11% of respondents pointed to competing priorities as the primary barrier to implementing a strong API security program.

14% of respondents identified that their company's API program is out of control or hard to manage.

2% of attack attempts target internal-facing API endpoints.

25% of organizations said APIs are used to create new revenue streams.

11% of organizations that generate API revenue derive more than 75% of their total revenue from APIs.

41% of organizations reported API growth of 51–100% over the past year.

20% of organizations rely on daily API checks.

25% of organizations said they were 'not very' or 'not at all confident' in the accuracy of their API inventories.

10% of organizations were not confident at all in their ability to detect and respond to attacks leveraging Generative AI.

The percentage of organizations operating as fully API-first increased by 12% from 2024.

70% of developers are aware of the Model Context Protocol (MCP).

24% of developers actively design APIs with AI agents in mind.

Calls made to AI APIs have increased by 40% year-over-year according to Postman.

5% of developers are actively transitioning from human-first to AI-first design for APIs.

OpenAI dominates 56% of total Postman AI traffic.

OpenAI racked up 4.2 million calls over the past 12 months.

Gemini experienced 3.1 times year-over-year growth.

65% of organizations now generate revenue from their APIs.

74% of organizations that generate API revenue generate at least 10% of their total revenue from APIs.

26% of organizations that generate API revenue derive between 10% to 25% of their total revenue from APIs.