Bill Doerrfeld
@doerrfeldbill.bsky.social
Tech journalist and editor. Editor of Nordic APIs, the API blog. I also contribute to enterprise IT publications and provide content, analysis, and consulting for tech companies.
Knowledge decay has plagued software teams for decades. But IBM's Neel Sundaresan thinks AI can finally help close this gap. My latest for @leaddev.com: leaddev.com/ai/how-to-av...
How to avoid knowledge decay in software engineering
Can AI finally fix the knowledge decay issue that’s plagued software engineering teams for decades? Neel Sundaresan, GM at IBM, thinks so.
leaddev.com
How do you avoid shadow MCP servers at enterprise scale? You can't. Just kidding. I left some recommendations on the @zuplo.com blog: zuplo.com/blog/how-to-...
How to Avoid Shadow MCP Servers in the Enterprise - Zuplo
Shadow MCP servers are the new shadow IT. Here's how to bring them under enterprise governance with inventory, monitoring, least privilege, and a gateway.
zuplo.com
What is zero standing privilege (ZSP)? Today, I look at this new and emerging cybersecurity topic and why it's so relevant in the agentic AI era. via @curity.io: curity.io/blog/what-is...
What Is Zero Standing Privilege? | Curity
Zero standing privilege removes long-lived permissions entirely, granting identities temporary, task-specific access only at the moment of execution. Learn how it works, why it matters for agentic AI,...
curity.io
What's the difference between an MCP registry and an MCP gateway? Both are evolving quickly: here are the early patterns and what the early examples look like right now. zuplo.com/blog/mcp-reg...
MCP Registry vs. MCP Gateway: What's the Difference? - Zuplo
A registry is a static catalog for discovery, whereas a gateway is the control plane to manage, curate, and secure MCP tool access.
zuplo.com
3 years into AI coding, code duplication is up 81%, code reuse is down 70%, and legacy refactoring fell 74%. Guess creating new code is "easier" than maintaining old code... GitClear analyzed 623M real-world code changes, covered first on @leaddev.com leaddev.com/ai/code-main...
Code maintainability plummets in the AI coding era
New research reveals that AI coding is driving up duplication, suppressing errors, and leaving legacy code untouched.
leaddev.com
If you're using #MCP in your workflows or building MCP servers, be sure to avoid these common MCP security anti-patterns. via @zuplo.com zuplo.com/blog/7-commo...
7 Common MCP Security Flaws and Vulnerabilities - Zuplo
If you're using MCP in your workflows or building MCP servers, be sure to avoid these common MCP security anti-patterns.
zuplo.com
AI-coding agents are the default. So, what now? Synced with Tom Moor, head of engineering at Linear, for this piece on @leaddev.com to find out. Give it a read: leaddev.com/ai/ai-coding...
AI-coding agents are now the default. What comes next?
How Linear went agent-first overnight, what the productivity numbers look like, and what to manage when AI agents become the default.
leaddev.com
AI got proprietary, fast. But open infrastructure still matters. My latest feature for @infoworld.bsky.social makes the case why open infrastructure will define the AI era. www.infoworld.com/article/4186...
Why open infrastructure will define the AI era
Remember when writing code was free? AI is pushing software development into usage-billed proprietary platforms. But history repeats itself, and open foundations tend to win.
infoworld.com
writing my second response on AI, this one on ethics. here's my list, what am I missing? come on bsky, you were built for this day 😉 * datacenters that are too loud and use fresh water * data labeling work that is extractive & exploitative, chasing low pay * models trained on data without consent
How do you get AI costs down? It takes a combination of visibility, governance, smart model selection, quality API design, MCP optimizations, and more. Yesterday's LiveCast on AI cost control is now live on the @nordicapis.com YouTube here: youtu.be/TWB9J-4oswg?...
LiveCast: AI Cost Control
YouTube video by Nordic APIs
youtu.be
The rapid shutdown of Fable and Mythos demonstrates why engineering teams need model-agnostic foundations. @leaddev.com leaddev.com/ai/ai-models...
AI models can disappear overnight. Is your engineering team built to survive it?
The quick Mythos and Fable shutdown demonstrates why engineering teams need a model-agnostic foundation to hedge their bets.
leaddev.com
AI layoffs seem everywhere. But they're overshadowing the real economic reasons behind cuts and the net-positive talent redistributions happening at large. My latest for @leaddev.com digs in: leaddev.com/ai/the-ai-ta...
The AI talent story everyone is missing
AI isn’t eliminating engineering jobs – it’s redistributing them, and the companies navigating this well are hiring for judgment, not output.
leaddev.com
What MCP servers are there for working with databases? My latest for @infoworld.bsky.social reviews a handful of MCP servers and agent-ready tools for database management. www.infoworld.com/article/4181...
10 MCP servers to connect LLMs with databases
Use these official MCP servers to interact with the leading database platforms via natural language through your LLM-assisted tools.
infoworld.com
The MCP infrastructure space is booming. Nowhere is this more evident than the surge in MCP gateways. Here's my comparison of 10 standout ones: zuplo.com/blog/mcp-gat...
MCP Gateway Comparison: 10 Tools for Governing AI Agent Access - Zuplo
An MCP gateway is becoming table stakes for governing AI agent access to tools and APIs. We compare 10 leading MCP gateways across security, observability, deployment model, and standout features.
zuplo.com
When do you call it quits? Real software leaders know you can't have endless innovation without also knowing when to cancel unviable projects. But it takes a certain muscle to know when to pull the plug. My latest DirectorPlus via @leaddev.com: leaddev.com/leadership/w...
