3-D Secure is an EMVCo messaging protocol that adds cardholder authentication to card-not-present payments, sharing risk data between the merchant, the card network, and the issuer across three dom...
3GPP is the partnership that specifies the mobile network itself — the radio, the core, and the interfaces between them, from 3G through 5G and beyond. For API work the relevant surface is network ...
Predefined conditions that a product, feature, or user story must meet to be considered complete and acceptable by stakeholders. These criteria establish clear, testable requirements that guide dev...
Guidelines and technical specifications that ensure digital content, applications, and technologies are usable by people with disabilities, including standards like WCAG, Section 508, and ARIA. It ...
Accounting Standards are the formal rules and guidelines that govern how financial transactions and statements are recorded, reported, and disclosed. They ensure consistency, transparency, and comp...
ACID (Atomicity, Consistency, Isolation, Durability) is a set of properties that guarantee database transactions are processed reliably even in the face of errors, power failures, or system crashes...
File crediting third-party software, libraries, inspirations, and other works that the project builds upon or is indebted to.
ACORD is the insurance industry's data standards body and the author of the formats that have moved insurance data since the 1970s — AL3 flat files, ACORD XML, and the newer ACORD Data Standards an...
ActivityPub is a W3C Recommendation that provides a decentralized social networking protocol with both client-to-server and server-to-server APIs. It powers the federated social web, including plat...
Activity Streams 2.0 is a W3C Recommendation defining a JSON-based syntax and vocabulary for representing social activities and objects. It is the data model used by ActivityPub and the federated s...
The Actor Model is a mathematical model of concurrent computation where the fundamental unit of computation is an actor—an entity that processes messages asynchronously and maintains its own privat...
Vendor-neutral AI coding agent configuration file providing project context and instructions. Alternative to AGENTS.md serving the same purpose of unifying agent guidance across tools.
The Agent2Agent (A2A) Protocol is an open standard for communication and interoperability among independent—often opaque—AI agent systems. Because agents may be built with different frameworks, lan...
Open standard file for guiding AI coding agents, providing project context, coding standards, build commands, and development practices. Supported by OpenAI Codex, Google Jules, Cursor, Amp, and ot...
An iterative approach to project management and software development that helps teams deliver value to customers faster and with fewer headaches through collaboration, adaptability, and continuous ...
An iterative approach to software development and project management that emphasizes flexibility, collaboration, and customer feedback. Agile methodologies include frameworks like Scrum, Kanban, an...
Agile Software Development Life Cycle is an iterative and incremental approach to software development that emphasizes flexibility, collaboration, and rapid delivery of working software through sho...
Agile is a set of software development principles and practices that emphasize iterative delivery, collaboration, and responsiveness to change over rigid planning and documentation. Its frameworks—...
Configuration file specifying files and directories that AI coding agents should not process or modify, similar to .gitignore but for AI tools. Used by JetBrains Junie and other AI agents.
The Automatic Identification System (AIS) is a shipboard broadcast transponder system operating in the VHF maritime band that transmits and receives vessel identification, position, speed, heading,...
AMQP (Advanced Message Queuing Protocol) is an open standard application-layer protocol for message-oriented middleware supporting reliable queuing, routing, and publish/subscribe messaging pattern...
API Blueprint is a Markdown-based specification language for designing and documenting web APIs. It uses a human-readable syntax to describe resources, actions, requests, and responses for tooling,...
API Commons is a collection of open-source building blocks for API operations. It began as a machine-readable way to define the parts of an API, and works in concert with APIs.json to translate hum...
API-First is a development approach where the API contract is designed and agreed upon before any implementation begins, treating the API as a first-class product rather than an afterthought bolted...
APIOps Cycles is a Lean and service design–inspired methodology for designing, improving, and scaling APIs throughout their entire lifecycle. Developed since 2017 and continuously refined through c...
APIs.json is a machine-readable metadata format used to describe APIs (Application Programming Interfaces) and their associated resources. It acts as a discovery format similar to how robots.txt he...
The Arazzo Specification is a community-driven, open standard within the OpenAPI Initiative (a Linux Foundation Collaborative Project). It defines a programming-language-agnostic way to express seq...
An open and independent enterprise architecture modeling language to support the description, analysis and visualization of architecture within and across business domains in an unambiguous way.
Reusable solutions to commonly occurring problems in software architecture that provide templates for designing system structure, component interactions, and the overall organization of application...
An architecture pattern is a general, reusable solution to a recurring problem in how software systems are structured — describing how components are organized, how they interact, and the trade-off...
Apache Arrow is a language-independent columnar memory format specification for flat and hierarchical data, optimized for analytics on modern hardware. It enables zero-copy data sharing across syst...
AsyncAPI is an open specification for defining and documenting event-driven and asynchronous APIs in a machine-readable format. It describes message channels, payloads, bindings, and operations acr...
The AT Protocol (Authenticated Transfer Protocol) is an open, decentralized social networking protocol developed by Bluesky. It gives users portable identities and data, supports a federated networ...
The Atom Syndication Format (RFC 4287) is an XML-based web feed standard, accompanied by the Atom Publishing Protocol for editing web resources. It was designed as a more rigorously specified alter...
File listing the original creators and primary authors of a project, often required by certain open-source licenses.
Apache Avro is a data serialization system that provides compact binary encoding of structured data along with schema definitions, enabling efficient data exchange and storage with built-in schema ...
Backstage’s Software Catalog format is a structured, YAML-based specification that describes software components, services, APIs, resources, and their relationships, enabling teams to discover, doc...
Banking regulation is the body of laws, rules, and supervisory requirements that govern how banks and financial institutions operate, covering capital adequacy, consumer protection, data sharing, a...
Basel Compliance is the practice of meeting the prudential standards set by the Basel Accords — the internationally agreed rules on bank capital, leverage, and liquidity issued by the Basel Committ...
Basel III is the international regulatory framework issued by the Basel Committee on Banking Supervision that strengthens bank capital requirements, introduces new liquidity and leverage standards,...
BDD (Behavior-Driven Development) is a collaborative software practice that describes system behavior in plain, structured language — typically Given/When/Then scenarios — so that business stakehol...
Bean Validation is a Java/Jakarta EE specification (JSR 303, JSR 349, and JSR 380) that defines a declarative, annotation-based model for validating object data — placing constraints like @NotNull,...
NextGenPSD2 is the open-banking API standard published by the Berlin Group, a pan-European payments interoperability initiative, to satisfy the EU's PSD2 access-to-account (XS2A) requirement. It de...
BGP (Border Gateway Protocol, RFC 4271) is the path-vector routing protocol that exchanges routing and reachability information between autonomous systems. It is the protocol that makes inter-domai...
Big O Notation is a mathematical notation for describing how an algorithm's running time or memory use grows as its input grows — an upper bound on complexity (such as O(1), O(n), or O(n log n)) th...
A binary format encodes data as compact bytes rather than human-readable text, trading readability for smaller payloads and faster parsing. In APIs it underpins efficient serialization schemes like...
Bluetooth Low Energy (BLE) is a wireless personal-area network technology designed for very low power consumption, built to let devices exchange small amounts of data over short distances. It power...
Bruno collections are organized sets of API requests and environments within the Bruno API client, allowing developers to structure, test, and share their API workflows efficiently.
A Bruno environment is a set of key–value variables that let you switch configurations—such as URLs, tokens, or credentials—so you can run the same API requests across different contexts like devel...
Consolidated Clinical Document Architecture (C-CDA) is an HL7 standard for structured clinical documents encoded in XML — discharge summaries, continuity-of-care documents, progress notes — with a ...
CalDAV (RFC 4791) is an extension of WebDAV that provides a standard protocol for accessing and managing calendar data on a remote server. It enables shared scheduling and synchronization across cl...
CAMARA is the Telco Global API Alliance, an open-source project hosted by the Linux Foundation that defines the mobile network's capabilities as OpenAPI specifications. It turns things only a carri...
Capital requirements are regulatory rules that set the minimum amount of capital a bank or financial institution must hold against its risk-weighted assets, so it can absorb losses and remain solve...
CardDAV (RFC 6352) is an extension of WebDAV that defines a standard protocol for accessing and sharing contact information on a remote server. It enables address-book synchronization across device...
CARIN Blue Button is an HL7 FHIR implementation guide, developed by the CARIN Alliance, that standardizes how health plans expose a member's claims and encounter data to consumer-directed apps. It ...
CBOR (Concise Binary Object Representation, RFC 8949) is a compact binary data format based on the JSON data model. It is designed for small code size and small message size, making it suitable for...
California Consumer Privacy Act - A state statute intended to enhance privacy rights and consumer protection for residents of California, USA. Provides consumers with rights to know what personal i...
CDS Hooks is an HL7 specification for real-time clinical decision support delivered through a workflow-triggered API. As a clinician works in an EHR, defined hooks (patient-view, order-select, orde...
