Downloaded 19 times
Uploaded byWSO2
WSO2Con 2025 - AI-Driven API Design, Development, and Consumption with Enhanced Governance
As APIs continue to evolve, AI is transforming how they are designed, consumed, and governed. By integrating AI-driven capabilities, organizations can streamline workflows, enhance automation, and ensure compliance—making API management more intelligent, efficient, and adaptive. This session explores how AI can be applied across the API lifecycle, from intelligent design recommendations to optimizing consumption patterns and enforcing governance policies. Through real-world examples, we will demonstrate how AI enhances API interactions, automates compliance, strengthens security, and integrates seamlessly with development workflows. By the end of this session, attendees will gain valuable insights into leveraging AI for API management, balancing automation with governance, and building smarter, more secure API ecosystems. Whether you're an API developer, architect, or platform engineer, this session will provide practical strategies for the future of AI-enhanced API management.
More Related Content
Similar to WSO2Con 2025 - AI-Driven API Design, Development, and Consumption with Enhanced Governance
![[WSO2 Summit Americas 2020] Building an Interactive API Marketplace](https://cdn.slidesharecdn.com/ss_thumbnails/wso2summitamericas2020buildinganinteractiveapimarketplace-200827173653-thumbnail.jpg?width=640&height=640&fit=bounds)
![[WSO2 Summit EMEA 2020] Building an Interactive API Marketplace](https://cdn.slidesharecdn.com/ss_thumbnails/wso2emea2020buildinganinteractiveapimarketplace-200924112140-thumbnail.jpg?width=640&height=640&fit=bounds)
![[Roundtable] Choreo - The AI-Native Internal Developer Platform as a Service](https://cdn.slidesharecdn.com/ss_thumbnails/choreo-deck-250328074645-511dded7-thumbnail.jpg?width=640&height=640&fit=bounds)
![Support, Monitoring, Continuous Improvement & Scaling Agentic Automation [3/3]](https://cdn.slidesharecdn.com/ss_thumbnails/agenticcommunityseries-day3-cfd-251120170304-ddef8112-thumbnail.jpg?width=640&height=640&fit=bounds)
WSO2Con 2025 - AI-Driven API Design, Development, and Consumption with Enhanced Governance
- 1. AI-Driven API Design, Development,and Consumption with Enhanced Governance
- 2. Pubudu Gunatilaka Associate Director/ Architect WSO2 Natasha Wijesekare Associate Lead Solutions Engineer WSO2 Hello!
- 3. Agenda 3 ● Introduction &Lab Overview ● Introduction to WSO2 API Manager ● Use Case Overview ● AI-Driven API Lifecycle ● B2B API Consumption ● AI Service Architecture ● Future AI-Powered Capabilities ● APIs Powering Agentic AI Workflows ● Key Takeaways & Next Steps
- 4. Introduction & LabOverview
- 5. ● Why AIin API Management? ⦿ AI is transforming how APIs are built, managed, secured and consumed. ⦿ Automates repetitive tasks, improving efficiency. ⦿ Enhances compliance and governance. ● Objective of the Lab ⦿ Demonstrate AI-driven features in WSO2 API Manager. ⦿ Show how AI assists in different aspects of API development. ⦿ Cover API design, management, security, governance and consumption. ● Use Case Overview ⦿ Modernizing the online store to overcome legacy system challenges. ⦿ Explore AI-driven automation in API lifecycle. ⦿ Show how AI simplifies and improves API development and management. Introduction & Lab Overview 5
- 6. Introduction to WSO2API Manager
- 7. ● 100% opensource ● Full Lifecycle API management ● Secure API Management: Secure APIs, enforce authorization rules and access policies ● API Discovery and Governance: Portals for API Design and Consumption, Approval workflows for API publishing and API subscription ● API Monetization ● Insightful Analytics and Observability ● Customisable Portals, Workflows and Extension points WSO2 API Manager 7
