The specifications, protocols, conventions and regulations applied across API operations.
Browse standards →The industry and science standards that define what information exists — scored for how modern and how open they are.
Browse data models →Standing research — what I found scoring a standard in the wild, and what I am building against the gaps.
Read the research →Nine different kinds of thing live in this catalog. A repository convention and a global payments standard are both “standards”, and almost nothing else about them is alike.
Every entry, searchable. 578 of 578 showing.
3-D Secure is an EMVCo messaging protocol that adds cardholder authentication to card-not-present payments, sharing risk data between the merchant, the card network, and the issuer across three dom...
3GPP is the partnership that specifies the mobile network itself — the radio, the core, and the interfaces between them, from 3G through 5G and beyond. For API work the relevant surface is network ...
Predefined conditions that a product, feature, or user story must meet to be considered complete and acceptable by stakeholders. These criteria establish clear, testable requirements that guide dev...
Guidelines and technical specifications that ensure digital content, applications, and technologies are usable by people with disabilities, including standards like WCAG, Section 508, and ARIA. It ...
Accounting Standards are the formal rules and guidelines that govern how financial transactions and statements are recorded, reported, and disclosed. They ensure consistency, transparency, and comp...
ACID (Atomicity, Consistency, Isolation, Durability) is a set of properties that guarantee database transactions are processed reliably even in the face of errors, power failures, or system crashes...
File crediting third-party software, libraries, inspirations, and other works that the project builds upon or is indebted to.
ACORD is the insurance industry's data standards body and the author of the formats that have moved insurance data since the 1970s — AL3 flat files, ACORD XML, and the newer ACORD Data Standards an...
ActivityPub is a W3C Recommendation that provides a decentralized social networking protocol with both client-to-server and server-to-server APIs. It powers the federated social web, including plat...
Activity Streams 2.0 is a W3C Recommendation defining a JSON-based syntax and vocabulary for representing social activities and objects. It is the data model used by ActivityPub and the federated s...
The Actor Model is a mathematical model of concurrent computation where the fundamental unit of computation is an actor—an entity that processes messages asynchronously and maintains its own privat...
The AdES family — PAdES for PDF, XAdES for XML, CAdES for CMS-wrapped data — are the ETSI standards defining how an advanced or qualified electronic signature is constructed, embedded and validated...
ads.txt — Authorized Digital Sellers — is a plain text file a publisher hosts at a known path listing the companies authorised to sell its inventory. Buyers fetch it to verify that a seller offerin...
Vendor-neutral AI coding agent configuration file providing project context and instructions. Alternative to AGENTS.md serving the same purpose of unifying agent guidance across tools.
Agent Plugins is an open, vendor-neutral specification for packaging reusable components that extend AI agents into distributable plugins. A plugin is just a directory: a required `plugin.json` man...
Open standard for extending AI agents with specialized knowledge and workflows. A skill is a folder containing a SKILL.md file with YAML frontmatter and instructions, optionally bundling scripts, r...
The Agent2Agent (A2A) Protocol is an open standard for communication and interoperability among independent—often opaque—AI agent systems. Because agents may be built with different frameworks, lan...
Agentic Resource Discovery (ARD) is a proposed open standard for the discovery layer the agentic web is missing — the step that happens *before* invocation, where a client asks "what is available f...
Open standard file for guiding AI coding agents, providing project context, coding standards, build commands, and development practices. Supported by OpenAI Codex, Google Jules, Cursor, Amp, and ot...
An iterative approach to project management and software development that helps teams deliver value to customers faster and with fewer headaches through collaboration, adaptability, and continuous ...
An iterative approach to software development and project management that emphasizes flexibility, collaboration, and customer feedback. Agile methodologies include frameworks like Scrum, Kanban, an...
Agile Software Development Life Cycle is an iterative and incremental approach to software development that emphasizes flexibility, collaboration, and rapid delivery of working software through sho...
Agile is a set of software development principles and practices that emphasize iterative delivery, collaboration, and responsiveness to change over rigid planning and documentation. Its frameworks—...
The AI Catalog Standard is the data model underneath Agentic Resource Discovery — a JSON manifest a publisher hosts at `/.well-known/ai-catalog.json` that lists the agentic resources it offers, wha...
Configuration file specifying files and directories that AI coding agents should not process or modify, similar to .gitignore but for AI tools. Used by JetBrains Junie and other AI agents.
The Automatic Identification System (AIS) is a shipboard broadcast transponder system operating in the VHF maritime band that transmits and receives vessel identification, position, speed, heading,...
AMQP (Advanced Message Queuing Protocol) is an open standard application-layer protocol for message-oriented middleware supporting reliable queuing, routing, and publish/subscribe messaging pattern...
Apache Hudi is an open table format built around incremental processing — upserts, deletes and change streams over data lake tables. Where the other open table formats optimise for snapshot consist...
Apache Iceberg is an open table format for very large analytic datasets sitting on object storage. It adds a metadata layer above the data files — snapshots, schema evolution, hidden partitioning a...
API Blueprint is a Markdown-based specification language for designing and documenting web APIs. It uses a human-readable syntax to describe resources, actions, requests, and responses for tooling,...
API Commons is a collection of open-source building blocks for API operations. It began as a machine-readable way to define the parts of an API, and works in concert with APIs.json to translate hum...
API-First is a development approach where the API contract is designed and agreed upon before any implementation begins, treating the API as a first-class product rather than an afterthought bolted...
APIOps Cycles is a Lean and service design–inspired methodology for designing, improving, and scaling APIs throughout their entire lifecycle. Developed since 2017 and continuously refined through c...
APIs.json is a machine-readable metadata format used to describe APIs (Application Programming Interfaces) and their associated resources. It acts as a discovery format similar to how robots.txt he...
The Arazzo Specification is a community-driven, open standard within the OpenAPI Initiative (a Linux Foundation Collaborative Project). It defines a programming-language-agnostic way to express seq...
An open and independent enterprise architecture modeling language to support the description, analysis and visualization of architecture within and across business domains in an unambiguous way.
