Nordic APIs Summit 2026 is back in Stockholm from October 12-14, 2026, bringing together the global API community to explore what comes next for secure, intelligent, and connected platform development.
This year’s theme is Evolving APIs for the Agentic Era. That framing matters: APIs are no longer just integration points between services. They are the control surface for AI agents, platform capabilities, identity boundaries, data access, and enterprise governance.
Early bird registration ends August 24, 2026.
Event Details
| Detail | Information |
|---|---|
| Event | Nordic APIs Summit 2026 |
| Date | October 12-14, 2026 |
| Location | Stockholm, Sweden |
| Theme | Evolving APIs for the Agentic Era |
| Website | Nordic APIs Summit 2026 |
Why Attend
Nordic APIs Summit is designed for people building and operating modern API ecosystems: API architects, platform engineers, security leaders, product teams, and technology executives who need practical guidance rather than abstract trend talk.
Expect expert speakers, actionable insights, and meaningful conversations around how APIs are evolving as enterprises adopt AI, modular platforms, zero-trust security, and more demanding compliance models.
Topics at Nordic APIs Summit 2026
The 2026 program focuses on the most pressing challenges and innovations shaping modern platform development.
Next-Generation API-First Strategies
APIs sit at the core of modern enterprise architecture. Sessions will explore how teams design, secure, standardize, and scale API-driven development across products, platforms, and internal engineering organizations.
Identity and Access Management
As platforms become more interconnected and modular, identity sprawl becomes a real operating risk. Expect discussion around governance, zero-trust security, and access control patterns for increasingly distributed ecosystems.
Data Sovereignty and Compliance
Regulation and national data priorities are reshaping API strategies. The summit will cover how teams balance openness, interoperability, privacy, and control when data moves across systems and jurisdictions.
Cloud-Agnostic Architectures
Modern workloads need deployment flexibility across cloud, on-premises, and edge environments. API architecture plays a central role in keeping those systems portable without losing operational consistency.
Advances in AI
Generative AI and autonomous agents introduce new architectural requirements. APIs become the contracts that expose capabilities, constrain behavior, integrate enterprise systems, and make AI applications governable.
Industry Case Studies
Leaders from regulated sectors such as finance and healthcare will share real-world approaches to securing and scaling API-driven microservices ecosystems.
APIs in the Agentic Era
The agentic era changes the API conversation. When software agents can plan, call tools, retrieve context, and act across systems, API design becomes a security and governance discipline as much as an integration discipline.
That raises practical questions:
- Which APIs should agents be allowed to call?
- How should identity and authorization work for delegated actions?
- Where do rate limits, quotas, and approval flows belong?
- How do platform teams expose capabilities without creating unbounded risk?
- How do organizations keep API catalogs, contracts, and governance useful as AI accelerates development?
These are exactly the kinds of questions API and platform teams need to answer before agentic systems become business-critical.
Full Agenda
The two-day program (October 13–14) is packed with keynotes, panels, and breakout sessions across the Bankettsalen, C8, and C10 rooms at the Clarion Hotel Stockholm. Below is the complete schedule as published by Nordic APIs.