- 8. Run it anywhere APIManagement Offerings WSO2 API Manager SaaS API Control Plane WSO2 Immutable Gateway WSO2 Universal Gateway WSO2 Kubernetes Gateway K8s native design, Lightweight, Envoy based Offline mode, Immutability, Edge Gateway Inbuilt mediation, Range of protocols AI-Native, Scalable SaaS API Management (Powered by WSO2 API Manager) Federated Gateways AWS API Gateway
- 9. Gateway Type Whento Use Key Differences Universal Gateway ● For centralized API management with advanced mediation. ● Best for complex API transformations, security, and governance. ● Advanced mediation – Routing, transformation, and enrichment. ● Centralized security & access control – OAuth, OIDC, SAML. Kubernetes Gateway (K8s-Native, Envoy- Based) ● For K8s-native API management ● Best for Kubernetes-based deployments requiring scalability. ● Replacement for Ingress ● Envoy-powered & CNCF Gateway API – Kubernetes-native architecture. ● CRD-based configuration – Declarative API definitions. ● Dynamic scaling with Kubernetes autoscaling Immutable Gateway (Lightweight & Decentralized) ● For lightweight, decentralized, and edge-ready API management. ● Best for microservices, IoT, and offline deployments with independent gateways. ● Microservice-friendly – Runs alongside services without a central control plane. ● Secure & immutable – Optimized for containerized workloads. ● Offline support – Disconnected API processing. ● Edge-ready – Optimized for edge computing & IoT. 9
- 10. VSCode plugins for APKconfigs & API mediations VSCode plugins for APK configs & API mediations ELK Jaeger Zipkin Grafana Prometheus Observability/Analytics Tools 10 10 APIM Control Plane Control APIs ●Platform Services ●Control APIs ●Policy management, ●API Management ●API Deployment ●API Consumption Enterprise API Gateway Ingress API Gateway Lightweight API Gateway Kubernetes Gateway Immutable Gateway Kubernetes Gateway Universal Gateway ●Admin API ●Publisher API ●DevPortal API ●EventHub ●DevOps API ●Service Catalog API Identity and Access Management infrastructure Key Management Server / IAM as KM Client API calls API backend calls API logging , Analytics & Observability events API sequence development and use within APIs APK conf generate and store Configure API Gateways Configure Gateways, control events APIM Control Plane Access control User management & Key Management User App/Portal authentication Service Mesh REST, GraphQL, gRPC services Integration Services API Admin Portal Admin ●Rate limit policy management ●Key Manager control ●Theme management ●Workflow Approval Admin Portal Publisher ●API/API Product create and manage ●Revision, version management ●LifeCycle management ●API Testing Publisher Portal API Developer Portal ●Discover & consume APIs ●Subscription/Application management Dev Portal Gateways APIM Dataplane CI/CD, Artifact Repos Developer Tools APICTL CLI Tools External Clients ●Partner services ●Chatbots ●Mobile apps ●Webapps Internal Clients ●Legacy Monolithic apps ●Enterprise applications ●Multi-grain services API Product Manager API Developer API Consumer Org Admin System Admin Choreo Moesif WSO2 API Management Software Components External Services Egress / AI Gateway Kubernetes Gateway Universal Gateway
- 11. ● Enhanced UserExperience: ⦿ Visual mapping UI and interactive policy management ● Unified Control Plane: ⦿ Seamlessly manage APIs across cloud & private dataplanes. ● AI for APIs: ⦿ AI-driven API design assistance, testing and developer portal theming. ● APIs for AI: ⦿ AI Governance for intelligent compliance, traffic control, and automation. ● Complete Control Over Your API Traffic ⦿ Efficiently govern ingress, egress, and AI APIs for any use case. ● Built on Choreo: ⦿ Delivering a enhanced and focused APIM experience WSO2 API Manager SaaS - Bijira 11
- 12.
