Authenticating.com API Experience Review
Bill Doerrfeld | May 10, 2020
I was recently tasked to audit the Developer Experience of the Authenticating.com APIs, a suite of low code APIs for developers to add trust and safety to their applications.
More Info: Developer Experience Reviews
My goal was to provide actionable insights to improve the DX and marketability of the service. The project culminated in a 14 page report and 1-1 consultation.
Overall, though I found developer experience hangups with Authenticating.com, the core service has strong market potential.
Certain API design incongruities were found while testing. Certain API calls didn't match documentation in practice. Error handling was inconsistent. No sandbox existed, no developer account dashboard was live, and doc design looked like a basic template. I also found endpoint naming inconsistencies, and other style issues.
My recommendations included standardizing API design and style elements, and improving documentation to be more explicit for more use cases and circumstances. I recommended adding an OpenAPI specification as a source of truth, and a sandbox for API testing.
As the API landscape grows, developer experience is becoming more of a top concern, especially for newcomers trying to get a foothold in the market. I really enjoyed this project and hope to do more developer experience reviews in the future!
Other Blog Posts
Here are my slides from my opening keynote at Nordic APIs Summit 2026, exploring how AI agents are changing API interaction patterns.
My latest research for AI Security University looks at AI tools and resources for pen-testers, red teamers, and bug bounty hunters.
My commissioned feature for Arthur D. Little's PRISM publication analyzes the big shifts underway now that generating code is becoming trivial.
Was happy to participate as a speaker and moderator at SecureMaine on October 8th, 2026.
My latest for LeadDev interviews a Meta engineer who built an agentic system to optimize their capacity planning, leading to real power use savings.
I set out expecting to write an article about how every enterprise was jumping on trendy alternative or "neo" clouds. That ended up not being the case.
Join the virtual AI Pen-Testing Conference to explore how AI is changing penetration testing, red teaming, and the security testing of AI systems.
Counting down to Nordic APIs Summit 2026 in Stockholm, featuring 60+ speakers exploring agentic AI, APIs, MCP, and security.
I covered a Yale and GitHub report on LeadDev that explores developer attitudes on climate change and curbing IT waste.
Does your agent really need access to every tool call under the sun?
