TechWithHannah🌻

DA @HubSpot | @getpostman Leader 🤓 | APIs | Writer ✍️ | Cat Lady 🐈‍⬛ | ADHD ✨ | Future Farmer 🌱| She/Her | Opinions are mine #inclusion #naturelover

[TechWithHannah🌻 @TechWithHannah]

🚀 March 2026 API Rollup! Highlights:
🗓️ New date-based versioning (/YYYY-MM/)
📊 File Ingestion API (beta) for Data Studio
💬 Conversations API enhancements (incl. LLM actor + ticket associations
🎥 DX insights from our Postman event
Explore more here: https://t.co/IwuzXcg5N4

[HubSpot for Developers @HubSpotDev]

We're joining @GetPostman on March 26 at 12 PM ET to talk what it really takes to build a great developer experience. Featuring our very own @TechWithHannah plus speakers from @BuildWithFern and @PaddleHQ.

Register today and tune in 👉 https://t.co/BPeSRuyPey

[TechWithHannah🌻 @TechWithHannah]

January 2026 @HubSpotDev #API updates on @getpostman 🚀
Omnichannel Breeze Customer Agent, Forecast Read API (beta), OAuth v3 + more...
🔗https://t.co/1awkV2La66

[HubSpot for Developers @HubSpotDev]

OAuth looks simple — until production.

Then it’s about expiring tokens, refresh under load, multi-tenant isolation, and monitoring.

@TechWithHannah shares production-ready OAuth token patterns for @HubSpot integrations → https://t.co/1qlcgKUSKi

[TechWithHannah🌻 @TechWithHannah]

New @HubSpotDev #API updates just dropped on our @getpostman workspace 🚀
IP Ranges API, better list filtering, CPQ template selection, GA app uninstall + more.
🔗 https://t.co/Obfn0k6TTR

HubSpot Devs: what are you most excited about?👀

[TechWithHannah🌻 @TechWithHannah]

🚀 Quick Survey: Help Improve HubSpot’s Public API Workspace on @getpostman !

We’re launching a 1-min Dev Experience Survey to hear how you use our Postman workspace. What’s great? What’s confusing? What needs fixing?

👉 Survey: https://t.co/4SnhfcFG59

#api #postman #hubspot

[TechWithHannah🌻 @TechWithHannah]

No more digging for API updates 👀
The @HubSpotDev Public API Workspace in @getpostman shows the latest API changelog entries right where you build.
🔗 https://t.co/kyj0rogQxi
#HubSpotDevelopers #Postman #API

[TechWithHannah🌻 @TechWithHannah]

Want to learn more about how to leverage third parties like @vercel with @HubSpotDev apps with our new Developer Platform Framework?

Then join us for our upcoming webinar, starting....SOON!
https://t.co/lDUg3tL2z5
#hubspot #hubspotdeveloper #vercel #aws #serverless

[TechWithHannah🌻 @TechWithHannah]

🚨 October 2025 @HubSpotDev #API Rollup… arriving in November?! No worries, our API changelogs tend to make a dramatic entrance.
See everything on our @getpostman workspace! Good things come to those who wait (and wait)! 😂 (sorry, I was moving!) 🔗https://t.co/NJUh0Bxmim

[HubSpot for Developers @HubSpotDev]

💡 Webhooks & custom workflow actions unlock new levels on the @HubSpot Developer Platform.

@TechWithHannah breaks down how to extend automations, call custom APIs & connect workflows with the structure and control of a modern, file-based framework.

➡️ https://t.co/YYNg9MFGuB

[TechWithHannah🌻 @TechWithHannah]

Just dropped a new post on the @HubSpotDev Blog:
Unlocking the Power of Webhooks & Custom Workflow Actions⚙️
Build smarter automations, trigger custom logic, and sync data in real time.
👉 https://t.co/ZwrHzOzGti

#HubSpot #webhooks #devs #workflows

[TechWithHannah🌻 @TechWithHannah]

@bytesofbree Happy anniversary!!! 💐💐

[Nikki Siapno @NikkiSiapno]

How do we design secure and safe APIs?

The rise in API-related security breaches highlights the necessity for robust API security.

Let’s look at 12 essential tips for improving API security:

𝗥𝗮𝘁𝗲 𝗹𝗶𝗺𝗶𝘁𝗶𝗻𝗴 𝗮𝗻𝗱 𝘁𝗵𝗿𝗼𝘁𝘁𝗹𝗶𝗻𝗴
↳ Throttling and rate limiting are vital for reducing API abuse and protecting against DDoS attacks as they manage request rates, which keeps our API available for legitimate users.