Protocols and standards for automating the process of requesting, issuing, and renewing digital certificates from Certificate Authorities, including ACME, SCEP, EST, and CMP. It is widely adopted a...
Document tracking notable changes between project versions, following conventions like Keep a Changelog. Lists additions, fixes, deprecations, and breaking changes.
Client-Initiated Backchannel Authentication is an OpenID Connect flow in which the application asks the identity provider to authenticate a user out-of-band, rather than redirecting a browser. The ...
CIECA is the standards body for the collision and auto physical damage side of insurance — the data standards moving estimates, assignments, images and repair information between insurers, body sho...
The Circuit Breaker is a resilience design pattern that wraps calls to a remote service or API, watches for repeated failures, and "trips" to fail fast instead of hammering a struggling dependency,...
Citation File Format providing machine-readable citation metadata for software projects, enabling proper academic attribution and referencing.
Configuration file for Claude Code providing project-specific context, coding conventions, build commands, and behavioral instructions that persist across sessions.
CLIEDIS is the Canadian Life Insurance EDI Standards organization, the channel through which ACORD XML for Life actually moves production data between Canadian life carriers and the advisor distrib...
Configuration file for Cline AI coding assistant providing project-specific rules, coding conventions, and behavioral instructions.
CloudEvents is a CNCF specification for describing event data in a common, vendor-neutral format. It defines required and optional context attributes and protocol bindings so events can be produced...
The Cloud Native Computing Foundation (CNCF) is a Linux Foundation subsidiary, founded in 2015 alongside Kubernetes, that hosts and governs open source cloud-native projects. It provides neutral st...
Code-first is an API development approach where the implementation code is the source of truth and the API definition, such as an OpenAPI document, is generated from that code rather than authored ...
CODE_OF_CONDUCT.md is a repository file that defines the standards for community engagement, acceptable behavior, and enforcement procedures for a project's participants. It is most often based on ...
CODEOWNERS is a repository file that defines the individuals or teams responsible for specific paths in a codebase. GitHub and GitLab use it to automatically request reviews from designated owners ...
CODEX.md is a per-repository instruction file read by OpenAI's Codex coding agent, giving it project conventions, build and test commands, and guardrails so AI-assisted changes match how the team a...
Collection+JSON is a JSON-based hypermedia media type for managing and querying collections of resources. It defines a standard document structure for items, queries, templates, and links to suppor...
Communication protocols are the agreed rules that let systems exchange data reliably over a network — governing message format, sequencing, error handling, and delivery — from foundational layers l...
A component model is an architectural approach that composes software from independent, reusable components with well-defined interfaces, so systems can be assembled, versioned, and swapped out pie...
A configuration language is a formal, usually declarative notation for describing how software and infrastructure should be set up — covering formats like YAML, TOML, JSON, and HCL — favoring reada...
Confirmation of Payee (CoP) is a UK account-name-checking service, operated through Pay.UK, that verifies whether the name a payer enters matches the name on the destination account before an accou...
Consensus is the problem — and the family of algorithms that solve it — of getting a group of distributed, independently-failing processes to agree on a single value or ordering, so a system stays ...
The Consumer Data Standards (CDS) are the technical standards for Australia's Consumer Data Right (CDR), maintained by the Data Standards Body. They define a single, byte-for-byte machine-readable ...
A text file containing instructions for building container images, compatible with Docker's Dockerfile format and commonly used with Podman and other OCI-compliant tools. It accelerates software de...
Guidelines for contributing to a project, including coding standards, pull request processes, issue reporting, and development setup instructions.
File recognizing individuals and organizations that have contributed to a project through code, documentation, design, or other means.
Convention over configuration is a software design paradigm that reduces the number of decisions a developer must make by supplying sensible defaults, so that only the unconventional parts of an ap...
Project conventions file documenting coding standards, naming conventions, architecture decisions, and development practices. Used by AI coding assistants and human developers alike.
GitHub Copilot custom instructions file placed in .github/ directory, providing repository-specific coding standards, framework preferences, and behavioral guidelines for Copilot Chat and coding ag...
CORS (Cross-Origin Resource Sharing) is a browser security mechanism, defined by the WHATWG Fetch standard, that uses HTTP headers to let a server declare which other origins (domain, protocol, or ...
CQRS (Command Query Responsibility Segregation) is an architectural pattern that splits a system's write path (commands that change state) from its read path (queries that return state), so each si...
CSIO is Canada's insurance data standards body, and the operator of what appears to be the only public, tiered API certification programme in insurance anywhere in the world. It publishes API stand...
CSS (Cascading Style Sheets) is the W3C standard language for describing the presentation of documents written in HTML and other markup - controlling layout, color, typography, and responsive behav...
CSV (Comma-Separated Values) is a simple tabular text format standardized in RFC 4180 for the text/csv media type. It is ubiquitous for data import, export, and exchange between systems and spreads...
Configuration file for Cursor AI code editor containing project-specific rules, coding conventions, and behavioral instructions for the AI assistant.
Frameworks and guidelines that establish best practices for protecting information systems, networks, and data from cyber threats, including standards like NIST, ISO 27001, and CIS Controls. It is ...
CycloneDX is an OWASP-stewarded standard for software, hardware, and machine-learning bills of materials (SBOM). It provides a structured inventory of components, dependencies, and vulnerabilities ...
The HL7 Da Vinci Project is an industry accelerator that produces FHIR implementation guides for payer-provider workflows in value-based care. Its best-known IGs automate prior authorization and co...
A data flow diagram (DFD) is a graphical representation of how data moves through a system, showing the processes that transform it, the stores that hold it, and the external entities it flows to a...
A data format is the convention used to encode, structure, and serialize information so it can be stored, transmitted, and reliably parsed between systems — common examples include JSON, XML, YAML,...
Data modeling is the practice of defining the structure, relationships, and constraints of data so that information can be organized, stored, and accessed consistently across a system.
A data model is a structured representation of data entities, their attributes, and the relationships between them, defining how information is organized, stored, and accessed within a system or da...
Data privacy standards are the frameworks, laws, and certifications that govern how organizations collect, store, process, and share personal data — including regulations like GDPR and CCPA and con...
Framework and guidelines for ensuring accuracy, completeness, consistency, validity, and timeliness of data across an organization's data assets and systems. It is a foundational component in moder...
Organizational patterns for structuring data in warehouses, including star schema, snowflake schema, and galaxy schema designs that optimize query performance and data relationships. Organizations ...
Database Normalization is the process of organizing relational database tables to reduce redundancy and improve data integrity, applying a progression of normal forms (1NF, 2NF, 3NF, and beyond) th...
The process of defining the structure, organization, and relationships of data in a database system, including tables, columns, constraints, and indexes to optimize data storage and retrieval. Effe...
DDS (Data Distribution Service) is an Object Management Group standard for real-time, data-centric publish/subscribe messaging. It provides rich quality-of-service policies and decentralized discov...
Defense In Depth is a security strategy that layers multiple, independent controls across a system so that if one safeguard fails, others still stand between an attacker and the assets being protec...
GitHub Dependabot configuration file defining automated dependency update schedules, package ecosystems to monitor, and review assignment rules.
A design pattern in which objects receive their dependencies from external sources rather than creating them internally, promoting loose coupling and easier testing. Effective use of this practice ...
Reusable solutions to commonly occurring problems in software design, providing templates for how to solve problems in various contexts. Organizations adopt it to address specific technical or busi...
Design Standards are the documented rules, guidelines, and conventions a team agrees to follow when designing software and APIs, covering things like naming, resource structure, error formats, vers...
A development methodology is the structured approach a team uses to plan, build, test, and deliver software — the process, roles, and cadence (from Waterfall to Agile, Scrum, Kanban, and domain-dri...
DevOps is a cultural and technical movement that combines software development and IT operations to shorten the development lifecycle and deliver high-quality software continuously. It emphasizes a...
Development, Security, and Operations methodology that integrates security practices within the DevOps process, emphasizing security automation and collaboration throughout the software development...
DFDL (Data Format Description Language) is a modeling language, standardized by the Open Grid Forum, for describing general text and binary data formats in a standard way so they can be parsed into...
DHCP (Dynamic Host Configuration Protocol) is a network management protocol used on IP networks to automatically assign IP addresses and other configuration parameters to devices, allowing them to ...
DICOM (Digital Imaging and Communications in Medicine) is the international standard for storing, transmitting, and managing medical imaging information. It defines both file formats and network pr...
A data modeling technique used in data warehousing that structures data into fact tables containing measurable metrics and dimension tables containing descriptive attributes, optimized for query pe...
Disclosure Requirements are the rules and obligations that compel an organization to make specified information observable to outsiders — regulators, customers, security researchers, or the public ...
DNS (Domain Name System) is the distributed naming system that translates human-readable domain names (like example.com) into the numerical IP addresses computers use to communicate. It functions a...