Reusable solutions to commonly occurring problems in software architecture that provide templates for designing system structure, component interactions, and the overall organization of application...
An architecture pattern is a general, reusable solution to a recurring problem in how software systems are structured — describing how components are organized, how they interact, and the trade-off...
Apache Arrow is a language-independent columnar memory format specification for flat and hierarchical data, optimized for analytics on modern hardware. It enables zero-copy data sharing across syst...
AsyncAPI is an open specification for defining and documenting event-driven and asynchronous APIs in a machine-readable format. It describes message channels, payloads, bindings, and operations acr...
The AT Protocol (Authenticated Transfer Protocol) is an open, decentralized social networking protocol developed by Bluesky. It gives users portable identities and data, supports a federated networ...
The Atom Syndication Format (RFC 4287) is an XML-based web feed standard, accompanied by the Atom Publishing Protocol for editing web resources. It was designed as a more rigorously specified alter...
ATPCO is the industry utility through which airlines file fares, and its category structure is the de facto standard for expressing what a fare costs and what rules bind it. Categories encode every...
File listing the original creators and primary authors of a project, often required by certain open-source licenses.
Apache Avro is a data serialization system that provides compact binary encoding of structured data along with schema definitions, enabling efficient data exchange and storage with built-in schema ...
Backstage’s Software Catalog format is a structured, YAML-based specification that describes software components, services, APIs, resources, and their relationships, enabling teams to discover, doc...
Banking regulation is the body of laws, rules, and supervisory requirements that govern how banks and financial institutions operate, covering capital adequacy, consumer protection, data sharing, a...
Basel Compliance is the practice of meeting the prudential standards set by the Basel Accords — the internationally agreed rules on bank capital, leverage, and liquidity issued by the Basel Committ...
Basel III is the international regulatory framework issued by the Basel Committee on Banking Supervision that strengthens bank capital requirements, introduces new liquidity and leverage standards,...
BDD (Behavior-Driven Development) is a collaborative software practice that describes system behavior in plain, structured language — typically Given/When/Then scenarios — so that business stakehol...
Bean Validation is a Java/Jakarta EE specification (JSR 303, JSR 349, and JSR 380) that defines a declarative, annotation-based model for validating object data — placing constraints like @NotNull,...
NextGenPSD2 is the open-banking API standard published by the Berlin Group, a pan-European payments interoperability initiative, to satisfy the EU's PSD2 access-to-account (XS2A) requirement. It de...
BGP (Border Gateway Protocol, RFC 4271) is the path-vector routing protocol that exchanges routing and reachability information between autonomous systems. It is the protocol that makes inter-domai...
Big O Notation is a mathematical notation for describing how an algorithm's running time or memory use grows as its input grows — an upper bound on complexity (such as O(1), O(n), or O(n log n)) th...
A binary format encodes data as compact bytes rather than human-readable text, trading readability for smaller payloads and faster parsing. In APIs it underpins efficient serialization schemes like...
Bluetooth Low Energy (BLE) is a wireless personal-area network technology designed for very low power consumption, built to let devices exchange small amounts of data over short distances. It power...
Bruno collections are organized sets of API requests and environments within the Bruno API client, allowing developers to structure, test, and share their API workflows efficiently.
A Bruno environment is a set of key–value variables that let you switch configurations—such as URLs, tokens, or credentials—so you can run the same API requests across different contexts like devel...
Consolidated Clinical Document Architecture (C-CDA) is an HL7 standard for structured clinical documents encoded in XML — discharge summaries, continuity-of-care documents, progress notes — with a ...
The Chain Agnostic Improvement Proposals define identifiers and conventions that work across blockchains rather than within one — a chain ID format, an account address format, an asset identifier. ...
CalDAV (RFC 4791) is an extension of WebDAV that provides a standard protocol for accessing and managing calendar data on a remote server. It enables shared scheduling and synchronization across cl...
Caliper Analytics is the 1EdTech standard for describing learning events — a student viewing a resource, starting an assessment, submitting work, completing a module. It defines a metric profile vo...
CALM (Common Architecture Language Model) is a machine-readable specification for describing software architecture as versioned code. It defines a JSON Schema for nodes, relationships, flows, and c...
CAMARA is the Telco Global API Alliance, an open-source project hosted by the Linux Foundation that defines the mobile network's capabilities as OpenAPI specifications. It turns things only a carri...
Capital requirements are regulatory rules that set the minimum amount of capital a bank or financial institution must hold against its risk-weighted assets, so it can absorb losses and remain solve...
CardDAV (RFC 6352) is an extension of WebDAV that defines a standard protocol for accessing and sharing contact information on a remote server. It enables address-book synchronization across device...
CARIN Blue Button is an HL7 FHIR implementation guide, developed by the CARIN Alliance, that standardizes how health plans expose a member's claims and encounter data to consumer-directed apps. It ...
Catena-X is the automotive industry's data space standard — a numbered library of CX-xxxx specifications published by Catena-X Automotive Network e.V. that define how a supply chain shares part dat...
CBOR (Concise Binary Object Representation, RFC 8949) is a compact binary data format based on the JSON data model. It is designed for small code size and small message size, making it suitable for...
California Consumer Privacy Act - A state statute intended to enhance privacy rights and consumer protection for residents of California, USA. Provides consumers with rights to know what personal i...
CDS Hooks is an HL7 specification for real-time clinical decision support delivered through a workflow-triggered API. As a clinician works in an EHR, defined hooks (patient-view, order-select, orde...
Protocols and standards for automating the process of requesting, issuing, and renewing digital certificates from Certificate Authorities, including ACME, SCEP, EST, and CMP. It is widely adopted a...
Document tracking notable changes between project versions, following conventions like Keep a Changelog. Lists additions, fixes, deprecations, and breaking changes.
Client-Initiated Backchannel Authentication is an OpenID Connect flow in which the application asks the identity provider to authenticate a user out-of-band, rather than redirecting a browser. The ...
CIECA is the standards body for the collision and auto physical damage side of insurance — the data standards moving estimates, assignments, images and repair information between insurers, body sho...
