Blog
Insights for API governance and platform teams
Ideas and patterns for shipping APIs safely—lifecycle, gateway policy, workflows, developer portal, observability, and AI agent access—without vendor lock-in.
Written for platform, security, and integration leads who run Zerq on-prem, hybrid, or cloud.
Subscribe via RSSUpdated when we publish—no inbox required.
Articles
- mTLS for B2B API partners: a complete setup guide
- security
- mtls
- partners
Set up mTLS B2B partner API authentication in Zerq: certificate generation, nginx ingress config, profile setup, and per-partner audit trail in 7 steps.
Read article - Your API Gateway Is Your AI Gateway: Connect Claude, Cursor, and ChatGPT to Your APIs with MCP
- mcp
- ai-agents
- api-gateway
Connect Claude, Cursor, ChatGPT, and any MCP client to your enterprise APIs through the gateway, credentials, and audit trail you already run.
Read article - API Platform Automation with Zerq Management MCP — Collections, Policies, Clients, Audit, and Metrics via Claude, ChatGPT, and CI/CD
- mcp
- automation
- platform-engineering
Manage collections, policies, clients, audit logs, and metrics via MCP from Claude, ChatGPT, Cursor, or CI/CD, under the same OIDC identity and RBAC.
Read article - 82% of Security Executives Are Confident in Their AI Agent Policies. Over Half of Those Agents Are Running Without Oversight.
- ai
- security
- governance
82% of executives say their policies cover AI agents, yet over half of deployed agents run without monitoring or logging. Here is how to close that gap.
Read article - How AI Agents Authenticate to Enterprise APIs Securely
- ai-agents
- security
- mcp
A practical guide to AI agent authentication for enterprise APIs: same credentials, same audit trail, and no separate authentication path.
Read article - Blast Radius: How a Single Compromised AI Agent Can Poison 87% of Your Downstream Operations in Four Hours
- ai-agents
- security
- governance
Research found one compromised agent can poison 87% of downstream decisions in four hours. Why agent-level identity at the gateway is the containment layer.
Read article - How to Build a Complete API Audit Trail for Banking Regulators
- banking
- compliance
- audit
Banking regulators ask who accessed which API, when, and what happened. How to build an API audit trail that satisfies regulators and compliance teams.
Read article - Your Quarterly Access Review Covers Humans. It Misses 82 Machine Identities Per Employee.
- security
- compliance
- ai
There are an estimated 82 machine identities per employee, and quarterly access reviews only cover humans. How to bring machine identities into review.
Read article - 48.9% of Enterprises Can't See What Their AI Agents Are Doing to Their APIs
- ai
- security
- observability
Nearly half of organizations can't see non-human API traffic, per the 1H 2026 State of AI and API Security report. Why that gap matters as agents scale.
Read article