A text file that contains instructions for building Docker container images, defining the application environment, dependencies, and configuration in a reproducible way. It accelerates software del...
A software development approach that focuses on modeling software to match a domain according to input from domain experts, emphasizing collaboration between technical and domain experts to create ...
Department of Transportation regulations governing the safe transportation of hazardous materials and other commercial transport activities in the United States. It helps organizations meet regulat...
A domain-specific language (DSL) is a computer language specialized to a particular application domain, trading the generality of a general-purpose language for expressiveness and clarity within a ...
Dynamic Client Registration (DCR), defined in RFC 7591 with management operations in RFC 7592, is the OAuth 2.0 and OpenID Connect standard for registering client applications with an authorization...
UN/EDIFACT is the United Nations standard for electronic data interchange for administration, commerce, and transport. It defines internationally agreed message structures for cross-border trade do...
Cross-editor configuration file defining coding style preferences like indentation, line endings, and character encoding to maintain consistent formatting across different editors and IDEs.
A collaborative visualization tool used to articulate what we know about a particular type of user. It externalizes knowledge about users in order to create a shared understanding of user needs, an...
A catalog of messaging-based design patterns for connecting enterprise applications, cataloged by Gregor Hohpe and Bobby Woolf, describing reusable solutions for routing, transforming, and managing...
A data-modeling approach that describes a domain as entities, their attributes, and the relationships between them, most often expressed as entity-relationship diagrams (ERDs) used to design and co...
A risk management framework adopted by financial institutions for determining, assessing and managing environmental and social risk in projects, primarily for project finance and related lending ac...
eSIM is the GSMA's remote SIM provisioning architecture, in which the subscriber identity is a profile downloaded onto an embedded universal integrated circuit card (eUICC) rather than a plastic ca...
ETSI is the European Telecommunications Standards Institute, and one of the most prolific publishers of openly available technical specifications in any industry. For API practitioners its most rel...
A software architecture pattern promoting the production, detection, consumption of, and reaction to events. Systems are designed to respond to state changes asynchronously through event messages.
Event Sourcing is a data-management pattern that persists every change to application state as an immutable, append-only sequence of events, then rebuilds current state by replaying that log rather...
Extreme Programming (XP) is an agile software development methodology that pushes good engineering practices to their limits — short iterations, test-driven development, pair programming, continuou...
FAPI (Financial-grade API) is a set of OpenID Foundation security profiles that harden OAuth 2.0 and OpenID Connect for high-value, high-risk APIs. It is widely adopted by open banking and open fin...
FDA Regulations are the federal rules — codified largely in Title 21 of the Code of Federal Regulations — that govern the safety, efficacy, labeling, and security of food, drugs, biologics, medical...
FDX (Financial Data Exchange) is a nonprofit standard body whose FDX API specifies a secure, common format for sharing consumer financial data. It is widely adopted for open banking and open financ...
FHIR Bulk Data Access, often called Flat FHIR, is an HL7 standard that adds an asynchronous $export operation to FHIR for moving population-level data efficiently. Instead of paging through resourc...
FHIR (Fast Healthcare Interoperability Resources) is an HL7 standard for exchanging healthcare information electronically using RESTful APIs and modular resources. It is the dominant modern standar...
A file format is a standardized way of encoding and structuring data so that it can be written, stored, exchanged, and reliably read back by different systems. In the API world, file formats define...
Financial regulation is the body of laws, rules, and supervisory regimes that govern how banks, payment providers, and financial-data holders operate — increasingly shaping how they must expose dat...
FinOps is an operational practice for bringing financial accountability to the variable, consumption-based spending of cloud and API usage, uniting engineering, finance, and product teams around re...
FIX (Financial Information eXchange) is the de facto messaging protocol for electronic trading of securities. It standardizes pre-trade, trade, and post-trade communication between market participa...
Fixed format (or fixed-width) is a data layout where each field occupies a predetermined number of character positions rather than being separated by delimiters. It is a long-lived convention for f...
A flowchart is a diagram that represents a process, workflow, or algorithm as a sequence of steps connected by directional arrows, using standardized shapes for actions, decisions, and start/end po...
FTP (File Transfer Protocol), standardized as RFC 959, is one of the original Internet protocols for moving files between a client and a server over TCP, predating the web and still widely used for...
Functional Programming is a programming paradigm that builds software by composing pure functions, avoiding shared mutable state and side effects, and treating computation as the evaluation of expr...
GitHub configuration file specifying funding platforms and links for project sponsorship, displayed as a Sponsor button on the repository page.
A Gantt chart is a horizontal bar chart that visualizes a project schedule over time, showing tasks, their durations, dependencies, and milestones against a calendar — a staple of project planning ...
The General Data Protection Regulation (GDPR) is a comprehensive data privacy law enacted by the European Union that governs how organizations collect, process, and store personal data of EU reside...
Configuration file for Google Gemini CLI providing project context, coding standards, and development instructions for AI-assisted coding workflows.
GeoJSON (RFC 7946) is a JSON-based format for encoding geographic data structures such as points, lines, and polygons with their attributes. It is widely used by web mapping and location APIs.
Gherkin is a plain-text, structured language for writing behavior specifications in Given-When-Then form. Popularized by Cucumber, it lets business-readable scenarios double as executable acceptanc...
Git configuration file defining path-specific settings for line endings, diff handling, merge strategies, and binary file detection.
Git configuration file specifying intentionally untracked files and directories that Git should ignore, preventing build artifacts, dependencies, and secrets from being committed.
A operational framework that takes DevOps best practices used for application development such as version control, collaboration, compliance, and CI/CD, and applies them to infrastructure automatio...
A system of processes, procedures, and documentation that ensures products are consistently produced and controlled according to quality standards, commonly used in pharmaceutical, food, and medica...
An international standard query language for property graph databases, developed by ISO/IEC to provide a declarative way to query and manipulate graph data structures. Effective implementation supp...
A query language for APIs and a runtime for executing those queries with existing data, providing a complete and understandable description of the data in your API.
Gremlin is the graph traversal language of Apache TinkerPop, used to query and manipulate property graphs by describing a path of steps that walk across nodes and edges. It is supported by many gra...
GSMA Open Gateway is the mobile industry's commitment layer over the CAMARA specifications — the framework through which operators pledge to expose a common set of network APIs, in a common shape, ...
JetBrains Junie AI agent configuration file stored in .junie/ directory providing persistent project-level context and coding guidelines.
HAL (Hypertext Application Language) is a media-type specification for representing resources and their links in JSON or XML. It provides a simple, consistent convention for embedding hyperlinks an...
Health Standards is the umbrella term for the specifications that govern how clinical and administrative healthcare data is structured, exchanged, and secured between systems, spanning messaging an...
Health Insurance Portability and Accountability Act - U.S. legislation providing data privacy and security provisions for safeguarding medical information
The HITRUST CSF (Common Security Framework) is a certifiable security, privacy, and risk-management framework built for healthcare and other regulated industries. It harmonizes and cross-maps to HI...
HL7 Version 2 is a long-established messaging standard for exchanging clinical and administrative data between healthcare systems. Its pipe-and-hat delimited message format remains widely deployed ...
The Human Services Data API (HSDA) is the interface standard that puts the Human Services Data Specification (HSDS) to work over HTTP. Defined as a set of API paths (with OpenAPI definitions) for r...
The Human Services Data Specification (HSDS) is an open data standard, stewarded by Open Referral, for describing health, human, and social services and where to find them. It defines a common tabu...
HTML (HyperText Markup Language) is the standard markup language for structuring documents and content on the web, defining elements like headings, links, forms, and media that browsers render into...
HTML5 is the fifth major revision of the HyperText Markup Language, adding semantic elements, native audio and video, canvas graphics, and browser APIs like Web Storage and Server-Sent Events for b...
HTTP/2 is a major revision of the HTTP network protocol that adds request multiplexing over a single connection, header compression, and server push to reduce latency and improve web and API perfor...
HTTP/2 is a binary, multiplexed version of HTTP that uses streams, header compression (HPACK), and optional server push to reduce latency and improve performance over a single TCP connection.
HTTP/3 (RFC 9114) is the third major version of HTTP, mapping HTTP semantics onto the QUIC transport protocol. It improves performance and connection reliability by reducing head-of-line blocking a...
HTTP/3 is the latest HTTP version that runs over QUIC (on UDP), providing multiplexed streams with built-in TLS 1.3 and connection migration to avoid TCP head-of-line blocking and improve performance.
HTTP Message Signatures (RFC 9421) defines a mechanism for creating, encoding, and verifying digital signatures over components of an HTTP message. It enables end-to-end integrity and authenticity ...
HTTP (Hypertext Transfer Protocol) is the foundation of traffic on the World Wide Web, which according to Akamai is about 83% API traffic. HTTP defines the rules for transferring files such as text...
Hypermedia is the REST architectural constraint (often called HATEOAS — Hypermedia As The Engine Of Application State) in which API responses include links and controls that tell a client what it c...