The Circuit Breaker is a resilience design pattern that wraps calls to a remote service or API, watches for repeated failures, and "trips" to fail fast instead of hammering a struggling dependency,...
Citation File Format providing machine-readable citation metadata for software projects, enabling proper academic attribution and referencing.
CKAN is the open-source data portal software behind a large share of the world's government open-data sites, and its Action API is the uniform JSON-over-HTTP interface every CKAN instance exposes. ...
Configuration file for Claude Code providing project-specific context, coding conventions, build commands, and behavioral instructions that persist across sessions.
CLIEDIS is the Canadian Life Insurance EDI Standards organization, the channel through which ACORD XML for Life actually moves production data between Canadian life carriers and the advisor distrib...
Configuration file for Cline AI coding assistant providing project-specific rules, coding conventions, and behavioral instructions.
CloudEvents is a CNCF specification for describing event data in a common, vendor-neutral format. It defines required and optional context attributes and protocol bindings so events can be produced...
The Cloud Native Computing Foundation (CNCF) is a Linux Foundation subsidiary, founded in 2015 alongside Kubernetes, that hosts and governs open source cloud-native projects. It provides neutral st...
Code-first is an API development approach where the implementation code is the source of truth and the API definition, such as an OpenAPI document, is generated from that code rather than authored ...
CODE_OF_CONDUCT.md is a repository file that defines the standards for community engagement, acceptable behavior, and enforcement procedures for a project's participants. It is most often based on ...
CODEOWNERS is a repository file that defines the individuals or teams responsible for specific paths in a codebase. GitHub and GitLab use it to automatically request reviews from designated owners ...
CODEX.md is a per-repository instruction file read by OpenAI's Codex coding agent, giving it project conventions, build and test commands, and guardrails so AI-assisted changes match how the team a...
Collection+JSON is a JSON-based hypermedia media type for managing and querying collections of resources. It defines a standard document structure for items, queries, templates, and links to suppor...
Communication protocols are the agreed rules that let systems exchange data reliably over a network — governing message format, sequencing, error handling, and delivery — from foundational layers l...
A component model is an architectural approach that composes software from independent, reusable components with well-defined interfaces, so systems can be assembled, versioned, and swapped out pie...
A configuration language is a formal, usually declarative notation for describing how software and infrastructure should be set up — covering formats like YAML, TOML, JSON, and HCL — favoring reada...
Confirmation of Payee (CoP) is a UK account-name-checking service, operated through Pay.UK, that verifies whether the name a payer enters matches the name on the destination account before an accou...
Consensus is the problem — and the family of algorithms that solve it — of getting a group of distributed, independently-failing processes to agree on a single value or ordering, so a system stays ...
The Consumer Data Standards (CDS) are the technical standards for Australia's Consumer Data Right (CDR), maintained by the Data Standards Body. They define a single, byte-for-byte machine-readable ...
A text file containing instructions for building container images, compatible with Docker's Dockerfile format and commonly used with Podman and other OCI-compliant tools. It accelerates software de...
Guidelines for contributing to a project, including coding standards, pull request processes, issue reporting, and development setup instructions.
File recognizing individuals and organizations that have contributed to a project through code, documentation, design, or other means.
Convention over configuration is a software design paradigm that reduces the number of decisions a developer must make by supplying sensible defaults, so that only the unconventional parts of an ap...
Project conventions file documenting coding standards, naming conventions, architecture decisions, and development practices. Used by AI coding assistants and human developers alike.
GitHub Copilot custom instructions file placed in .github/ directory, providing repository-specific coding standards, framework preferences, and behavioral guidelines for Copilot Chat and coding ag...
CORS (Cross-Origin Resource Sharing) is a browser security mechanism, defined by the WHATWG Fetch standard, that uses HTTP headers to let a server declare which other origins (domain, protocol, or ...
COUNTER is the code of practice for reporting usage of licensed scholarly content — how many times an article was viewed, a database searched, a book chapter downloaded — defined consistently enoug...
CQRS (Command Query Responsibility Segregation) is an architectural pattern that splits a system's write path (commands that change state) from its read path (queries that return state), so each si...
CSIO is Canada's insurance data standards body, and the operator of what appears to be the only public, tiered API certification programme in insurance anywhere in the world. It publishes API stand...
CSS (Cascading Style Sheets) is the W3C standard language for describing the presentation of documents written in HTML and other markup - controlling layout, color, typography, and responsive behav...
CSV (Comma-Separated Values) is a simple tabular text format standardized in RFC 4180 for the text/csv media type. It is ubiquitous for data import, export, and exchange between systems and spreads...
Configuration file for Cursor AI code editor containing project-specific rules, coding conventions, and behavioral instructions for the AI assistant.
Compute Express Link is an open interconnect standard built on the PCI Express physical layer that adds cache coherency and memory semantics, allowing accelerators, memory expanders and pooled memo...
cXML is an XML-based protocol for business-to-business procurement transactions — purchase orders, order confirmations, invoices, and the PunchOut session that hands a buyer into a supplier's catal...
Frameworks and guidelines that establish best practices for protecting information systems, networks, and data from cyber threats, including standards like NIST, ISO 27001, and CIS Controls. It is ...
CycloneDX is an OWASP-stewarded standard for software, hardware, and machine-learning bills of materials (SBOM). It provides a structured inventory of components, dependencies, and vulnerabilities ...
The HL7 Da Vinci Project is an industry accelerator that produces FHIR implementation guides for payer-provider workflows in value-based care. Its best-known IGs automate prior authorization and co...
A data flow diagram (DFD) is a graphical representation of how data moves through a system, showing the processes that transform it, the stores that hold it, and the external entities it flows to a...
A data format is the convention used to encode, structure, and serialize information so it can be stored, transmitted, and reliably parsed between systems — common examples include JSON, XML, YAML,...
Data modeling is the practice of defining the structure, relationships, and constraints of data so that information can be organized, stored, and accessed consistently across a system.
A data model is a structured representation of data entities, their attributes, and the relationships between them, defining how information is organized, stored, and accessed within a system or da...
