client and backend. The idea is that the same Java entity classes can be reused across Android, iOS-adjacent tooling, and server code, reducing duplication in data layers.
- 4DriveWealth breach exposes personal and investment data worldwide▼DriveWealth security breach exposes personal and investment data globally
DriveWealth, a US-based investment infrastructure firm whose API powers trading for many brokerage apps, has suffered a security breach exposing personal and investment data of users globally. The incident raises concerns about data protection at financial technology providers that handle sensitive client information behind the scenes for consumer trading platforms.
- 5Building Safer API Clients: Timeouts, Retries and Backoff●Build safer API clients with timeouts, retry limits, exponential backoff, jitter, Retry-After, and idempotency. # progra
Developers are being reminded that robust API clients need more than a simple retry loop. A widely shared guide outlines six core practices: setting timeouts, capping retry attempts, using exponential backoff, adding jitter to avoid thundering herds, honoring server Retry-After headers, and designing requests to be idempotent. The advice targets backend and web developers whose naive retry logic can accidentally amplify outages instead of recovering from them.
- 6Keycloak flaw lets stolen passwords bypass mandatory MFA●CVE-2026-105305 affects Red Hat build of Keycloak. The OIDC Device Authorization Grant flow does not enforce a client's
A vulnerability tracked as CVE-2026-105305 affects the Red Hat build of Keycloak. The OIDC Device Authorization Grant flow fails to enforce a client's minimum authentication level, meaning a stolen password could bypass mandatory multi-factor authentication and gain access to the Admin REST API. No exploitation has been confirmed, and Red Hat has a fix available. Security practitioners are sharing the advisory and urging admins to patch promptly.
- 7Figma restricts MCP access to whitelisted clients●Figma restricts MCP access to whitelisted clients, excluding Pi https://twitter.com/GayaniFigma/status/21052956299413504
Figma has limited access to its Model Context Protocol server to a whitelist of approved clients, excluding Pi. The move, announced by a Figma employee, restricts which AI-powered development tools can connect to Figma's API for design data. Developers are debating whether the tighter controls protect the platform or close off an open ecosystem for AI tooling.
- 8Developers build MCP server exposing basketball player stats●Expose documented basketball player data to MCP clients with a typed Sportmicro API integration. # typescript # mcp # ap
A developer has published a guide for building a Model Context Protocol (MCP) server that serves documented basketball player data through a typed Sportmicro API integration, written in TypeScript. The tutorial walks through exposing the player insights endpoint so MCP clients can query structured basketball statistics. It is drawing attention from developers interested in connecting sports data to AI tooling.
Repos
- Rizzo-AI-Academy/rizzo-flow The open, local take on Jev: typed decisions from an LLM, without generating a single token
- dimonomid/montray A tray icon and desktop alerts for systemd services and custom health checks