When to kill a software project
How NinjaOne’s SVP of data and AI uses timeboxing, kill criteria, and a single dissenter model to cut failing projects early and protect engineering resources.
leaddev.com
MCP is a force multiplier for context engineering. See my latest @infoworld.bsky.social feature for more... context. Hehe. www.infoworld.com/article/4175...
The role of MCP in context engineering
Developers are discovering that Model Context Protocol shines at providing AI coding agents with highly relevant software engineering context, on demand, at run time.
infoworld.com
What's wrong with API keys? Well, they're long-lived, leaked constantly, easily reused by hackers, rarely cycled, and usually provide overpermissioned access. More thinking on this on @nordicapis.com here: nordicapis.com/10-security-...
10 Security Issues With API Keys | Nordic APIs |
API keys introduce significant security risks due to their static, reusable nature and lack of identity context. Learn the top API key vulnerabilities and how to secure modern APIs.
nordicapis.com
Well, apidays NYC 2026 is a wrap! The most obvious focus this year? Agents. APIs are a form of context for agentic AI, and there are emerging tactics for setting them up for success.
Had a blast MC'ing sessions at apidays NYC this week!
95% faster seller prep time. 16% better attainment. $2.7 million in new sales opportunities. 1,700 hours saved. My latest for @cio.com features real results from CIOs actively deploying AI agents to accelerate sales and revenue workflows. www.cio.com/article/4164...
How CIOs use AI agents to accelerate revenue growth
Sales and revenue combine as a key ROI-focused domain for enterprise AI agents. CIOs are locking in to how they aid workflows, from targeted prospecting and account research, to follow-ups and other r...
cio.com
My latest for @infoworld.bsky.social looks at the downsides of hastily bolting AI onto existing products, and what to do instead. www.infoworld.com/article/4161...
How to add AI to an existing product (without annoying users)
Bolting AI onto your product willy-nilly can hurt more than it helps. Experts weigh in on common mistakes around AI feature creep and how to guide successful pilots.
infoworld.com
Excited to share that I’ll be at apidays NYC next week! I'll be helping MC tracks across both days. Who's gonna be around? www.apidays.global/events/new-y...
Cloudflare rebuilt Next.js over a weekend using agentic coding. I caught up with Cloudflare CTO Dane Knecht to chat about the implications for software strategy. As he says, "This kind of reinvents the factory floor." leaddev.com/ai/how-cloud...
How Cloudflare rebuilt Next.js in a weekend
Cloudflare rebuilt Next.js in a matter of days. CTO Dane Knecht says it’s only the tipping point of what’s to come with agentic coding.
leaddev.com
Join us in Stockholm to talk agentic AI and APIs! Super early bird registration for @nordicapis.com yearly summit is open 😎 🎟️ tickets: nordicapis.com/events/platf... 🎤 speak: nordicapis.com/call-speakers/
Platform Summit 2026 | Nordic APIs
Join API industry leaders at the Platform Summit, Nordic APIs’ flagship event, to tackle the many challenges facing API-heavy enterprise software architectures.
nordicapis.com
Nice to be part of this @infoworld.bsky.social feature by @doerrfeldbill.bsky.social on building enterprise-grade agentic systems. Hot take: Determine what's adaptive vs. deterministic, and codify the latter. Not everything needs an LLM in the loop. www.infoworld.com/article/4154...
Best practices for building agentic systems
Which technologies, designs, standards, development approaches, and security practices are gaining momentum in multi-agent enterprise systems? We asked the experts.
infoworld.com
What actually goes into building enterprise-grade AI agents? My latest for @infoworld.bsky.social explores the emerging best practices behind agentic systems: www.infoworld.com/article/4154...
Best practices for building agentic systems
Which technologies, designs, standards, development approaches, and security practices are gaining momentum in multi-agent enterprise systems? We asked the experts.
infoworld.com
Today I look into ING Bank's journey developing a custom-made service mesh to manage its 2k microservices portfolio. We covered their API-first transition on @nordicapis.com in 2017, so it's pretty cool to see the journey coming full-circle after 9 years. nordicapis.com/how-ing-bank...
How ING Bank Manages 2,000 Microservices With Service Mesh | Nordic APIs |
How ING scaled 2,000 microservices with a service mesh, covering governance, discovery, and security lessons.
nordicapis.com
Calling out folks in the Stockholm and Nordic area: @nordicapis.com, Akamai, and @curity.io are hosting a pretty dreamy event next month: a dinner cruise through the Stockholm archipelago 🚢 Check out the details and register interest here: nordicapis.com/events/api-s...
AI & API Security Dinner | Nordic APIs
Join Nordic APIs, Akamai and Curity for a night of dinner, AI & APIs onboard a classic archipelago ship.
nordicapis.com
What goes into an enterprise-grade MCP registry? My latest for @infoworld.bsky.social goes deep into this topic: www.infoworld.com/article/4145...
How to build an enterprise-grade MCP registry
MCP registries are emerging as the new integration catalog for AI agents. Building one for the enterprise requires semantic discovery, strong governance, and developer-friendly controls.
infoworld.com