Data privacy standards are the frameworks, laws, and certifications that govern how organizations collect, store, process, and share personal data — including regulations like GDPR and CCPA and con...
Framework and guidelines for ensuring accuracy, completeness, consistency, validity, and timeliness of data across an organization's data assets and systems. It is a foundational component in moder...
Organizational patterns for structuring data in warehouses, including star schema, snowflake schema, and galaxy schema designs that optimize query performance and data relationships. Organizations ...
Database Normalization is the process of organizing relational database tables to reduce redundancy and improve data integrity, applying a progression of normal forms (1NF, 2NF, 3NF, and beyond) th...
The process of defining the structure, organization, and relationships of data in a database system, including tables, columns, constraints, and indexes to optimize data storage and retrieval. Effe...
The Digital Container Shipping Association is a neutral, non-profit body founded by the largest ocean container carriers to publish common technical standards for container shipping — track and tra...
DDS (Data Distribution Service) is an Object Management Group standard for real-time, data-centric publish/subscribe messaging. It provides rich quality-of-service policies and decentralized discov...
Defense In Depth is a security strategy that layers multiple, independent controls across a system so that if one safeguard fails, others still stand between an attacker and the assets being protec...
Delta Lake is an open table format and transaction protocol that brings ACID transactions, versioning and schema enforcement to data lakes. Originating at Databricks and now a Linux Foundation proj...
GitHub Dependabot configuration file defining automated dependency update schedules, package ecosystems to monitor, and review assignment rules.
A design pattern in which objects receive their dependencies from external sources rather than creating them internally, promoting loose coupling and easier testing. Effective use of this practice ...
Reusable solutions to commonly occurring problems in software design, providing templates for how to solve problems in various contexts. Organizations adopt it to address specific technical or busi...
Design Standards are the documented rules, guidelines, and conventions a team agrees to follow when designing software and APIs, covering things like naming, resource structure, error formats, vers...
A development methodology is the structured approach a team uses to plan, build, test, and deliver software — the process, roles, and cadence (from Waterfall to Agile, Scrum, Kanban, and domain-dri...
DevOps is a cultural and technical movement that combines software development and IT operations to shorten the development lifecycle and deliver high-quality software continuously. It emphasizes a...
Development, Security, and Operations methodology that integrates security practices within the DevOps process, emphasizing security automation and collaboration throughout the software development...
DFDL (Data Format Description Language) is a modeling language, standardized by the Open Grid Forum, for describing general text and binary data formats in a standard way so they can be parsed into...
DHCP (Dynamic Host Configuration Protocol) is a network management protocol used on IP networks to automatically assign IP addresses and other configuration parameters to devices, allowing them to ...
DICOM (Digital Imaging and Communications in Medicine) is the international standard for storing, transmitting, and managing medical imaging information. It defines both file formats and network pr...
A data modeling technique used in data warehousing that structures data into fact tables containing measurable metrics and dimension tables containing descriptive attributes, optimized for query pe...
Disclosure Requirements are the rules and obligations that compel an organization to make specified information observable to outsiders — regulators, customers, security researchers, or the public ...
DNS (Domain Name System) is the distributed naming system that translates human-readable domain names (like example.com) into the numerical IP addresses computers use to communicate. It functions a...
A text file that contains instructions for building Docker container images, defining the application environment, dependencies, and configuration in a reproducible way. It accelerates software del...
A DOI is a persistent identifier for a document or dataset, standardised as ISO 26324 and operated through registration agencies — Crossref for scholarly literature, DataCite for research data. The...
A software development approach that focuses on modeling software to match a domain according to input from domain experts, emphasizing collaboration between technical and domain experts to create ...
Department of Transportation regulations governing the safe transportation of hazardous materials and other commercial transport activities in the United States. It helps organizations meet regulat...
DPoP binds an access token to a key held by the client, so a stolen token cannot be replayed by anyone else. The client proves possession of the key on each request with a signed JWT, turning a bea...
A domain-specific language (DSL) is a computer language specialized to a particular application domain, trading the generality of a general-purpose language for expressiveness and clarity within a ...
Dynamic Client Registration (DCR), defined in RFC 7591 with management operations in RFC 7592, is the OAuth 2.0 and OpenID Connect standard for registering client applications with an authorization...
The Ed-Fi Data Standard is a unified data model and REST API specification for K-12 education data, stewarded by the Ed-Fi Alliance and funded originally by the Michael & Susan Dell Foundation. It ...
UN/EDIFACT is the United Nations standard for electronic data interchange for administration, commerce and transport, defining internationally agreed message structures for cross-border trade docum...
Cross-editor configuration file defining coding style preferences like indentation, line endings, and character encoding to maintain consistent formatting across different editors and IDEs.
EIP-1559 replaced Ethereum's first-price fee auction with a protocol-set base fee that adjusts with demand and is burned, plus an optional priority tip. It changed the economics of an entire networ...
The electronic bill of lading replaces the paper document that functions simultaneously as receipt, contract of carriage and document of title for goods in transit. MLETR — the UNCITRAL Model Law o...
A collaborative visualization tool used to articulate what we know about a particular type of user. It externalizes knowledge about users in order to create a shared understanding of user needs, an...
A catalog of messaging-based design patterns for connecting enterprise applications, cataloged by Gregor Hohpe and Bobby Woolf, describing reusable solutions for routing, transforming, and managing...
A data-modeling approach that describes a domain as entities, their attributes, and the relationships between them, most often expressed as entity-relationship diagrams (ERDs) used to design and co...
EPCIS (Electronic Product Code Information Services) is the GS1 standard for capturing and sharing supply chain event data — what happened to an object, where, when, and why. It is the interoperabi...
A risk management framework adopted by financial institutions for determining, assessing and managing environmental and social risk in projects, primarily for project finance and related lending ac...
ERC-20 is the Ethereum token standard: a small interface of six functions and two events that any fungible token contract implements. Because every token exposes the same methods, any wallet, excha...