IAM (Identity and Access Management) is the discipline and tooling for managing digital identities and controlling what those identities are allowed to do, spanning authentication, authorization, r...
IANA media types, also known as MIME types, are names for the types of data that are transmitted over the internet. They identify the format and nature of a file, document, or group of bytes.
iCalendar (RFC 5545) is the standard data format for representing and exchanging calendaring and scheduling information such as events, to-dos, and free/busy time. It is used across calendar applic...
The Idempotency-Key HTTP header field (IETF draft) lets clients safely retry non-idempotent requests without causing duplicate processing. Servers use the key to detect and de-duplicate repeated op...
IMAP (Internet Message Access Protocol) is a standard protocol for accessing and managing email messages stored on a mail server. Unlike POP3, it keeps messages on the server and synchronizes state...
in-toto is a framework and specification for cryptographically verifying the integrity of a software supply chain. It captures and attests each step of the build and release process so the final pr...
File-scoped custom instruction files for GitHub Copilot and VS Code, using applyTo patterns to target specific file types or tasks with tailored AI guidance.
Design patterns and best practices for integrating different software systems and applications, including messaging, data transformation, and service orchestration approaches. Organizations adopt i...
Documentation that defines the contract between different software components, including API endpoints, data formats, protocols, and integration requirements. It is used across a range of industrie...
Framework of policies and procedures designed to provide reasonable assurance regarding the achievement of objectives in operational effectiveness, reliable financial reporting, and compliance with...
Inversion of Control (IoC) is a software design principle in which the framework or runtime, rather than the application's own code, controls the flow of execution and the wiring of dependencies. I...
IPsec (Internet Protocol Security, RFC 4301) is a suite of protocols that authenticates and encrypts IP packets to secure communications at the network layer. It is widely used to build VPNs and pr...
ISO 20022 is an international standard for financial messaging that provides a common data dictionary and XML/JSON message definitions. It underpins modern payments, securities, and cash-management...
ISO/IEC 27001 is the international standard for an information security management system (ISMS) — a risk-based, auditable framework of policies, controls, and continual-improvement processes for p...
ISO/IEC 42001 is the first international standard for an artificial intelligence management system (AIMS) — a certifiable framework for governing the development and use of AI responsibly, covering...
ISO 8583 is the international standard for financial transaction card-originated messages, defining the format used by payment networks and ATMs. It specifies message types, bitmaps, and data eleme...
ISO 8601 is an international standard for representing dates and times in a clear, consistent, and unambiguous format. It is widely used in APIs and data exchanges to ensure compatibility and accur...
An ISO Standard is a document published by the International Organization for Standardization that specifies agreed requirements, formats, or methods so that products, services, and systems work co...
The International Organization for Standardization (ISO) develops and publishes international standards covering technology, manufacturing, food safety, and many other industries. ISO standards pro...
Template file that pre-populates new issue forms with structured sections, guiding contributors to provide necessary information when reporting bugs or requesting features.
IT Standards are the agreed specifications, protocols, and practices that let information technology systems work together reliably and securely. They span data formats, communication protocols, se...
ITIL (Information Technology Infrastructure Library) is a widely adopted framework of best practices for IT service management, defining how organizations design, deliver, operate, and continually ...
ITSM (IT Service Management) is the set of practices and processes organizations use to design, deliver, operate, and support IT services end to end, treating technology as a portfolio of services ...
IVANS is the network that moves data between insurance carriers and independent agencies in the United States — the plumbing behind agency download, in which policy, claims and direct-bill commissi...
Jakarta EE is the open-source, vendor-neutral set of specifications for building enterprise Java applications, stewarded by the Eclipse Foundation as the successor to Java EE (J2EE).
Java EE (Java Platform, Enterprise Edition), formerly J2EE, is Oracle's set of specifications for building large-scale, multi-tier enterprise Java applications; it was transferred to the Eclipse Fo...
JAX-WS (Java API for XML Web Services), now Jakarta XML Web Services, is the Java specification for building and consuming SOAP-based web services using annotated Java classes and WSDL contracts.
JCR (Content Repository API for Java) is a Java specification, defined by JSR 170 and JSR 283, for accessing content repositories in a uniform way, supporting hierarchical storage, versioning, full...
JDBC (Java Database Connectivity) is the standard Java API for connecting to and querying relational databases, giving Java applications a uniform, driver-based interface for issuing SQL and proces...
JMESPath is a formally specified query language for JSON that lets you declaratively extract and transform elements from a document. It is widely embedded in tools and SDKs, including AWS command-l...
JMS (Java Message Service), now standardized as Jakarta Messaging, is the Java API for enterprise messaging that lets applications create, send, receive, and read messages through message-oriented ...
JPA (Java Persistence API), now standardized as Jakarta Persistence, is the Java specification for object-relational mapping that lets applications persist, query, and manage Java objects against a...
JSF (JavaServer Faces), now standardized as Jakarta Faces, is a Java specification for building component-based, server-side user interfaces for web applications, managing UI state, events, and ren...
JSON:API is a specification for building APIs in JSON that standardizes how clients fetch and modify resources, including pagination, filtering, sparse fieldsets, and relationships. It reduces bike...
JSON Binding (JSON-B / Jakarta JSON Binding) is a standard Java API for converting Java objects to and from JSON documents, giving developers a declarative, annotation-driven way to serialize and d...
JSON Feed is a feed format specification that expresses web syndication content in JSON instead of XML. It aims to be simpler to read and produce than RSS and Atom for modern developers.
JSON-LD (JavaScript Object Notation for Linking Data) is a W3C standard for expressing linked data in JSON. It adds lightweight semantics to ordinary JSON so machines can understand what the data m...
JSON Processing (JSON-P / Jakarta JSON Processing) is a standard Java API for parsing, generating, querying, and transforming JSON, offering both a streaming model and an in-memory object model for...
JSON-RPC is a lightweight, transport-agnostic remote procedure call (RPC) protocol that uses JSON to encode requests and responses. A client sends an object with jsonrpc "2.0", a method name, optio...
JSON Schema enables the confident and reliable use of the JSON data format, bringing consistency, validity, and interoperability to enterprise operations. JSON Schema defines the digital objects th...
JWT (JSON Web Token) is a compact, self-contained, and secure method for transmitting information between parties as a JSON object. JWT has become essential for addressing the following needs at sc...
JSON (JavaScript Object Notation) is a lightweight, text-based data format used for storing and exchanging data. It is easy for humans to read and write, and simple for machines to parse and genera...
JSONPath is a query language used to extract, filter, and manipulate data from JSON (JavaScript Object Notation) structures. It provides a syntax similar to XPath (used for XML) but is designed spe...
JSR-303 (Bean Validation) is the Java specification that defines a metadata model and API for declaring and enforcing validation constraints on JavaBeans using annotations, so rules like "not null"...
Configuration file for Google Jules AI coding agent, providing project-specific instructions, architecture context, and coding standards.
JSON Web Encryption (JWE, RFC 7516) defines a standard for representing encrypted content using JSON-based data structures. Part of the JOSE family, it provides confidentiality for tokens and arbit...
JSON Web Key (JWK, RFC 7517) is a JSON data structure that represents a cryptographic key, and JWK Set represents a collection of keys. It is commonly used to publish public keys for verifying JWT ...
JSON Web Signature (JWS, RFC 7515) defines a standard for representing digitally signed or MACed content using JSON-based data structures. It is part of the JOSE family and provides integrity prote...
JSON Web Token (JWT, RFC 7519) is a compact, URL-safe standard for representing claims securely between two parties. Tokens consist of base64url-encoded header, payload, and signature segments and ...
The Apache Kafka protocol is the binary, TCP-based wire protocol used by clients to communicate with Kafka brokers. It defines request and response message formats for producing, consuming, and adm...
Kanban is a visual workflow management method that uses boards and cards to represent work items flowing through defined stages. It emphasizes continuous delivery, work-in-progress limits, and incr...
Kerberos is a network authentication protocol that uses tickets and symmetric-key cryptography, mediated by a trusted Key Distribution Center, to let clients and services prove their identities to ...
KML (Keyhole Markup Language) is an OGC standard XML grammar for expressing geographic annotation and visualization. It is used to display features such as placemarks, paths, and overlays in earth ...
A data architecture paradigm that combines the best features of data lakes and data warehouses, providing ACID transactions, schema enforcement, and governance on low-cost storage with support for ...
Lightweight Directory Access Protocol - an industry-standard protocol for accessing and maintaining distributed directory information services over an IP network. It plays a critical role in protec...
Lean Management is a management approach derived from the Toyota Production System that focuses on maximizing customer value while systematically eliminating waste, through continuous improvement, ...
Lean Manufacturing is a production methodology, derived from the Toyota Production System, that maximizes value and minimizes waste across manufacturing processes through just-in-time flow, continu...