Day 1 — Tuesday, October 13
- 8:00 — Platform Summit Registration Opens (Hotel Foyer)
- 8:45 — Conference Welcome with Bill Doerrfeld, Editor in Chief of Nordic APIs (Bankettsalen)
- 8:55 — Opening Day 1 Keynotes (Bankettsalen)
- How AI Agents Change API Interaction Patterns — Bill Doerrfeld (Nordic APIs)
- Your Next Customer Won’t Be Human: Thinking Beyond Internal AI — Jacob Ideskog (Curity)
- Governance in the Age of AI Agents — Jeroen Delbarre (Axway)
- 10:10 — Coffee & Networking, Solution Showcase Opens (The Coffee Lounge)
- 10:40 — Morning Breakout Sessions (Bankettsalen, C8 & C10)
- Why Being “AI-Ready” Is as Much Psychology as Technology — Claire Barrett (APIsFirst)
- Spacetime Crystals and Coherent APIs — Gareth Faull (London Stock Exchange Group)
- From API Sprawl to Platform: Consolidating IoT Products, Teams, and Business Models — Sareh Zimmermann (dormakaba)
- Securing Your API: The OWASP Top 10 — Rob Allen (Nineteen Feet Limited)
- Verifying REST API Security with Fuzzing — Andrea Arcuri (Kristiania University of Applied Sciences)
- Agent Identity: The Missing Layer in Your API Security Stack — Jonas Iggbom (Curity)
- Your (Bad) API Design Is Costing You Tokens — Milton Carranza (MSD)
- Green Architecture: Less Fat, More Impact, More Efficiency! With API Green Score — Thierno Diallo (Axa France)
- DevOps-Driven API Governance in Practice — Andrzej Jarzyna (API Peak)
- 11:40 — Post-Session Q&A
- 11:50 — Lunch (Lobby Level)
- 12:50 — Afternoon Breakout Sessions (Bankettsalen, C8 & C10)
- You Don’t Need Kubernetes: How We Scaled Our API Layer Without the Infrastructure Theater — Faith Sodipe (Bauer Media Outdoor)
- From REST to MCP: 3 Years of Platform Evolution in Finance Tech — Marco Bassi (Spendesk)
- From 2 Scopes to Global Identity — Curtis J. Schofield (PagerDuty)
- Composable Architecture for AI Systems: APIs, MCP, Skills, Sub-Agents, and Workflows — Erik Wilde (OpenAPI Initiative)
- MCP vs. CLI vs. API vs. Browser: Choosing the Right Interface for AI Agents — Shalev Shalit (Willow)
- MCP Hands-on: How We Opened Up APIs for AI Agents — Andreas Siegel (pentacor)
- Building an AI-Ready Metadata Ecosystem at a Large Enterprise — Pavel Kornev (SAP SE)
- Unlocking Secure Data Sharing with Trusted Research Environments (TREs) and Data Spaces — Petteri Kivimäki (NIIS)
- Spec-Driven API Design: Treating APIs as Products with spec-kit and OpenSpec — Daniel Kocot (adorsys)
- 13:50 — Post-Session Q&A
- 14:00 — Session Break
- 14:10 — Afternoon Breakout Sessions (Bankettsalen, C8 & C10)
- Supercharging AI Governance with Agent Identities — Tyler Ayers (Google)
- Securing MCP for Financial APIs: OAuth2, Discovery, and Least Privilege — Roberto Bianchi (Spendesk)
- Register Once, Integrate Everywhere: FAPI 2.0 and a Federated Authorization Foundation for Public-Sector APIs — Roland Baum (umbrella.associates GmbH)
- Agentic Security Foundations — Gary Archer (Curity)
- Kong — the AI Control Layer — Alexander Jaballah (Kong)
- Federation, Reversed: A Consumer-First Future with Fission — David Stutt (WunderGraph)
- Building the Agent Tool Layer: From APIs to Governed MCPs — John Gren (Gravitee)
- Agent Gateway: The One Decision That Eliminates AI Engineering Complexity — Lin Sun (Solo.io)
- API Gateway – The Do’s and Don’ts — Memi Lavi (Polar Technologies)
- Real-Time or Not Real-Time: Why Your AI Agents Are Only as Good as Their Streaming APIs — Ankit Kumar (Aktivity)
- 15:10 — Post-Session Q&A
- 15:20 — Coffee & Networking (The Coffee Lounge)
- 15:50 — Closing Day 1 Keynotes (Bankettsalen)
- Panel Discussion: API Security in the Agentic Era — Bill Doerrfeld, Jacob Ideskog, Isabelle Mauny
- Agents — Viskleken on Steroids — Jürgen Schulze (i-val)
- 16:40 — Closing Statement, Day 1
- 16:50 — Networking Reception (The Coffee Lounge)
Day 2 — Wednesday, October 14
- 9:00 — Welcome to Day 2 (Bankettsalen)
- 9:10 — Opening Keynotes, Day 2 (Bankettsalen)
- Stop Building MCP Tools: A Better Way to Connect AI to Enterprise Data — Ahmet Soormally (WunderGraph)
- Panel Discussion: Designing For The Agentic Experience — Bill Doerrfeld, Erik Wilde, Kin Lane, Daniel Kocot
- 10:00 — Coffee & Networking (The Coffee Lounge)
- 10:30 — Morning Breakout Sessions (Bankettsalen, C8 & C10)
- APIs in the Age of AI: Guardrails, Governance, and Guts — Asmo Urpilainen (Frends)
- When the Caller Is an Agent: Governing the Agent-to-API Boundary in Enterprises — Rinu Dhanaraj (CVS Health)
- Governing Autonomous Agents — Judith Kahrer (Curity)
- How to Secure MCP Architectures for Enterprise Production — Kalle Sirkesalo (Eficode)
- Securing the MCP Layer: Discovery, Risk Scoring, and Governance for Agent-to-API Access — Baljeet Malhotra (TeejLab Inc.)