ERC-721 is the Ethereum standard for non-fungible tokens — assets that are individually distinguishable rather than interchangeable. It defines ownership, transfer and approval for unique token IDs...
eSIM is the GSMA's remote SIM provisioning architecture, in which the subscriber identity is a profile downloaded onto an embedded universal integrated circuit card (eUICC) rather than a plastic ca...
ETSI is the European Telecommunications Standards Institute, and one of the most prolific publishers of openly available technical specifications in any industry. For API practitioners its most rel...
A software architecture pattern promoting the production, detection, consumption of, and reaction to events. Systems are designed to respond to state changes asynchronously through event messages.
Event Sourcing is a data-management pattern that persists every change to application state as an immutable, append-only sequence of events, then rebuilds current state by replaying that log rather...
Extreme Programming (XP) is an agile software development methodology that pushes good engineering practices to their limits — short iterations, test-driven development, pair programming, continuou...
FAPI (Financial-grade API) is a set of OpenID Foundation security profiles that harden OAuth 2.0 and OpenID Connect for high-value, high-risk APIs. It is widely adopted by open banking and open fin...
FDA Regulations are the federal rules — codified largely in Title 21 of the Code of Federal Regulations — that govern the safety, efficacy, labeling, and security of food, drugs, biologics, medical...
FDC3 (Financial Desktop Connectivity and Collaboration Consortium) is an open standard for interoperability between financial desktop applications. It defines a Desktop Agent API, a set of intents,...
FDX (Financial Data Exchange) is a nonprofit standard body whose FDX API specifies a secure, common format for sharing consumer financial data. It is widely adopted for open banking and open financ...
FHIR Bulk Data Access, often called Flat FHIR, is an HL7 standard that adds an asynchronous $export operation to FHIR for moving population-level data efficiently. Instead of paging through resourc...
FHIR (Fast Healthcare Interoperability Resources) is an HL7 standard for exchanging healthcare information electronically using RESTful APIs and modular resources. It is the dominant modern standar...
A file format is a standardized way of encoding and structuring data so that it can be written, stored, exchanged, and reliably read back by different systems. In the API world, file formats define...
Financial regulation is the body of laws, rules, and supervisory regimes that govern how banks, payment providers, and financial-data holders operate — increasingly shaping how they must expose dat...
FinOps is an operational practice for bringing financial accountability to the variable, consumption-based spending of cloud and API usage, uniting engineering, finance, and product teams around re...
FIX (Financial Information eXchange) is the de facto messaging protocol for electronic trading of securities. It standardizes pre-trade, trade, and post-trade communication between market participa...
Fixed format (or fixed-width) is a data layout where each field occupies a predetermined number of character positions rather than being separated by delimiters. It is a long-lived convention for f...
A flowchart is a diagram that represents a process, workflow, or algorithm as a sequence of steps connected by directional arrows, using standardized shapes for actions, decisions, and start/end po...
FTP (File Transfer Protocol), standardized as RFC 959, is one of the original Internet protocols for moving files between a client and a server over TCP, predating the web and still widely used for...
Functional Programming is a programming paradigm that builds software by composing pure functions, avoiding shared mutable state and side effects, and treating computation as the evaluation of expr...
GitHub configuration file specifying funding platforms and links for project sponsorship, displayed as a Sponsor button on the repository page.
A Gantt chart is a horizontal bar chart that visualizes a project schedule over time, showing tasks, their durations, dependencies, and milestones against a calendar — a staple of project planning ...
The General Data Protection Regulation (GDPR) is a comprehensive data privacy law enacted by the European Union that governs how organizations collect, process, and store personal data of EU reside...
Configuration file for Google Gemini CLI providing project context, coding standards, and development instructions for AI-assisted coding workflows.
GeoJSON (RFC 7946) is a JSON-based format for encoding geographic data structures such as points, lines, and polygons with their attributes. It is widely used by web mapping and location APIs.
Gherkin is a plain-text, structured language for writing behavior specifications in Given-When-Then form. Popularized by Cucumber, it lets business-readable scenarios double as executable acceptanc...
Git configuration file defining path-specific settings for line endings, diff handling, merge strategies, and binary file detection.
Git configuration file specifying intentionally untracked files and directories that Git should ignore, preventing build artifacts, dependencies, and secrets from being committed.
A operational framework that takes DevOps best practices used for application development such as version control, collaboration, compliance, and CI/CD, and applies them to infrastructure automatio...
A system of processes, procedures, and documentation that ensures products are consistently produced and controlled according to quality standards, commonly used in pharmaceutical, food, and medica...
An international standard query language for property graph databases, developed by ISO/IEC to provide a declarative way to query and manipulate graph data structures. Effective implementation supp...
A query language for APIs and a runtime for executing those queries with existing data, providing a complete and understandable description of the data in your API.
Green Button is the North American standard for giving an energy customer machine-readable access to their own usage and billing data. The technical specification is NAESB REQ.21, the Energy Servic...
Gremlin is the graph traversal language of Apache TinkerPop, used to query and manipulate property graphs by describing a path of steps that walk across nodes and edges. It is supported by many gra...
GS1 is the global not-for-profit standards organization behind the barcode, the GTIN, the GLN and the SSCC — the identifier system used to uniquely name products, locations and logistics units acro...
GSMA Open Gateway is the mobile industry's commitment layer over the CAMARA specifications — the framework through which operators pledge to expose a common set of network APIs, in a common shape, ...
GTFS is the open specification for publishing public transport schedules and geographic information as a set of plain CSV files in a zip archive. GTFS Schedule covers static timetables, stops, rout...
JetBrains Junie AI agent configuration file stored in .junie/ directory providing persistent project-level context and coding guidelines.
HAL (Hypertext Application Language) is a media-type specification for representing resources and their links in JSON or XML. It provides a simple, consistent convention for embedding hyperlinks an...
Health Standards is the umbrella term for the specifications that govern how clinical and administrative healthcare data is structured, exchanged, and secured between systems, spanning messaging an...