Lean Operations is the application of lean principles to running an organization's day-to-day operations - eliminating waste, improving flow, and continuously improving the processes that deliver a...
Advanced certification in Lean Six Sigma methodology focused on leading complex improvement projects, statistical analysis, and change management to reduce defects and variability in business proce...
A methodology that combines Lean manufacturing principles and Six Sigma quality management techniques to improve business processes by eliminating waste and reducing variation, focusing on data-dri...
File specifying the legal license under which a project is distributed, defining permissions, conditions, and limitations for use and redistribution.
OMA LwM2M (Lightweight M2M) is a device-management and service-enablement protocol for constrained IoT devices, built on CoAP. It defines an object model for remote provisioning, monitoring, and co...
A central bank regulation requiring commercial banks to hold a minimum percentage of customer deposits as reserves, either as cash in their vaults or as deposits with the central bank, to ensure li...
MapReduce is a programming model and processing framework for computing over very large datasets in parallel across a distributed cluster, splitting work into a map phase that transforms data and a...
Markdown is a lightweight markup language that uses plain text formatting syntax (such as asterisks for emphasis, hashes for headings, and brackets for links) to create formatted documents that are...
The Market Reform Contract is the standard contract document of the London insurance market — the structured slip that brokers and underwriters place risk against. Its machine-readable descendants,...
A markup language is a system for annotating a document with tags or symbols that are syntactically distinguishable from the text, encoding structure, formatting, and metadata so that both humans a...
Matter is a Connectivity Standards Alliance standard for secure, interoperable smart-home device connectivity over IP. It unifies fragmented ecosystems so devices from different vendors can work to...
Model Context Protocol configuration file defining MCP server connections for AI coding assistants, enabling tool integration and enhanced AI capabilities.
MCP Description (mcpdesc) is an open, portable, machine-readable format for describing Model Context Protocol (MCP) servers — declaring their info, transports, security, capabilities, tools, resour...
MEF standardises the wholesale and inter-carrier side of connectivity — how one network operator buys capacity, orders services and settles with another. Its Lifecycle Service Orchestration (LSO) A...
MessagePack is an efficient binary serialization format that lets you exchange data among multiple languages like a more compact JSON. It is optimized for speed and small payload size in network an...
A messaging protocol defines the rules and message formats that let systems exchange data asynchronously through queues, topics, and brokers rather than direct request/response calls. Protocols lik...
A methodology is a documented, repeatable approach a team follows to design, deliver, and operate software and APIs — the ordered set of principles, phases, and practices that turns individual effo...
APIExamples is Microcks' own specification format for defining reusable request/response examples that drive Microcks mocks and contract tests, independent of the API definition itself.
MLOps (Machine Learning Operations) is the set of practices and tooling for deploying, monitoring, versioning, and retraining machine learning models in production. It applies DevOps discipline to ...
Mobile Connect is the GSMA's operator-backed identity and authentication standard, built on OpenID Connect, that lets a user authenticate to a service using their mobile subscription rather than a ...
Mockups are static, medium-to-high fidelity visual representations of a user interface used to show layout, content, and look-and-feel before development begins. They sit between low-fidelity wiref...
Modbus is a widely deployed industrial communication protocol for connecting programmable logic controllers and field devices. It defines a simple request/response model over serial and TCP/IP netw...
MCP (Model Context Protocol) is an open protocol that standardizes how applications provide context to large language models (LLMs). It offers a consistent way to connect AI models to diverse data ...
A modeling language is a formal notation, either graphical or textual, for expressing the structure, behavior, and constraints of a system according to a defined set of rules. In the API world it c...
An architectural pattern that structures a monolithic application into loosely coupled, well-defined modules with clear boundaries and dependencies, combining the operational simplicity of a monoli...
Monolithic Architecture is a software design approach in which an application is built and deployed as a single, self-contained unit, with its user interface, business logic, and data access bundle...
MQTT is a lightweight, OASIS-standardized publish/subscribe messaging protocol designed for constrained devices and low-bandwidth, high-latency networks. It is widely used for IoT telemetry and com...
Mutual TLS (mTLS) authenticates both client and server using X.509 certificates during the TLS handshake. RFC 8705 standardizes its use for OAuth 2.0 client authentication and certificate-bound acc...
A software architecture pattern that separates an application into logical layers or tiers, typically presentation, business logic, and data access layers, to improve modularity, scalability, and m...
MVC (Model-View-Controller) is a software design pattern that separates an application into three interconnected parts — the model that holds data and rules, the view that renders the interface, an...
MXML is an XML-based markup language, introduced by Macromedia and later maintained by Adobe, for declaratively laying out the user interfaces and components of Flex applications that run on the Fl...
NACHA governs the ACH Network and publishes the NACHA Operating Rules, which define the file format and rules for Automated Clearing House electronic payments in the United States. These rules stan...
Standardized rules and conventions for communication between network devices, including protocols like TCP/IP, HTTP, DNS, and others that enable data exchange across networks.
NFC (Near Field Communication) is a short-range wireless standard that lets two devices exchange data by being held within a few centimeters of each other, widely used for contactless payments, tra...
NIO (Java New I/O) is the non-blocking I/O API introduced in Java 1.4 that provides buffer, channel, and selector primitives for handling many concurrent connections without dedicating a thread to ...
National Institute of Standards and Technology - develops and promotes measurement standards, cybersecurity frameworks, and technology guidelines
Normalization is the practice of structuring data so that each fact is stored once and dependencies are made explicit, reducing redundancy and update anomalies. In databases it is expressed as a pr...
NTP (Network Time Protocol, RFC 5905) is a protocol for synchronizing the clocks of computers over packet-switched networks. Accurate time is essential for logging, security, and distributed coordi...
OAuth 2.0 is an authorization framework that allows third-party applications to securely access a user's resources (such as accounts or data) on another service without sharing passwords. It is wid...
OAuth is an open authorization framework that enables third-party applications to access user resources without exposing credentials. It provides a secure, token-based delegation mechanism widely u...
Object-Oriented Programming (OOP) is a software design paradigm that structures code around objects — bundles of data (attributes) and the behavior (methods) that acts on them — using principles li...
OCI (Open Container Initiative) is an open governance project under the Linux Foundation that defines vendor-neutral specifications for container images, runtimes, and distribution, so containers b...
OData (Open Data Protocol) is an OASIS and ISO/IEC-approved standard for building and consuming RESTful APIs, defining consistent conventions for querying and updating data — including a shared URL...
ODBC (Open Database Connectivity) is a standard API specification that provides a database-agnostic interface for applications to connect to and interact with various relational database management...
OGC API is a family of Open Geospatial Consortium standards for sharing geospatial data over modern RESTful, OpenAPI-described web APIs. It modernizes earlier OGC web services such as WFS and WMS.
OPC UA (Unified Architecture, IEC 62541) is a platform-independent, service-oriented standard for secure, reliable industrial data exchange. It provides information modeling and transport for facto...
A modern, developer-first specification pioneered by Bruno for defining and sharing API collections. Designed for simplicity and collaboration.
Open Policy Agent (OPA) is an open-source, policy-based control engine that allows you to define and enforce fine-grained access control and policy decisions across microservices, APIs, and infrast...
The OpenAPI Overlay Specification defines a way to apply a repeatable set of changes to an OpenAPI description without modifying the original document. It enables targeted, programmatic updates suc...
The Overlay Specification is an auxiliary standard that complements the OpenAPI Specification. An OpenAPI description defines API operations, data structures, and metadata—the overall shape of an A...
OpenAPI (formerly known as Swagger) is a specification for building, documenting, and consuming RESTful APIs. It defines a standard, language-agnostic format for describing APIs, enabling both huma...
An open source specification and tool for real-time cost monitoring of Kubernetes infrastructure and cloud spending, enabling teams to measure, allocate, and optimize cloud costs across workloads.
openCypher is an open-source project that provides a standardized graph query language originally developed by Neo4j for querying property graphs. It enables developers to write expressive pattern-...
OpenID Connect (OIDC) is an identity layer built on top of OAuth 2.0, maintained by the OpenID Foundation. It lets clients verify a user's identity based on the authentication performed by an autho...
OpenMetrics is a specification for transmitting metrics at scale, formalizing and extending the Prometheus exposition format. It defines a standard text and protobuf representation for time-series ...
OpenTelemetry is a CNCF project that provides a specification, APIs, and the OTLP protocol for generating and exporting traces, metrics, and logs. It standardizes telemetry collection across langua...
Apache ORC (Optimized Row Columnar) is a self-describing, type-aware columnar file format for large-scale data processing. It provides efficient compression, predicate pushdown, and indexing for an...
OSGi is a Java module system and service platform that lets applications be built from small, reusable components called bundles. It manages dynamic installation, versioning, and lifecycle of these...