- 13. ● Scenario: ⦿ VientoMart is an online store managing a large catalog of products across multiple platforms, including a website and mobile app. ⦿ They struggle with data consistency, manual inventory management, and the challenge of updating product details (price, stock, description) across channels in real-time. ● Solution: ⦿ Viento Mart wants to modernize by implementing APIs for real-time synchronization of product details (description, price, stock) across platforms, ensuring seamless inventory management, consistency, and accuracy. Business Use Case: E-Commerce Platform Integration 13
- 14. 14 Viento Mart Department Product Management InventoryManagement Order Management Payment & Billing Website & Mobile Apps Shopping Cart End Users Partners Suppliers and Manufacturers/ Warehouse and Fulfillment Centers/ Third-Party Logistics Providers/ Retail Partners
- 15. Username Role Responsibility Larry APIOwner (Internal/creator) Designing and Implementing APIs Emily API Product Manager (Internal/publisher) Manage API lifecycle, documentation, and ensuring quality and security standards David Partner App Developer/ (Internal/subscriber) Discover, subscribe and utilize APIs Admin System Admin/ (admin) Manage users and system administration 15 Personas
- 16. 16 High-Level Solutions Diagram CreateAPI Apply QoS Policies Validate Compliance Deploy API Test API Publish API Discover API Subscribe API Test API B2B API Consumption API Publisher API Developer Portal/Marketplace API Gateway Product Mgt Backend Service Product Database Inventory System API Creator API Product Manager App Developer API Consumer ( B2B partners, vendors, and retailers )
- 17. AI Powered APIDesign Assistant
- 18. ● The Challenge ⦿Manual API definition requires technical expertise, slowing down development. ⦿ Defining resources, schemas, and configurations is time-consuming and inefficient. ⦿ Non-technical users struggle with complex API design specifications. ⦿ Refining and adjusting APIs requires extensive manual effort. 18 AI Powered API Design Assistant
- 19. ● How APIDesign Assistant Solves It ⦿ Chat based API creation allows users to generate REST, GraphQL, and Async APIs using natural language. ⦿ UI Visualization provides a structured view of API resources for easy understanding. ⦿ View and Modify API Specifications enables users to review and update API structures. ⦿ Refinement and Inquiry lets users understand/modify APIs & API elements. ● Business Impact ⦿ Speeds up API design by reducing manual effort and ensuring consistency and accuracy. ⦿ Enables both technical and non-technical users to create and refine APIs. 19 AI Powered API Design Assistant
- 20. 20 AI Powered APIDesign Assistant
- 21. 21 What We've Accomplished CreateAPI Apply QoS Policies Validate Compliance Deploy API Test API Publish API Discover API Subscribe API Test API B2B API Consumption API Publisher API Developer Portal/Marketplace API Gateway Product Mgt Backend Service Product Database Inventory System API Creator API Product Manager App Developer API Consumer ( B2B partners, vendors, and retailers )
- 22.
- 23. ● The Challenge ⦿Inconsistent Standards – Varying security & documentation practices ⦿ Compliance Risks – Weak enforcement leads to vulnerabilities ⦿ Manual Processes – Inefficient & error-prone policy enforcement ⦿ Limited Visibility – Lack of control over compliance & governance ● How API Governance Solves it ⦿ Automated Policies – Enforce governance across API design & lifecycle ⦿ Standardized Practices – Secure, document, & version APIs consistently ⦿ Compliance Insights – Audit adherence & detect inconsistencies ⦿ Approval Workflows – Ensure governance in lifecycle changes API Governance 23
- 24. ● Business Impact ⦿Reduces overhead – Automates governance, minimizing manual effort. ⦿ Ensures security & compliance – Enforces standardized policies. ⦿ Enhances visibility & control – Manages API practices from design to deprecation. 24 API Governance
- 25. 25 API Governance -Concepts 25 Ruleset 1 - API Best Practices - API name should be below 50 characters - API version should start with “v” Ruleset 2 - Finance Best Practices - Alll endpoints are served over HTTPS - Standardized Error Responses API: Travel Label: Travel - API: Payment API Label: Finance Finance Policy API: Stock Market API Label: Finance Finance Policy Policy: Finance Policy - Apply to: All APIs / Label ( Finance ) - Enforcement: API Create / API Update / API Deploy / API Publish
- 26. Dashboards to monitorand manage the governance policies enforced on APIs Governance Dashboard 26
- 27. CI/CD Driven APIGovernance 27 Developer Initialize apictl SampleStore API Project API Definition Template SampleStore OpenAPI Spec Environment Parameter File apictl Validate API Project Deploy to Dev Environment Run Tests in Dev Deploy to Prod Environment Import Import Trigger Build Write Add Tests Update with API Data Commit Dev Prod On Failure: Make Amendments 1 2 3 4 5 6 Pipeline Import?dryrun=true API Project contains ● Definition file (OpenAPI / GraphQL SDL / Async API) ● API.yaml ● Documents ● Certificates
- 28. AI Governance 28 ● NaturalLanguage Policies ⦿ Define rules using English documents. ● Automated Quality Checks ⦿ Detect design flaws & best practice violations. ● Security & Compliance ⦿ Prevent vulnerabilities before deployment. ● Governance Insights ⦿ Monitor policy adherence & effectiveness. Source: AI (ImageFX) Generated Note - This is currently available in Bijira (APIM SaaS)
- 29. AI Governance 29 For Admins ForAPI Creators
- 30. 30 What We've Accomplished CreateAPI Apply QoS Policies Validate Compliance Deploy API Test API Publish API Discover API Subscribe API Test API B2B API Consumption API Publisher API Developer Portal/Marketplace API Gateway Product Mgt Backend Service Product Database Inventory System API Creator API Product Manager App Developer API Consumer ( B2B partners, vendors, and retailers )
- 31.