Health Insurance Portability and Accountability Act - U.S. legislation providing data privacy and security provisions for safeguarding medical information
The HITRUST CSF (Common Security Framework) is a certifiable security, privacy, and risk-management framework built for healthcare and other regulated industries. It harmonizes and cross-maps to HI...
HL7 Version 2 is a long-established messaging standard for exchanging clinical and administrative data between healthcare systems. Its pipe-and-hat delimited message format remains widely deployed ...
The Human Services Data API (HSDA) is the interface standard that puts the Human Services Data Specification (HSDS) to work over HTTP. Defined as a set of API paths (with OpenAPI definitions) for r...
The Human Services Data Specification (HSDS) is an open data standard, stewarded by Open Referral, for describing health, human, and social services and where to find them. It defines a common tabu...
HTML (HyperText Markup Language) is the standard markup language for structuring documents and content on the web, defining elements like headings, links, forms, and media that browsers render into...
HTML5 is the fifth major revision of the HyperText Markup Language, adding semantic elements, native audio and video, canvas graphics, and browser APIs like Web Storage and Server-Sent Events for b...
HTNG is the hospitality industry's interface standards programme — the specifications that let a property management system, a channel manager, a revenue management system, a point of sale and a do...
HTTP/2 is a major revision of the HTTP network protocol that adds request multiplexing over a single connection, header compression, and server push to reduce latency and improve web and API perfor...
HTTP/2 is a binary, multiplexed version of HTTP that uses streams, header compression (HPACK), and optional server push to reduce latency and improve performance over a single TCP connection.
HTTP/3 (RFC 9114) is the third major version of HTTP, mapping HTTP semantics onto the QUIC transport protocol. It improves performance and connection reliability by reducing head-of-line blocking a...
HTTP/3 is the latest HTTP version that runs over QUIC (on UDP), providing multiplexed streams with built-in TLS 1.3 and connection migration to avoid TCP head-of-line blocking and improve performance.
HTTP Message Signatures (RFC 9421) defines a mechanism for creating, encoding, and verifying digital signatures over components of an HTTP message. It enables end-to-end integrity and authenticity ...
HTTP (Hypertext Transfer Protocol) is the foundation of traffic on the World Wide Web, which according to Akamai is about 83% API traffic. HTTP defines the rules for transferring files such as text...
Hypermedia is the REST architectural constraint (often called HATEOAS — Hypermedia As The Engine Of Application State) in which API responses include links and controls that tell a client what it c...
The IAB Transparency and Consent Framework is the advertising industry's standard for capturing a person's consent choices and carrying them, as an encoded string, through the programmatic supply c...
IAM (Identity and Access Management) is the discipline and tooling for managing digital identities and controlling what those identities are allowed to do, spanning authentication, authorization, r...
IANA media types, also known as MIME types, are names for the types of data that are transmitted over the internet. They identify the format and nature of a file, document, or group of bytes.
The Billing and Settlement Plan is IATA's global system for settling money between travel agencies and airlines, with ARC performing the equivalent role in the United States. It is not a technical ...
NDC is IATA's XML messaging standard for airline retailing — the specification meant to let an airline offer, sell and service its own content directly to any seller, rather than through the fare a...
ONE Record is IATA's data standard for air cargo — a single, shared, linked-data record of a shipment that every party in the chain reads and writes, replacing the message-passing model of paper wa...
PADIS — Passenger and Airport Data Interchange Standards — is the IATA board that maintains the code lists and message standards used across passenger air travel. The code lists are the shared enum...
iCalendar (RFC 5545) is the standard data format for representing and exchanging calendaring and scheduling information such as events, to-dos, and free/busy time. It is used across calendar applic...
The Idempotency-Key HTTP header field (IETF draft) lets clients safely retry non-idempotent requests without causing duplicate processing. Servers use the key to detect and de-duplicate repeated op...
IEEE 2030.5, also known as Smart Energy Profile 2.0, is the IP-based application protocol for communicating with distributed energy resources — rooftop solar inverters, batteries, EV chargers and c...
IMAP (Internet Message Access Protocol) is a standard protocol for accessing and managing email messages stored on a mail server. Unlike POP3, it keeps messages on the server and synchronizes state...
in-toto is a framework and specification for cryptographically verifying the integrity of a software supply chain. It captures and attests each step of the build and release process so the final pr...
File-scoped custom instruction files for GitHub Copilot and VS Code, using applyTo patterns to target specific file types or tasks with tailored AI guidance.
Design patterns and best practices for integrating different software systems and applications, including messaging, data transformation, and service orchestration approaches. Organizations adopt i...
Documentation that defines the contract between different software components, including API endpoints, data formats, protocols, and integration requirements. It is used across a range of industrie...
Framework of policies and procedures designed to provide reasonable assurance regarding the achievement of objectives in operational effectiveness, reliable financial reporting, and compliance with...
InterUSS is the open-source project providing interoperability infrastructure for uncrewed aircraft traffic management — a Discovery and Synchronization Service that lets independent UAS Service Su...
Inversion of Control (IoC) is a software design principle in which the framework or runtime, rather than the application's own code, controls the flow of execution and the wiring of dependencies. I...
I/O Docs was an early machine-readable API description format and interactive documentation framework, released as open source by Mashery in 2011. A JSON schema described an API's resources, method...
IPsec (Internet Protocol Security, RFC 4301) is a suite of protocols that authenticates and encrypts IP packets to secure communications at the network layer. It is widely used to build VPNs and pr...
ISO 10218 is the safety standard for industrial robots and robot systems, covering design, protective measures and integration, and ISO/TS 15066 extends it to collaborative operation — robots that ...
ISO 20022 is an international standard for financial messaging that provides a common data dictionary and XML/JSON message definitions. It underpins modern payments, securities, and cash-management...
ISO/IEC 27001 is the international standard for an information security management system (ISMS) — a risk-based, auditable framework of policies, controls, and continual-improvement processes for p...
ISO/IEC 42001 is the first international standard for an artificial intelligence management system (AIMS) — a certifiable framework for governing the development and use of AI responsibly, covering...
