REST API news and engineering summaries

Bose has officially released the API documentation for its SoundTouch speaker line, offering a lifeline to users facing the impending end-of-life (EoL) status of these premium devices. Originally, Bose announced that these systems would lose cloud connectivity and app support by February 2025, effectively bricking several multi-room features. However, the company has clarified that Spotify Connect and AirPlay 2 will remain functional, allowing continued wireless streaming. Furthermore, a local version of the SoundTouch app will be released in 2026 to facilitate control without cloud dependency. This move addresses significant customer backlash regarding the planned obsolescence of expensive hardware, ensuring that these high-end speakers retain functionality through local integration and open documentation even after official manufacturer support ceases.

RFC 10008 introduces the HTTP QUERY method, providing a safe and idempotent way to perform queries that are too complex for URI encoding. Unlike POST, QUERY allows for automated retries and caching. It supports content negotiation and URI assignment for query results, bridging the gap between GET and POST while maintaining resource safety.

The author successfully built a desktop environment to boot a Tesla Model 3 Media Control Unit and touchscreen. By sourcing salvage parts, navigating internal wiring schematics, and replacing a damaged power controller chip, they created a setup to explore the vehicle's network interfaces, REST API, and firmware, all in preparation for the Tesla bug bounty program.

LocalSend is an open-source, cross-platform application for secure, local file and message sharing. It uses HTTPS encryption and a REST API to enable direct device-to-device communication without an internet connection or external servers. The project supports various operating systems and provides detailed guidance on installation, network configuration, and open-source contribution.

Developers are abandoning popular API tools like Postman and Insomnia due to corporate bloat, forced cloud-sync, and paywalled collaboration features. Users are shifting toward local-first, Git-native alternatives like Bruno that prioritize performance, offline capabilities, and developer privacy over enterprise-focused business models.

http.cat is a popular and creative web service that provides a unique way to visualize HTTP status codes using high-quality cat images. Developed by Rogerio Vicente with original artwork by Tomomi Imura, the platform allows developers and enthusiasts to access visual representations of almost every HTTP response code, ranging from the standard 200 OK to more obscure errors like 418 I'm a teapot and 451 Unavailable For Legal Reasons. Users can access these images directly via a Rest-API style URL structure, making it a favorite tool for developers to add some humor to documentation, error pages, or Slack notifications while maintaining technical accuracy regarding the HTTP protocol.

A benchmark comparing vision-based AI agents to structured API agents reveals that vision agents are approximately 45 times more expensive and significantly slower. Using Claude Sonnet, vision agents required 550k tokens and 17 minutes to complete tasks, while API agents used only 12k tokens and 20 seconds, demonstrating that structural interface design drastically impacts agent efficiency and cost.

The Art Institute of Chicago's API includes a boolean field called has_not_been_viewed_much, identifying artworks viewed fewer than 200 times on their website since 2010. This metric highlights overlooked pieces in their collection, encouraging users to discover and explore lesser-known art from their digital archives.

The March 2026 updates for Postman signify a radical shift from its origins as a focused API testing client toward an all-encompassing platform. Key additions such as AI Agent Builders, managed MCP Servers, and integrated terminals aim to transform Postman into a centralized hub for AI-powered API development. However, these changes raise significant concerns regarding feature bloat, performance degradation, and UI complexity. The transition toward a cloud-first model suggests a strategy of vendor lock-in, potentially stifling innovation by moving core business logic into a proprietary ecosystem. To maintain architectural independence and control, developers are encouraged to weigh the risks of dependency on third-party infrastructure against the simplicity of lightweight, open-source alternatives for API verification.

Effective APIs prioritize long-term stability over initial elegance. By maintaining strict boundaries, avoiding tight coupling to frontend structures, and minimizing unnecessary data exposure, developers can prevent accidental dependencies. Building 'boring' but honest APIs that account for evolving requirements reduces technical debt and maintenance challenges, ultimately fostering trust and reliability across team integrations.

This content provides documentation and technical details for REST API and gRPC services, including information on pricing and a search interface to facilitate navigation and developer workflows.

Bluesky launches Bluesky Protocol Services, a unified developer portal for its AT Protocol infrastructure, and Jetstream v2 with Network Replay, enabling filtered historical snapshots and seamless live-stream catch-up. It also releases TypeScript and Go SDKs, rebases the Bluesky TypeScript SDK on lexicons, updates API references, and keeps services open-source and self-hostable.

RFC 10008 introduces the HTTP QUERY method to handle complex read-only requests. Unlike GET, which uses bulky query parameters, or POST, which lacks safe, idempotent semantics, QUERY allows request bodies for complicated queries. While promising, widespread adoption is limited, and GET remains preferred for shareable links and simple filtering.

A security researcher discovered critical vulnerabilities in the My Eicher fleet management platform, a joint venture of Volvo and Eicher. Unauthenticated internal APIs allowed full account takeovers, exposing personal data, sensitive identity documents, and real-time tracking for hundreds of thousands of commercial vehicles in India. The flaws included exposed OTP logs and administrative API endpoints.

GitHub resolved a service incident on June 10, 2026, which caused degraded performance and sporadic authentication failures affecting 15% of API traffic. The team identified and mitigated a problematic infrastructure component, restored stability to API requests and Issues, and committed to releasing a detailed root cause analysis.

Serve a Markdown representation of existing web content through HTTP content negotiation using `Accept: text/markdown`. This removes navigation, scripts, styles, ads, and layout markup, giving AI agents and RAG pipelines higher-signal text, lower token usage, faster latency, and cleaner retrieval. Implement `Vary: Accept`, honor q-values, and return `406` for unsupported types.

The door detection API identifies architectural floor-plan doors from PDFs. Free-tier jobs typically take 2-4 minutes, with speed scaling based on complexity. Pro and Enterprise users benefit from GPU-accelerated processing. The asynchronous workflow uses polling to retrieve results, and credits are billed per page.

X’s closure of APIs and legal pressure on Nitter illustrate the walled-garden web, where applications cannot freely access, combine, index, or migrate living data. The essay argues that atproto addresses this through persistent identity, personal data servers, replicated logs, live firehose access, and interoperable writes. Its growing network demonstrates an open social web alternative to centralized platforms.

GitHub resolved an incident where a feature flag caused intermittent authorization failures for specific API endpoints and triggered unintended repository unsubscriptions in Slack and Teams. The service has been stabilized, and impacted chat integrations require manual re-subscription. A full root cause analysis is pending.

WARN Firehose is a comprehensive platform that scrapes, unifies, and normalizes WARN Act layoff notices from all 50 US states. Providing a searchable database of over 109,000 notices since 1998, it offers a REST API, bulk exports in CSV, JSON, and Parquet, and an MCP server for AI integration to support developers, researchers, and recruitment.