Occupational Safety and Health Administration - U.S. federal agency responsible for setting and enforcing workplace safety and health standards
Open Web Application Security Project - A nonprofit foundation that works to improve the security of software through community-led open source projects, hundreds of chapters worldwide, and educati...
Apache Parquet is an open source, column-oriented data file format designed for efficient data storage and retrieval. It provides efficient data compression and encoding schemes with enhanced perfo...
Partitioning is the practice of dividing a large dataset, table, or system into smaller, independently manageable pieces based on a key such as date, region, or tenant, so that storage and queries ...
PASETO (Platform-Agnostic Security Tokens) is a specification for secure stateless tokens designed as a less error-prone alternative to JWT. It uses versioned, well-defined cryptographic primitives...
Payment Card Industry Data Security Standard (PCI DSS) is a set of security standards designed to ensure that all companies that accept, process, store or transmit credit card information maintain ...
PDF (Portable Document Format), standardized as ISO 32000, is a fixed-layout document format that preserves the exact appearance of text, fonts, graphics, and layout across every device and platfor...
Pig Latin is the high-level data-flow language used by Apache Pig to express extract-transform-load and analysis pipelines over large datasets, compiling down to MapReduce (and later Tez/Spark) job...
POP3 (Post Office Protocol version 3, RFC 1939) is a standard protocol for retrieving email from a remote mail server to a local client. It is one of the foundational email access protocols alongsi...
POSIX (Portable Operating System Interface, IEEE 1003) is a family of IEEE standards that defines a common API, shell, and utility interface for Unix-like operating systems so that software written...
A Postman Collection is a portable JSON artifacts that organizes one or more API requests—plus their params, headers, auth, scripts, and examples—so you can run, share, and automate them in the Pos...
Postman environments are collections of variables that let you easily switch between different configurations (like development, staging, and production server URLs) without manually changing value...
A framework and approach that embeds privacy protections into the design and operation of IT systems, networked infrastructure, and business practices from the ground up, rather than as an aftertho...
private_key_jwt is an OAuth 2.0 and OpenID Connect client authentication method in which the client proves its identity to the token endpoint by signing a JWT assertion with its private key, rather...
Problem Details for HTTP APIs, defined in RFC 7807 (now obsoleted by RFC 9457), is a standardized machine-readable format for carrying error details in HTTP API responses using the application/prob...
Problem Details for HTTP APIs (RFC 9457, obsoleting RFC 7807) defines a standard machine-readable format for carrying error details in HTTP responses. The application/problem+json media type provid...
Visual representations that illustrate the sequential steps and decision points in a process, showing how inputs are transformed into outputs through various activities and pathways. They are used ...
The individual entries on a product backlog - features, enhancements, fixes, and other work - each expressing something of value to be built or improved, typically used in Agile and Scrum practice....
A prioritized list of features, enhancements, and fixes that serves as the single source of requirements for product development, typically used in Agile and Scrum methodologies. Teams use it to al...
Detailed documentation that captures the requirements, behavior, and constraints of a product, giving teams a shared, authoritative description of what is to be built and how it should work. Stakeh...
A programming paradigm is a fundamental style or approach to writing software — such as imperative, object-oriented, functional, or declarative — that shapes how developers structure code, model st...
A project management methodology is a structured framework for planning, executing, and controlling work to hit specific goals within constraints of time, budget, and scope — spanning approaches fr...
.prompt.md files are reusable, version-controlled prompt templates for AI coding assistants — Markdown documents that package task-specific instructions (with optional frontmatter) so a common deve...
Protocol Buffers (protobuf) is Google's language- and platform-neutral mechanism for serializing structured data, defined by a .proto schema and encoded as a compact binary format. It is the interf...
Prototypes are early, preliminary versions of a product built to explore ideas, validate designs, and gather feedback before full-scale development. In API work, a prototype is often a mocked inter...
Pub/Sub (publish-subscribe) is a messaging pattern where publishers send messages to named topics without any knowledge of who receives them, and subscribers register interest in topics to receive ...
Template file that pre-populates pull request descriptions with structured sections like change summary, testing steps, and checklist items.
Pushed Authorization Requests (PAR), defined in RFC 9126, let an OAuth 2.0 client send its authorization request parameters directly to the authorization server over a secured back channel and rece...
QoS (Quality of Service) is the measurement and management of a service's performance characteristics - latency, throughput, availability, and error rate - so that its behavior meets agreed expecta...
Quality of Service (QoS) is the measurement and management of a service's performance characteristics - latency, throughput, availability, and error rate - so that its behavior meets agreed expecta...
Frameworks and benchmarks that define acceptable levels of quality for products, services, or processes to ensure consistency and meet customer expectations. Proper implementation reduces legal and...
QUIC (RFC 9000) is a UDP-based, multiplexed, and secure transport protocol that provides built-in TLS 1.3 encryption and low-latency connection establishment. It is the transport foundation for HTT...
A responsibility assignment matrix that defines roles and responsibilities using four key designations - Responsible (those who do the work), Accountable (the ultimate decision maker), Consulted (t...
Raft is a consensus algorithm for managing a replicated log across a cluster of servers, designed to be more understandable than Paxos while providing the same fault-tolerance and consistency guara...
RAML (RESTful API Modeling Language) is a YAML-based specification for describing RESTful APIs in a structured, reusable format. It emphasizes patterns, resource types, and traits to promote consis...
Role-Based Access Control (RBAC) is a security paradigm that restricts system access based on assigned roles rather than individual user identities. Users are granted permissions through their role...
Rich Communication Services is the GSMA's successor to SMS — an operator-standardised messaging protocol supporting rich media, read receipts, typing indicators, verified sender identity and intera...
RDF (Resource Description Framework) is a W3C standard data model for describing resources as subject-predicate-object triples, providing a common, graph-based foundation for linked data and the se...
RDP (Remote Desktop Protocol) is a Microsoft-developed protocol that lets a user connect to and control a remote computer's graphical desktop over a network, transmitting display, input, and device...
Reactive Programming is a declarative programming paradigm oriented around asynchronous data streams and the propagation of change, letting systems react to events as they flow rather than pulling ...
Standard repository documentation file providing project overview, setup instructions, and usage examples. Automatically displayed on repository landing pages by GitHub, GitLab, and other hosting p...
A sequence of characters that define a search pattern, commonly used for string matching, validation, and text manipulation in programming and data processing. It supports the full software develop...
Rules issued by governments and regulators that increasingly mandate how APIs are built, secured, and made available — from open banking and data-portability regimes to privacy and consumer-protect...
Pre-built templates and frameworks for meeting regulatory compliance requirements across various industries and jurisdictions. Proper implementation reduces legal and operational risk while support...
Regulatory is a compliance-related concept that helps organizations meet regulatory requirements and maintain adherence to industry standards. It supports audit readiness, risk management, and the ...
A database design approach that organizes data into tables (relations) with rows and columns, establishing relationships between tables through keys to ensure data integrity and minimize redundancy...
renovate.json is the configuration file for the Renovate bot, which automates dependency updates across many package managers by opening pull requests based on customizable update rules, schedules,...
Reporting templates are pre-built, reusable document and dashboard structures that standardize how reports are generated, so that metrics, formatting, and layout stay consistent across teams and re...
Reserve requirements are central-bank regulations that set the minimum fraction of customer deposits a bank must hold in reserve rather than lend out, used as a tool to manage liquidity, credit cre...
The RESO Web API is the Real Estate Standards Organization's OData-based standard for property listing data, together with the RESO Data Dictionary that defines the fields. It replaced the older RE...
REST (Representational State Transfer) is an architectural style for designing networked applications that uses stateless communication and standard HTTP methods to interact with resources identifi...
RFID (Radio-Frequency Identification) uses electromagnetic fields to automatically identify and track tags attached to objects, enabling contactless reading of stored data for inventory, access con...
.roorules is a configuration file for the Roo Code AI coding assistant that supplies project-specific rules, conventions, and custom instructions the agent follows when reading and editing a codebase.
RPC (Remote Procedure Call) is a request-response pattern where a client invokes a named procedure on a remote server as if it were a local function call. It underpins protocols and frameworks like...
RSS (Really Simple Syndication) is an XML-based web feed format for publishing frequently updated content such as blog posts and news. Clients subscribe to feeds to receive new items without visiti...
RTSP (Real-Time Streaming Protocol), standardized as RFC 2326 and updated by RFC 7826, is a network control protocol for establishing and controlling media streaming sessions. It acts as a "network...
Documented procedures and step-by-step instructions for handling routine operations, troubleshooting issues, and responding to incidents in IT systems and infrastructure. They reduce manual effort ...
Scaled Agile Framework (SAFe) is an enterprise-scale agile framework that provides guidance for implementing agile practices across large organizations with multiple teams working together. Teams u...
SAML (Security Assertion Markup Language) is an XML-based open standard for exchanging authentication and authorization data between identity providers and service providers. It enables single sign...