- 32. 32 What We've Accomplished CreateAPI Apply QoS Policies Validate Compliance Deploy API Test API Publish API Discover API Subscribe API Test API B2B API Consumption API Publisher API Developer Portal/Marketplace API Gateway Product Mgt Backend Service Product Database Inventory System API Creator API Product Manager App Developer API Consumer ( B2B partners, vendors, and retailers )
- 33. AI-Powered API Discoveryand Consumption
- 34. ● The Challenges ⦿Traditional API discovery relies on keyword searches, limiting accuracy. ⦿ Finding relevant APIs can be time-consuming and inefficient. ⦿ Lack of intelligent recommendations makes API selection difficult. ● How Marketplace Assistant Solves It ⦿ Uses AI to enable natural language interaction with APIs. ⦿ Provides smart recommendations beyond basic keyword searches. ⦿ Enhances API discovery with contextual understanding and insights. AI-Powered API Discovery and Consumption 34
- 35. ● Business Impact ⦿Speeds up API discovery and selection, improving efficiency. ⦿ Enhances developer experience with intelligent recommendations. ⦿ Drives better API adoption and usage, maximizing business value. AI-Powered API Discovery and Consumption 35
- 36. AI-Powered API Discoveryand Consumption 36
- 37. 37 What We've Accomplished CreateAPI Apply QoS Policies Validate Compliance Deploy API Test API Publish API Discover API Subscribe API Test API B2B API Consumption API Publisher API Developer Portal/Marketplace API Gateway Product Mgt Backend Service Product Database Inventory System API Creator API Product Manager App Developer API Consumer ( B2B partners, vendors, and retailers )
- 38. API Chat forTesting
- 39. ● The Challenges ⦿Manual test scenario creation and payload mocking are time-consuming. ⦿ Managing sequences with multiple resource calls often requires coding and technical expertise. ● How API Test Chat Helps ⦿ Allows engaging with APIs using natural language through API Chat. ⦿ Eliminates the need for manual test scenario creation and payload mocking. ⦿ Enables easy communication with APIs without coding, even for complex sequences. API Chat for Testing 39
- 40. ● Business Impact ⦿Streamlines and simplifies API testing, making it more efficient. ⦿ Increases accessibility for non-technical users, improving collaboration. ⦿ Reduces development time and effort, speeding up the API lifecycle. API Chat for Testing 40
- 41. API Chat forTesting 41
- 42. 42 What We've Accomplished CreateAPI Apply QoS Policies Validate Compliance Deploy API Test API Publish API Discover API Subscribe API Test API B2B API Consumption API Publisher API Developer Portal/Marketplace API Gateway Product Mgt Backend Service Product Database Inventory System API Creator API Product Manager App Developer API Consumer ( B2B partners, vendors, and retailers )
- 43.