ISO 8583 is the international standard for financial transaction card-originated messages, defining the format used by payment networks and ATMs. It specifies message types, bitmaps, and data eleme...
ISO 8601 is an international standard for representing dates and times in a clear, consistent, and unambiguous format. It is widely used in APIs and data exchanges to ensure compatibility and accur...
An ISO Standard is a document published by the International Organization for Standardization that specifies agreed requirements, formats, or methods so that products, services, and systems work co...
The International Organization for Standardization (ISO) develops and publishes international standards covering technology, manufacturing, food safety, and many other industries. ISO standards pro...
Template file that pre-populates new issue forms with structured sections, guiding contributors to provide necessary information when reporting bugs or requesting features.
IT Standards are the agreed specifications, protocols, and practices that let information technology systems work together reliably and securely. They span data formats, communication protocols, se...
ITIL (Information Technology Infrastructure Library) is a widely adopted framework of best practices for IT service management, defining how organizations design, deliver, operate, and continually ...
ITSM (IT Service Management) is the set of practices and processes organizations use to design, deliver, operate, and support IT services end to end, treating technology as a portfolio of services ...
IVANS is the network that moves data between insurance carriers and independent agencies in the United States — the plumbing behind agency download, in which policy, claims and direct-bill commissi...
Jakarta EE is the open-source, vendor-neutral set of specifications for building enterprise Java applications, stewarded by the Eclipse Foundation as the successor to Java EE (J2EE).
Java EE (Java Platform, Enterprise Edition), formerly J2EE, is Oracle's set of specifications for building large-scale, multi-tier enterprise Java applications; it was transferred to the Eclipse Fo...
JAX-WS (Java API for XML Web Services), now Jakarta XML Web Services, is the Java specification for building and consuming SOAP-based web services using annotated Java classes and WSDL contracts.
JCR (Content Repository API for Java) is a Java specification, defined by JSR 170 and JSR 283, for accessing content repositories in a uniform way, supporting hierarchical storage, versioning, full...
JDBC (Java Database Connectivity) is the standard Java API for connecting to and querying relational databases, giving Java applications a uniform, driver-based interface for issuing SQL and proces...
JMESPath is a formally specified query language for JSON that lets you declaratively extract and transform elements from a document. It is widely embedded in tools and SDKs, including AWS command-l...
JMS (Java Message Service), now standardized as Jakarta Messaging, is the Java API for enterprise messaging that lets applications create, send, receive, and read messages through message-oriented ...
JPA (Java Persistence API), now standardized as Jakarta Persistence, is the Java specification for object-relational mapping that lets applications persist, query, and manage Java objects against a...
JSF (JavaServer Faces), now standardized as Jakarta Faces, is a Java specification for building component-based, server-side user interfaces for web applications, managing UI state, events, and ren...
JSON:API is a specification for building APIs in JSON that standardizes how clients fetch and modify resources, including pagination, filtering, sparse fieldsets, and relationships. It reduces bike...
JSON Binding (JSON-B / Jakarta JSON Binding) is a standard Java API for converting Java objects to and from JSON documents, giving developers a declarative, annotation-driven way to serialize and d...
JSON Feed is a feed format specification that expresses web syndication content in JSON instead of XML. It aims to be simpler to read and produce than RSS and Atom for modern developers.
JSON-LD (JavaScript Object Notation for Linking Data) is a W3C standard for expressing linked data in JSON. It adds lightweight semantics to ordinary JSON so machines can understand what the data m...
JSON Processing (JSON-P / Jakarta JSON Processing) is a standard Java API for parsing, generating, querying, and transforming JSON, offering both a streaming model and an in-memory object model for...
JSON-RPC is a lightweight, transport-agnostic remote procedure call (RPC) protocol that uses JSON to encode requests and responses. A client sends an object with jsonrpc "2.0", a method name, optio...
JSON Schema enables the confident and reliable use of the JSON data format, bringing consistency, validity, and interoperability to enterprise operations. JSON Schema defines the digital objects th...
JWT (JSON Web Token) is a compact, self-contained, and secure method for transmitting information between parties as a JSON object. JWT has become essential for addressing the following needs at sc...
JSON (JavaScript Object Notation) is a lightweight, text-based data format used for storing and exchanging data. It is easy for humans to read and write, and simple for machines to parse and genera...
JSONPath is a query language used to extract, filter, and manipulate data from JSON (JavaScript Object Notation) structures. It provides a syntax similar to XPath (used for XML) but is designed spe...
JSR-303 (Bean Validation) is the Java specification that defines a metadata model and API for declaring and enforcing validation constraints on JavaBeans using annotations, so rules like "not null"...
Configuration file for Google Jules AI coding agent, providing project-specific instructions, architecture context, and coding standards.
JSON Web Encryption (JWE, RFC 7516) defines a standard for representing encrypted content using JSON-based data structures. Part of the JOSE family, it provides confidentiality for tokens and arbit...
JSON Web Key (JWK, RFC 7517) is a JSON data structure that represents a cryptographic key, and JWK Set represents a collection of keys. It is commonly used to publish public keys for verifying JWT ...
JSON Web Signature (JWS, RFC 7515) defines a standard for representing digitally signed or MACed content using JSON-based data structures. It is part of the JOSE family and provides integrity prote...
JSON Web Token (JWT, RFC 7519) is a compact, URL-safe standard for representing claims securely between two parties. Tokens consist of base64url-encoded header, payload, and signature segments and ...
The Apache Kafka protocol is the binary, TCP-based wire protocol used by clients to communicate with Kafka brokers. It defines request and response message formats for producing, consuming, and adm...
Kanban is a visual workflow management method that uses boards and cards to represent work items flowing through defined stages. It emphasizes continuous delivery, work-in-progress limits, and incr...
Kerberos is a network authentication protocol that uses tickets and symmetric-key cryptography, mediated by a trusted Key Distribution Center, to let clients and services prove their identities to ...
KML (Keyhole Markup Language) is an OGC standard XML grammar for expressing geographic annotation and visualization. It is used to display features such as placemarks, paths, and overlays in earth ...