SCADA (Supervisory Control and Data Acquisition) is a category of industrial control system used to monitor and control physical processes—factories, power grids, water systems, and pipelines—by ga...
Scaled Agile, most often the Scaled Agile Framework (SAFe), is a set of organizational and workflow patterns for applying agile and lean practices across many teams at once—coordinating dozens or h...
Schema Design is the practice of defining the structure of data—its objects, fields, types, and relationships—so that databases and APIs represent information consistently and can be validated, evo...
Schema Evolution is the practice of changing a data schema over time—adding, removing, or altering fields and types—without breaking the producers and consumers that already depend on it, using com...
Schema Free (or schemaless) describes data stores and APIs that do not enforce a fixed structure up front—records can carry different fields from one to the next—trading rigid validation for flexib...
Schema.org is a collaborative, community-driven vocabulary (launched in 2011 by Google, Microsoft, Yahoo!, and Yandex) that defines shared types and properties to describe things on the web—people,...
Schema Validation is the practice of checking that a data payload conforms to a declared structure - its types, required fields, formats, and constraints - before it is accepted or returned. In the...
SCIM (System for Cross-domain Identity Management, RFC 7643/7644) is a standard for automating the exchange of user identity information between identity domains and applications. It defines a comm...
Scrum is an agile project management framework that organizes work into fixed-length iterations called sprints, typically lasting two to four weeks. It defines clear roles (Product Owner, Scrum Mas...
Software Development Life Cycle - A systematic process for planning, creating, testing, and deploying software systems. Effective use of this practice reduces bugs in production and supports a cult...
Security Operations - the practice of integrating security practices into IT operations to identify, manage, and respond to security threats and vulnerabilities in real-time while maintaining syste...
A security design principle where systems and software are configured with the most secure settings from the initial deployment, requiring users to explicitly opt-in to less secure options rather t...
A software development approach that prioritizes security from the initial design phase through implementation, ensuring security considerations are built into the foundation of systems rather than...
A framework that integrates security practices and considerations into every phase of the software development process, from initial design through deployment and maintenance, to minimize vulnerabi...
A framework that integrates security practices into every phase of the software development process, from design and development through testing and deployment, to identify and mitigate vulnerabili...
Network protocols that create encrypted tunnels for secure data transmission over untrusted networks, including VPN technologies like IPsec, SSL/TLS, WireGuard, and SSH tunneling for protecting com...
A software development approach that integrates security considerations and practices from the initial design phase through the entire development lifecycle, rather than adding security as an after...
Security policy document describing supported versions, vulnerability reporting procedures, and responsible disclosure guidelines for a project.
A set of rules and standards that define how data is transmitted securely over networks, including protocols like SSL/TLS, HTTPS, SSH, and IPsec that provide encryption, authentication, and data in...
Frameworks and documented guidelines that establish security requirements, controls, and best practices for protecting organizational assets and information systems. It plays a critical role in pro...
Security standards are the established frameworks, specifications, and benchmarks that define how systems, networks, and data are protected from unauthorized access, attack, and vulnerabilities. Th...
security.txt, standardized as RFC 9116, is a simple machine- and human-readable file served at /.well-known/security.txt that tells security researchers how to report vulnerabilities responsibly. I...
Semantic versioning (SemVer) is a versioning system designed to convey meaningful information about software updates through a standardized format. It follows the structure MAJOR.MINOR.PATCH, where...
Server-Sent Events (SSE) is a WHATWG-standardized mechanism for servers to push a stream of text-based events to clients over a single long-lived HTTP connection. The browser EventSource API consum...
A collection of serverless architectures and patterns for building applications on AWS, featuring ready-to-use templates and best practices for Lambda, API Gateway, EventBridge, and other serverles...
An architectural pattern where software components provide services to other components through a communication protocol over a network. Services are loosely coupled, reusable, and can be independe...
Design patterns and architectural approaches for building microservices and service-oriented applications, covering how services are decomposed, communicate, handle data, and stay resilient across ...
SFTP, the SSH File Transfer Protocol, is a network protocol that provides secure file access, transfer, and management over a single encrypted SSH connection, widely used to move data and batch fil...
Sharding is a database and system design technique that horizontally partitions a dataset across multiple nodes, so that each shard holds a subset of the data, allowing storage and query load to sc...
Sigstore is an open standard and set of tools for signing, verifying, and proving the provenance of software artifacts. It provides keyless signing with short-lived certificates and a transparency ...
Siren is a hypermedia specification for representing entities in JSON, including their properties, actions, and links. It enables clients to discover available state transitions and operations dyna...
A data-driven methodology and set of techniques for process improvement that seeks to reduce defects and variability in business processes to achieve near-perfect quality (3.4 defects per million o...
Sketches are low-fidelity, throwaway drawings of an interface, data model, or API flow used early in the design process to explore ideas quickly and cheaply before committing to higher-fidelity moc...
SLSA (Supply-chain Levels for Software Artifacts) is a security framework and specification of progressive levels for hardening software build and release pipelines. It defines requirements and pro...
SMART on FHIR is an HL7 standard that layers OAuth 2.0 and OpenID Connect onto FHIR so third-party, provider, and patient-facing apps can be authorized against an EHR with scoped, revocable permiss...
SMTP (Simple Mail Transfer Protocol) is the internet standard for sending and relaying electronic mail between servers. Defined in the RFC series and in wide use since the early 1980s, it remains t...
SNMP (Simple Network Management Protocol) is an internet-standard protocol for collecting and organizing information about managed devices on IP networks. It is widely used for monitoring routers, ...
SOA (Service-Oriented Architecture) is an architectural style in which application functionality is organized into discrete, network-accessible services with well-defined contracts, so that capabil...
SOAP (Simple Object Access Protocol) is a messaging protocol for exchanging structured information in web services using XML over HTTP and other transport protocols. It provides built-in standards ...
SOC 2 is an audit and reporting framework from the AICPA, based on the Trust Services Criteria (security, availability, processing integrity, confidentiality, and privacy), under which an independe...
Network architecture approach that enables dynamic, programmatically efficient network configuration to improve performance and monitoring by decoupling the network control plane from the data plan...
Reusable solutions and best practices for organizing software system architecture, including patterns like MVC, Microservices, Layered Architecture, Event-Driven, and CQRS that provide proven appro...
Reusable solutions to commonly occurring problems in software design, including creational, structural, and behavioral patterns that help developers write more maintainable and scalable code. Organ...
A structured process for planning, creating, testing, and deploying software systems through defined phases including requirements analysis, design, implementation, testing, deployment, and mainten...
A structured process for planning, creating, testing, and deploying software systems through distinct phases including requirements gathering, design, implementation, testing, deployment, and maint...
A Single Page Application (SPA) is a web application that loads a single HTML document and dynamically rewrites the page in the browser using JavaScript, driving all its data and state changes thro...
SPARQL is the W3C standard query language and protocol for retrieving and manipulating data stored in RDF (Resource Description Framework) format, letting you query graph data across the semantic w...
SPDX (Software Package Data Exchange) is an open, ISO/IEC 5962 standard for communicating software bill-of-materials information, including components, licenses, and copyrights. It supports license...
In the API world a specification is a machine-readable document that formally describes how an API behaves — its endpoints, operations, schemas, and contracts — so that humans and tooling can desig...
Spectral is a flexible, open-source tool designed for linting and validating API specifications such as OpenAPI, AsyncAPI, and JSON Schema files. It helps enforce best practices, standards, and cus...
SQL (Structured Query Language) is the standard programming language for managing and querying relational databases. It provides commands for creating, reading, updating, and deleting data, as well...
SSH (Secure Shell) is a cryptographic network protocol for secure remote login, command execution, and file transfer between computers over unsecured networks. It provides strong encryption, authen...
SSL/TLS (Secure Sockets Layer / Transport Layer Security) is the cryptographic protocol that encrypts data in transit across networks, authenticating servers (and optionally clients) and protecting...
SSO (Single Sign-On) is an authentication scheme that lets a user sign in once with a single set of credentials and gain access to multiple independent applications and services without logging in ...
Documented step-by-step instructions for routine operations and processes to ensure consistency, quality, and compliance across an organization. It is essential for organizations operating in regul...
Standard Webhooks is a set of open source tools and guidelines to send webhooks easily, securely and reliably. Webhooks are becoming increasingly popular, though every webhooks provider implements ...
The process of implementing and developing technical standards based on the consensus of different parties, including firms, users, interest groups, standards organizations, and governments, to est...
Established specifications, protocols, and guidelines that define technical requirements and best practices for consistency and interoperability across systems and organizations. It is essential fo...
STOMP (Simple Text Oriented Messaging Protocol) is a lightweight, text-based protocol for interoperable messaging between clients and message brokers. Its frame-based design makes it easy to implem...
File describing how users can get help with a project, including links to documentation, forums, issue trackers, and support channels.