- 44. ● The Challenge ⦿Managing API access across business units and partners requires structured control ⦿ Different organizations need specific security, rate limiting, and governance policies ⦿ Manual API provisioning increases administrative effort ⦿ Limited visibility makes monitoring and governance complex ● How B2B API Management Solves It ⦿ Role-Based Access Control (RBAC) defines access at organization and user levels ⦿ Hierarchical API access structures visibility and policy enforcement ⦿ Automated API provisioning simplifies onboarding for partners and teams ⦿ Custom organization-specific policies enforce security, rate limits, and governance 44 B2B API Consumption with Organization Support
- 45. ● Business Impact ⦿Enhances security and governance with structured API access rules ⦿ Simplifies onboarding and management for partners and internal teams ⦿ Improves visibility and control over API consumption at the organization level 45 B2B API Consumption with Organization Support
- 46. Username Partner OrganizationRole Responsibility Ethan SupplySync (Supplier and Manufacturer) App Developer (Internal/subscriber) Discover, subscribe and utilize the Product Management API Bob FulfillHub (Warehouse and Fulfillment Center) Sophie RetailNet (Retail Partner) 46 B2B Partner Organizations
- 47. 47 What We've Accomplished CreateAPI Apply QoS Policies Validate Compliance Deploy API Test API Publish API Discover API Subscribe API Test API B2B API Consumption API Publisher API Developer Portal/Marketplace API Gateway Product Mgt Backend Service Product Database Inventory System API Creator API Product Manager App Developer API Consumer ( B2B partners, vendors, and retailers )
- 48. AI-Powered Developer PortalTheming
- 49. AI-Powered Developer PortalTheming 49 ● Domain-Based Theming ⦿ Users provide their organization's domain for AI-driven styling. ● Brand Identity Extraction ⦿ AI extracts colors, fonts, and styles from the organization's website. ● Automated Customization ⦿ AI applies a brand-aligned theme instantly. Note - This is currently available in Bijira (APIM SaaS)
- 50.
- 51. AI Service Architecture 51 -Authentication Gateway - Authorization - Ratelimit (Token) API Marketplace Service Design Assistant Service API Chat Service Vector Database Choreo Data Plane LLM LLM LLM
- 52.
- 53. ● AI-Driven Documentation& Mocking ⦿ Automated API Documentation – Generates OpenAPI documentation automatically, reducing manual effort. ⦿ AI-Powered API Mocking – Auto-generates realistic mock APIs to enhance API testing workflows. ● AI-Enhanced SDK & API Development ⦿ AI-Generated SDKs – Creates SDKs optimized for multiple programming languages. ⦿ Custom SDK Creation – Modify and customize SDKs based on project-specific requirements. ● AI-Driven Insights & Analytics Future AI Powered Capabilities 53
- 54. APIs Powering AgenticAI Workflows (Coming Soon!)
- 55. APIs Powering AgenticAI Workflows (Coming Soon!) 55 ● Empower AI Agents ⦿ Utilize APIs as functional tools. ● API-to-Tool Conversion ⦿ Transform APIs or resources into AI Agent compatible tools. ● Enhanced Metadata for AI Agents ⦿ Provide structured metadata to help AI agents understand and use tools effectively. ● Tool Marketplace Integration ⦿ Push tools for easy access and adoption. ● Seamless MCP Integration within gateway ⦿ Easily integrate tools with MCP (Model Context Protocol) support.
- 56. Key Takeaways &Next Steps
- 57. ● AI-Driven Efficiency ⦿From design to governance, AI enhances automation, compliance, and security. ● Simplified API Management ⦿ AI-powered features streamline branding, governance, testing, and consumption. ● Stronger Security & Governance ⦿ AI enforces policies, detects anomalies, and optimizes CI/CD workflows. ● Apply AI in Real-World Projects ⦿ Leverage AI-driven API management with WSO2 API Manager. ● Next Steps ⦿ Explore AI-powered capabilities and integrate them into your API workflows with WSO2 API Manager. Key Takeaways & Next Steps 57
- 58. Try WSO2’s APIManagement Solutions Today! 58 ● Run Anywhere ⦿ 🔗 WSO2 API Manager - https://wso2.com/api-manager ● WSO2 APIM SaaS - Bijira ⦿ 🔗 Sign Up & Explore Bijira – https://bijira.dev ⦿ 🔗 For more information – https://wso2.com/bijira ● Lab Session Materials ⦿ 🔗 https://github.com/wso2con/2025-BCN-apim-tutorial
- 59.