𝗜𝗻𝗽𝘂𝘁 𝘃𝗮𝗹𝗶𝗱𝗮𝘁𝗶𝗼𝗻
↳ Validating API inputs is crucial to safeguard against vulnerabilities like SQL injection and XSS. Whitelisting can also be useful here to ensure only valid data is processed.

𝗛𝗧𝗧𝗣𝗦
↳ Enforcing HTTPS for all API connections is a critical step in securing sensitive data since it ensures data encryption in transit, preventing attacks and interceptions.

𝗔𝘂𝘁𝗵𝗲𝗻𝘁𝗶𝗰𝗮𝘁𝗶𝗼𝗻
↳ Authentication is another must-have. Leverage strong authentication mechanisms, such as OAuth, to verify user or system identities.

𝗔𝘂𝘁𝗵𝗼𝗿𝗶𝘇𝗮𝘁𝗶𝗼𝗻
↳ After authentication comes authorization. Follow the least privilege principle to ensure users access only role-relevant data and actions, reducing unauthorized access risks.

𝗗𝗮𝘁𝗮 𝗲𝗻𝗰𝗿𝘆𝗽𝘁𝗶𝗼𝗻 𝗮𝘁 𝗿𝗲𝘀𝘁
↳ Encrypting sensitive data at rest is crucial to prevent unauthorized access and comply with data protection regulations.

𝗔𝗣𝗜 𝗴𝗮𝘁𝗲𝘄𝗮𝘆
↳ Deploy an API Gateway as a security layer, managing authentication, monitoring traffic, and enforcing policies like rate limits.

𝗥𝗲𝗴𝘂𝗹𝗮𝗿 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗮𝘂𝗱𝗶𝘁𝘀
↳ Regular security audits and penetration testing are advisable to identify and fix vulnerabilities, preventing exploitation and maintaining API security.

𝗗𝗲𝗽𝗲𝗻𝗱𝗲𝗻𝗰𝘆 𝗺𝗮𝗻𝗮𝗴𝗲𝗺𝗲𝗻𝘁
↳ Regularly updating software dependencies is important to mitigate risks from vulnerabilities in external libraries.

𝗟𝗼𝗴𝗴𝗶𝗻𝗴 𝗮𝗻𝗱 𝗺𝗼𝗻𝗶𝘁𝗼𝗿𝗶𝗻𝗴
↳ Investing in comprehensive logging and real-time monitoring is vital for early detection of suspicious activities, enabling swift incident response to mitigate security breaches.

𝗔𝗣𝗜 𝘃𝗲𝗿𝘀𝗶𝗼𝗻𝗶𝗻𝗴
↳ To manage changes and updates securely, utilize proper API versioning, which prevents compatibility and security issues.

API security isn’t a nice-to-have. It’s a must.
Following the techniques and best practices I’ve shared above will take you a long way, they are the foundations of building safe and secure APIs.

💭 What else would you add? 💬

--
Thanks to our partner Sonar who keeps our content free to the community.

Compiles ≠ Correct. LLMs boost speed. SonarQube ensures that speed is safe.

Check it out: https://t.co/KNjgshbBI5

[TechWithHannah🌻 @TechWithHannah]

@bytesofbree 👏

[Bree @bytesofbree]

AI, But Make It Responsible! Happening today @AllThingsOpen at 2:45 PM in Ballroom C. We'll be talking about bias in AI and ways to create inclusive and trustworthy tools 🙂

[TechWithHannah🌻 @TechWithHannah]

🚀 @getpostman State of the API 2025 is out! API strategy = AI strategy.
- 82% of orgs are API-first (+12%)
- 65% generate API revenue
- Only 24% design APIs for AI agents
Don’t fall behind—check out the report!
🔗https://t.co/vXTzZbQ1eH
#APIs #AI #TechReport #StateOfTheAPI

[Postman @getpostman]

🤯 89% of devs use #AI daily. Only 24% build APIs agents can use.

AI now reads your APIs more than humans do. If your docs aren’t built for machines, your APIs won’t keep up.

See how leading teams are closing the gap 👇
https://t.co/Islybm5O5t

[TechWithHannah🌻 @TechWithHannah]

I'm so excited to see @HubSpotDev being repped at @getpostman 's #APIGTM virtual event right now!! 🧡

Make sure to stick around for @HoardingInfo 's session coming up soon to learn more about how we use Postman for #DevRel at @HubSpot 🚀

🔗https://t.co/ZeM83VNVwH

[Danny Dainton @DannyDainton]

Ready to make this week amazing?

Join the @getpostman Discord Server!

✅ Connect with other Postman users
✅ Engage in our weekly challenges
✅ Get expert help & support
✅ Share + learn about APIs

https://t.co/69PUgziFh4

#postman #APIs #community

[TechWithHannah🌻 @TechWithHannah]

@bytesofbree this is sooo cute!