- MCP Is Not a Security Boundary — Yossi Eliaz (Incredibuild)
- Schema-Based Contract Testing: Preventing API Drift in Practice — Dr. Miriam Greis (adorsys)
- Beyond Status Codes: Enforcing Process Integrity When AI Agents Call Your APIs — Hongliu Cao (Amadeus)
- The AI-Powered Threat Frontier: Why API Security Is Your Ultimate Defense — Martijn Doedens (Akamai Technologies)
- 11:30 — Post-Session Q&A
- 11:40 — Lunch (Lobby Level)
- 12:30 — Afternoon Breakout Sessions (Bankettsalen, C8 & C10)
- The Agent Harness: Your New API Gateway — Natalia Venditto (Adobe)
- The API Guardrails Behind Safe Multi-Tenant AI Platforms — Luca Berton (Open Empower) 👈 I’ll be speaking here
- Your JWT Is Valid. Should Your API Still Trust It? — Thomas Darimont (Identity Tailor GmbH)
- Governing the Agentic Era — Johan Dahlstöm (Kong Inc)
- What Happens When LLMs and AI Agents Meet Your API Gateway — Anupama Sharma (ICA Gruppen)
- Evolving From API Gateway to AI Gateway — Dan Erez
- MCP Monetization — Josh Twist (Zuplo)
- When Agents Become Customers: Building Pay-Per-Use APIs with the Machine Payments Protocol — Sumit Amar (WEX)
- The Business Case for Secure API Access in the Age of AI — Sutton Maxwell (Curity)
- 13:30 — Post-Session Q&A
- 13:40 — Session Break
- 13:50 — Afternoon Breakout Sessions (Bankettsalen, C8 & C10)
- API Standards for AI Agents — Lorna Mitchell (TM Forum)
- Hide the Broker: A2A Should Stay HTTP, Event-Driven Underneath — Swen-Helge Huber (Solace)
- AI as a New Architectural Domain in an API and Event-Driven Platform — Axel Vuylsteke (The Value Hub)
- Securing AI Agents: A Practical Guide to Building an Agentic Platform — Isabelle Mauny (WSO2)
- Blind Spots to Blocked Threats: Akamai API Security Live in 10 Minutes — Martijn Doedens (Akamai Technologies)
- The Autonomous Enterprise: Where Agents Execute on Your Lead — Stefan Asanin (Axway)
- What ‘Agentic-Ready’ Actually Requires: A Platform Engineer’s Guide to AI-Native Observability — Andi Mann (Apica)
- 14:50 — Post-Session Q&A
- 15:00 — Coffee & Networking (The Coffee Lounge)
- 15:20 — Closing Keynotes, Day 2 (Bankettsalen)
- TBD: Gravitee Keynote
- The Agent Hype Is at Odds with Your API Foundation — Kin Lane (API Evangelist LLC)
- 16:10 — Closing Remarks and End of Conference
See You in Stockholm
I will be following Nordic APIs Summit 2026 closely because it sits at the intersection of API strategy, platform engineering, security, and AI adoption. If you are building APIs for enterprise platforms, AI-enabled products, or regulated systems, this is a relevant event to have on your calendar.
Register for Nordic APIs Summit 2026