- 60. Upcoming API ManagementSessions ● Conference Day 1 (Tuesday, March 18th) 60
- 61. Upcoming API ManagementSessions 61 ● Conference Day 3 (Thursday, March 20th)
- 62.
- 63.
Editor's Notes
- #1 Welcome, everyone! In this session, we’ll explore how AI is revolutionizing API management across design, testing, governance, and consumption using WSO2 API Manager. Our use case for today is building an AI-powered customer support API, and we’ll walk through how WSO2’s AI-driven capabilities enhance various API lifecycle stages. By the end of this session, you’ll have hands-on experience implementing AI-powered API solutions using WSO2.
- #6 We’ll focus on WSO2 API Manager as our platform of choice to demonstrate AI’s role in API management. From design to governance, we will leverage AI capabilities within WSO2 to improve efficiency and security.
- #17 With WSO2 API Manager, API design is not just about defining endpoints—it’s about optimizing them with AI-powered recommendations. This ensures the API we are defining is efficient, scalable, and well-documented.
- #20 AI prompt I have an old system managing my product inventory, but it’s outdated and needs to be modernised. I need an API that can efficiently handle products and their details - name, description, price, images, etc. while ensuring stock levels stay in sync. Include a way to manage inventory adjustments so stock stays accurate across different locations or sales channels. I want to track transportation fleets in real time. It should handle vehicle locations, route changes, fuel levels, and delivery statuses. The API should sync data across systems and provide live updates. Can you create an API for this scenario?
- #22 Governance is crucial for managing large-scale APIs. AI automates policy enforcement, reducing human effort and ensuring consistency across teams. We will now explore how to define governance rules and enforce them using AI-powered tools.
- #26 A governance dashboard helps organizations track API performance and compliance. AI enhances this by proactively identifying issues, reducing security risks, and ensuring APIs remain compliant.
- #27 CI/CD automation is critical for modern API development. AI ensures that governance is embedded in the pipeline, preventing security and compliance breaches before APIs go live.
- #33 Discovering the right APIs and integrating them efficiently is crucial. WSO2 API Manager offers AI-driven recommendations, optimizing how APIs are selected and consumed.
- #35 AI Prompt - Hello! I'm looking to develop an online ecommerce store where I'll need to manage the products details, categories, inventory and the payments.
- #36 AI Prompt - Hello! I'm looking to develop an online ecommerce store where I'll need to manage the products details, categories, inventory and the payments.
- #41 AI Prompt Add two new products to the catalog with the below information and update the inventory: Product ID: 12345 Name: Wireless Bluetooth Headphones Price: 79.99 USD Category: Electronics Brand: SoundX Stock: 50 Product ID: 67890 Name: Smart Fitness Watch Price: 129.99 USD Category: Wearables Brand: FitPro Stock: 100 Return the newly added products
- #43 APIs facilitate B2B collaboration. AI-driven access control and analytics help organizations share APIs securely and efficiently.
- #48 Branding is more than just a logo—it defines the API’s identity and impacts developer adoption. AI enhances API branding by analyzing developer behavior, suggesting optimized descriptions, and even generating personalized themes in WSO2 API Manager. We’ll explore how AI can dynamically adjust API branding elements to improve visibility and engagement within the Developer Portal.
- #53 AI Gateway Capabilities - Supports multi vendor routing, prompt engineering capabilities, semantic caching etc.
- #54 AI agents need APIs to function. By designing APIs to support AI-driven workflows, we can create powerful automation and data-driven applications.
- #55 MCP is an open protocol that standardizes how applications provide context to LLMs. Think of it like a USB-C port for AI applications—just as USB-C enables seamless connections between devices and peripherals, MCP creates a universal standard for linking AI models to various data sources and tools, ensuring compatibility, efficiency, and flexibility in AI-driven applications.
- #56 We’ve explored how AI-driven capabilities enhance API management across various stages, from design and testing to governance and branding. WSO2 API Manager integrates AI to automate repetitive tasks, improve security, and optimize API performance. Now, it's time to apply these learnings! Explore WSO2’s AI-powered features in your own API projects, experiment with branding automation, governance enforcement, and AI-driven documentation, and continue innovating in the API space. Thank you for joining this session! Any questions?