Build

APIs & Integrations

How systems talk to each other.

The territory

30 core terms mapped for this field, ranked by how often builders reach for them. Each one is a future entry. Want to bust one? One entry, one file, one pull request.

  • WebhookURL you expose that another service POSTs events to"have it ping my app when something happens" · "reverse API call"
  • REST APIResource-based HTTP interface using verbs and URL paths"normal API with URLs" · "the regular kind of API"
  • API KeyStatic secret string identifying the caller on each request"the secret code you paste in" · "the token thing from the dashboard"
  • Rate LimitCap on requests per window before the API rejects you"it cuts me off if I call too fast" · "429 errors"
  • EndpointOne callable URL + method on an API"the specific address you hit" · "the route you call"
  • HTTP Status Codes (2xx/4xx/5xx)Numeric result classes signaling success, client error, server error"what does a 404 mean" · "the number it sends back"
  • PayloadThe body of data sent or returned in a request"the actual stuff being sent" · "the JSON blob"
  • Query Parameters vs Path Parameters vs Request BodyThree places to put input on a request"the bit after the question mark" · "where do I put the inputs"
  • Content-Type / MIME TypeHeader declaring the format of the body"the application/json header" · "it says wrong format"
  • PollingRepeatedly asking an API whether anything changed"check every few seconds" · "keep asking if it's done yet"
  • TimeoutMax wait before abandoning an outbound call"it just hangs forever" · "give up after 30 seconds"
  • Idempotency KeyClient-supplied ID so retries don't duplicate an operation"so it doesn't charge them twice" · "safe to retry"
  • Exponential BackoffRetry with progressively longer waits after failures"wait longer each time it fails" · "don't hammer it"
  • CORSBrowser rule controlling which origins may call an API"blocked by the browser" · "works in Postman but not my site"
  • Pagination (Cursor vs Offset)Fetching results in chunks via page tokens or offsets"only gives me 100 at a time" · "how do I get the next batch"
  • API ProxyYour server relays calls to hide keys and reshape data"call it from my server instead" · "hide the key behind my backend"
  • GraphQLQuery language where the client specifies exact fields returned"ask for only the fields I want" · "one endpoint for everything"
  • Webhook Signature VerificationChecking an HMAC header proves the webhook is genuine"make sure it's really from them" · "signing secret"
  • OpenAPI SpecificationMachine-readable contract describing an API's endpoints and shapes"the swagger file" · "the openapi spec"
  • SDK / Client LibraryLanguage-native wrapper hiding raw HTTP calls"the official package" · "the npm thing instead of curl"
  • Sandbox / Test ModeFake-data environment for integrating without real effects"practice mode" · "test keys"
  • Message QueueBuffer that holds jobs for workers to consume later"put it in line to process later" · "the backlog pipe"
  • Integration Platform as a Service (iPaaS)Hosted service wiring apps together via triggers and actions"the Zapier kind of thing" · "connect app A to app B"
  • Server-Sent Events (SSE)One-way streaming push from server to browser over HTTP"stream text as it arrives" · "like ChatGPT typing"
  • WebSocketPersistent two-way connection for live bidirectional messages"keep the line open" · "real-time back-and-forth"
  • Asynchronous Job PatternReturn immediately with a job ID, notify when done"it takes too long to wait" · "kick it off and tell me later"
  • Data Mapping / Field MappingTranslating one system's field names into another's"match their columns to mine" · "the translation table"
  • CRUDCreate, read, update, delete: the four basic operations"the basic four things" · "add edit delete list"
  • API VersioningFreezing an API shape so upgrades don't break clients"don't break my old code" · "the v1 in the URL"
  • Batch / Bulk EndpointOne call that operates on many records at once"send 500 at once" · "avoid a call per row"

Deeper in the field

  • HTTP Methods Request verbs such as GET, POST, PUT, PATCH, and DELETE
  • Request Headers Metadata controlling format, authentication, caching, and request behavior
  • Error Response Structured failure body with a stable code, message, and details
  • API Documentation Human-readable instructions, examples, limits, and authentication requirements
  • multipart/form-data Encoding for uploading files alongside fields
  • Presigned URL Temporary link authorizing a direct upload or download
  • Serialization / Deserialization Converting application data to and from formats such as JSON
  • Long Polling Holding a request open until data arrives or timeout
  • Fan-out One event dispatched to many downstream consumers
  • Event Bus / Pub-Sub Publishers emit events, subscribers react independently
  • At-Least-Once Delivery Guarantee that messages arrive, possibly duplicated
  • Deduplication Detecting repeated requests or events so effects happen only once
  • Retry Policy Rules for which failures retry, how often, and how long
  • Circuit Breaker Stop calling a failing dependency until it recovers
  • Dead Letter Queue Holding pen for messages that repeatedly failed processing
  • Middleware Code that intercepts requests before your handler runs
  • API Gateway Front door that routes, authenticates, and throttles API traffic
  • Backend for Frontend (BFF) Backend built for one client, serving exactly what it needs
  • Response Normalization Reshaping third-party output into your own schema
  • ETag / Conditional Request Cache validator letting servers reply "not modified"
  • gRPC Fast binary RPC protocol using protobuf contracts
  • RPC-style API Endpoints named as actions rather than resources
  • Webhook Replay Re-sending past events to recover from downtime
  • Sync Cursor / Watermark Saved position marking where the last sync stopped
  • Incremental Sync Transfer only records changed since the previous successful synchronization
  • Upsert Create a record when absent; otherwise update the existing record
  • Conflict Resolution Rules deciding which system wins when synchronized records diverge
  • Reconciliation Periodic full compare to fix drift between two systems
  • Eventual Consistency Connected systems may reflect the same update at different times
  • Schema Registry Central store of agreed data schemas producers and consumers validate against
  • API Deprecation Retiring an endpoint while giving clients time and guidance to migrate