An open-source framework for designing, building, documenting, and consuming RESTful web services. Swagger provides a specification (OpenAPI) and tools for API development including interactive doc...
An open table format defines how large analytic datasets are organized as tables on top of files in object storage, adding a metadata layer that tracks schema, partitions, and snapshots so that eng...
Pre-built templates and frameworks for generating tax reports, compliance documents, and financial summaries required for tax filing and regulatory purposes. It helps organizations meet regulatory ...
Pre-designed templates for organizing, calculating, and filing tax documents and returns. Financial institutions and enterprises use them to streamline reporting operations and manage recurring fis...
TCP/IP (Transmission Control Protocol/Internet Protocol) is the foundational communication protocol suite that powers the internet and most computer networks. It provides reliable, ordered delivery...
Detailed technical requirements, standards, and parameters that define the characteristics and performance criteria of a product, system, or service. Organizations adopt it to address specific tech...
Technology Standards are the agreed-upon specifications, protocols, and conventions that let independently built systems interoperate. In the API economy they are the shared rules — from wire proto...
Reusable, pre-structured starting points — for documents, code, API definitions, or collections — that capture a known-good pattern so it can be forked and filled in rather than rebuilt each time.
Structured scenarios that verify software functionality by defining inputs, execution conditions, and expected results to ensure quality and correctness. It is widely used by developers to build, m...
A software development approach where tests are written before the actual code, following a red-green-refactor cycle to ensure code quality and maintainability. It supports the full software develo...
A software development approach where tests are written before the implementation code, ensuring code quality and driving design decisions through test requirements. It is widely used by developers...
Structured documentation outlining test objectives, scope, approach, resources, schedule, and deliverables for software testing activities. It supports the full software development lifecycle from ...
Automated scripts used to verify software functionality, validate code behavior, and ensure quality through repeatable testing procedures. It supports the full software development lifecycle from d...
Documentation that defines the requirements, procedures, and expected outcomes for testing software systems. Effective use of this practice reduces bugs in production and supports a culture of qual...
A collection of organized test cases designed to validate specific functionality or features of software applications. It is widely used by developers to build, maintain, and scale software applica...
Apache Thrift is an interface definition language and binary RPC framework for building cross-language services. It generates client and server stubs and serialization code from a language-neutral ...
The TM Forum Open API suite is a family of standard REST APIs covering the operational and business support side of a telecom operator — product catalog, ordering, service qualification, billing, t...
TOML (Tom's Obvious Minimal Language) is a configuration file format designed to be easy to read and to map unambiguously to a hash table. It has a formal specification and is widely used in modern...
W3C Trace Context is a Recommendation that standardizes the traceparent and tracestate HTTP headers for propagating distributed tracing context across services. It enables end-to-end correlation of...
The UK Open Banking Standard is the machine-readable API specification created by the Open Banking Implementation Entity (OBIE, now Open Banking Limited) under the Competition and Markets Authority...
User-Managed Access (UMA 2.0) is a Kantara Initiative profile of OAuth 2.0 that lets a resource owner control authorization for protected resources across services. It introduces an authorization s...
UML (Unified Modeling Language) is a standardized, general-purpose visual modeling language maintained by the Object Management Group for specifying, visualizing, and documenting the structure and ...
Underwriting Standards are the documented criteria and guidelines a lender or insurer uses to assess and price risk when deciding whether to extend credit or issue a policy. They define the thresho...
US Core is the HL7 FHIR implementation guide that defines the minimum set of resource profiles, data elements, and interactions a US health IT system must support for nationwide interoperability. I...
The United States Core Data for Interoperability (USCDI) is a standardized set of health data classes and data elements, published and versioned by the ONC, that health IT must be able to exchange ...
A use case describes a concrete way an API, product, or capability gets applied to accomplish a specific goal for a specific actor. It anchors abstract technical features to the real-world problems...
A tool or practice for capturing software requirements from an end-user perspective, typically following the format "As a [user], I want [goal], so that [benefit]". Teams use it to align stakeholde...
UTF-8 is the recommended character encoding for APIs because it ensures compatibility, efficiency, and universality. Here’s why you should use UTF-8: * **Universal Compatibility** - UTF-8 suppor...
RuleSets are how to configure vacuum to know which rules to run for each specification, and how it should evaluate those rules, and a RuleSet is a style guide with each rule being an individual req...
Variable Recurring Payments (VRP) is a UK Open Banking payment-initiation standard that lets a customer authorize a trusted third party, via a single long-lived consent, to initiate a series of pay...
The vCard Ontology is a W3C specification that expresses vCard contact information — names, phone numbers, email addresses, and postal addresses — as RDF, so that people and organizations can be de...
vCard (RFC 6350) is the standard file format for electronic business cards, encoding contact information such as names, addresses, phone numbers, and emails. It is widely supported for exchanging c...
Versioning protocols are the standards and conventions for signaling change in APIs, software interfaces, and data formats — such as Semantic Versioning (SemVer) — so that consumers can tell a safe...
VNC (Virtual Network Computing) is a graphical desktop-sharing system that uses the Remote Frame Buffer (RFB) protocol to transmit keyboard and mouse events from one computer to another and relay s...
A VPN (Virtual Private Network) creates an encrypted tunnel between a user's device and a remote network, protecting data from interception and masking the user's IP address. It is widely used for ...
WADL (Web Application Description Language) is an XML-based specification for describing HTTP-based web applications and RESTful services. It models resources, methods, request and response represe...
A sequential software development methodology where progress flows steadily downwards through phases of conception, initiation, analysis, design, construction, testing, deployment, and maintenance....
WCAG (Web Content Accessibility Guidelines) is a set of W3C recommendations for making web content more accessible to people with disabilities, organized around four principles — Perceivable, Opera...
Web standards are the specifications and guidelines — largely from the W3C, WHATWG, and IETF — that define how core web technologies like HTML, CSS, HTTP, URLs, and JavaScript APIs should behave, s...
Web Authentication (WebAuthn) is a W3C Recommendation that defines a browser API for strong, public-key-based authentication using authenticators such as security keys and platform biometrics. With...
WebDAV (Web Distributed Authoring and Versioning, RFC 4918) extends HTTP with methods for managing files and collections on remote servers. It adds capabilities such as properties, locking, and nam...
WebFinger (RFC 7033) is a protocol for discovering information about people and entities identified by a URI, such as an email-like account. It returns JSON Resource Descriptor documents and is use...
Webmention is a W3C Recommendation defining a simple protocol for notifying a URL when it is linked from another site. It enables decentralized cross-site conversations, comments, and reactions on ...
WebSocket is a communication protocol, standardized by the IETF as RFC 6455 and maintained as a living standard by the WHATWG, that provides full-duplex communication channels over a single TCP con...
WebSub is a W3C Recommendation defining an open protocol for real-time publish/subscribe notifications over HTTP. Subscribers register with a hub to receive content updates from publishers without ...
Well-Known URIs (RFC 8615) defines the /.well-known/ path prefix for hosting site-wide metadata and service discovery documents at predictable locations. It is used by standards such as OAuth, Open...
Configuration file for the Windsurf AI code editor containing project-specific rules, coding conventions, and instructions that steer the Cascade AI assistant when it reads, writes, and refactors c...
Wireframes are low-fidelity visual representations of a user interface layout, used in early design stages to establish structure, hierarchy, and functionality before high-fidelity visual design an...
WireGuard is a modern, lightweight VPN protocol that uses state-of-the-art cryptography to establish secure point-to-point tunnels. Its small codebase and simple configuration have driven broad ado...
A Write-Ahead Log (WAL) is a standard technique in database systems where changes are first recorded to a sequential log file before being applied to the actual data files, ensuring durability and ...
WSDL (Web Services Description Language) is an XML-based format for describing the operations, messages, bindings, and endpoints of a SOAP web service so that clients and tools can understand and c...
ASC X12 is a chartered standards body whose EDI standard defines structured electronic business documents such as healthcare claims, purchase orders, and invoices. It is widely used for B2B and hea...
XML (Extensible Markup Language) is a markup language and data format that defines rules for encoding documents in a way that is both human-readable and machine-readable. It is widely used for data...
XSLT (Extensible Stylesheet Language Transformations) is a language for transforming XML documents into other formats such as HTML, plain text, or different XML structures. It uses template-based r...
YAML (YAML Ain't Markup Language) is a human-readable, data serialization format commonly used for configuration files and data exchange between programming languages. It emphasizes simplicity and ...
A security framework that requires all users and devices to be authenticated, authorized, and continuously validated before being granted access to applications and data, regardless of whether they...
A security framework that requires strict identity verification for every person and device attempting to access resources on a network, regardless of whether they are inside or outside the network...
A security framework that eliminates implicit trust and requires continuous verification of all users, devices, and applications attempting to access resources, regardless of their location inside ...
A security framework that requires all users and devices to be authenticated, authorized, and continuously validated before being granted access to applications and data, regardless of whether they...