A data architecture paradigm that combines the best features of data lakes and data warehouses, providing ACID transactions, schema enforcement, and governance on low-cost storage with support for ...
Lightweight Directory Access Protocol - an industry-standard protocol for accessing and maintaining distributed directory information services over an IP network. It plays a critical role in protec...
Lean Management is a management approach derived from the Toyota Production System that focuses on maximizing customer value while systematically eliminating waste, through continuous improvement, ...
Lean Manufacturing is a production methodology, derived from the Toyota Production System, that maximizes value and minimizes waste across manufacturing processes through just-in-time flow, continu...
Lean Operations is the application of lean principles to running an organization's day-to-day operations - eliminating waste, improving flow, and continuously improving the processes that deliver a...
Advanced certification in Lean Six Sigma methodology focused on leading complex improvement projects, statistical analysis, and change management to reduce defects and variability in business proce...
A methodology that combines Lean manufacturing principles and Six Sigma quality management techniques to improve business processes by eliminating waste and reducing variation, focusing on data-dri...
LEDES is the standard format for electronic legal billing between law firms and their clients, maintained by the LEDES Oversight Committee. Its formats — from the pipe-delimited 1998B through the X...
The Legal Entity Identifier is a 20-character code identifying a legally distinct entity participating in financial transactions, standardised as ISO 17442 and operated by GLEIF through accredited ...
File specifying the legal license under which a project is distributed, defining permissions, conditions, and limitations for use and redistribution.
LTI is the 1EdTech standard for launching an external learning tool from inside a course, carrying the user's identity, role and course context with it. LTI 1.3 rebuilt the handshake on OAuth 2.0 a...
OMA LwM2M (Lightweight M2M) is a device-management and service-enablement protocol for constrained IoT devices, built on CoAP. It defines an object model for remote provisioning, monitoring, and co...
A central bank regulation requiring commercial banks to hold a minimum percentage of customer deposits as reserves, either as cash in their vaults or as deposits with the central bank, to ensure li...
MapReduce is a programming model and processing framework for computing over very large datasets in parallel across a distributed cluster, splitting work into a map phase that transforms data and a...
MARC is the bibliographic data format libraries have shared catalogue records in since the 1960s, maintained by the Library of Congress. Its successor effort, BIBFRAME, re-expresses the same domain...
Markdown is a lightweight markup language that uses plain text formatting syntax (such as asterisks for emphasis, hashes for headings, and brackets for links) to create formatted documents that are...
The Market Reform Contract is the standard contract document of the London insurance market — the structured slip that brokers and underwriters place risk against. Its machine-readable descendants,...
A markup language is a system for annotating a document with tags or symbols that are syntactically distinguishable from the text, encoding structure, formatting, and metadata so that both humans a...
Matter is a Connectivity Standards Alliance standard for secure, interoperable smart-home device connectivity over IP. It unifies fragmented ecosystems so devices from different vendors can work to...
MAVLink is the messaging protocol between unmanned vehicles and ground control stations — a compact binary format with a published message catalog covering telemetry, commands, mission upload and p...
Model Context Protocol configuration file defining MCP server connections for AI coding assistants, enabling tool integration and enhanced AI capabilities.
MCP Description (mcpdesc) is an open, portable, machine-readable format for describing Model Context Protocol (MCP) servers — declaring their info, transports, security, capabilities, tools, resour...
MEF standardises the wholesale and inter-carrier side of connectivity — how one network operator buys capacity, orders services and settles with another. Its Lifecycle Service Orchestration (LSO) A...
MessagePack is an efficient binary serialization format that lets you exchange data among multiple languages like a more compact JSON. It is optimized for speed and small payload size in network an...
A messaging protocol defines the rules and message formats that let systems exchange data asynchronously through queues, topics, and brokers rather than direct request/response calls. Protocols lik...
A methodology is a documented, repeatable approach a team follows to design, deliver, and operate software and APIs — the ordered set of principles, phases, and practices that turns individual effo...
APIExamples is Microcks' own specification format for defining reusable request/response examples that drive Microcks mocks and contract tests, independent of the API definition itself.
MISMO is the standards development organization for the US mortgage industry — a not-for-profit subsidiary of the Mortgage Bankers Association whose Reference Model defines the data of a loan from ...
MLOps (Machine Learning Operations) is the set of practices and tooling for deploying, monitoring, versioning, and retraining machine learning models in production. It applies DevOps discipline to ...
Mobile Connect is the GSMA's operator-backed identity and authentication standard, built on OpenID Connect, that lets a user authenticate to a service using their mobile subscription rather than a ...
Mockups are static, medium-to-high fidelity visual representations of a user interface used to show layout, content, and look-and-feel before development begins. They sit between low-fidelity wiref...
Modbus is a widely deployed industrial communication protocol for connecting programmable logic controllers and field devices. It defines a simple request/response model over serial and TCP/IP netw...
MCP (Model Context Protocol) is an open protocol that standardizes how applications provide context to large language models (LLMs). It offers a consistent way to connect AI models to diverse data ...
A modeling language is a formal notation, either graphical or textual, for expressing the structure, behavior, and constraints of a system according to a defined set of rules. In the API world it c...
An architectural pattern that structures a monolithic application into loosely coupled, well-defined modules with clear boundaries and dependencies, combining the operational simplicity of a monoli...
Monolithic Architecture is a software design approach in which an application is built and deployed as a single, self-contained unit, with its user interface, business logic, and data access bundle...
MQTT is a lightweight, OASIS-standardized publish/subscribe messaging protocol designed for constrained devices and low-bandwidth, high-latency networks. It is widely used for IoT telemetry and com...
MTConnect is the open standard for retrieving data from manufacturing equipment — an information model plus a read-only HTTP interface returning XML, so machine tools, CNCs and shop-floor equipment...
Mutual TLS (mTLS) authenticates both client and server using X.509 certificates during the TLS handshake. RFC 8705 standardizes its use for OAuth 2.0 client authentication and certificate-bound acc...
A software architecture pattern that separates an application into logical layers or tiers, typically presentation, business logic, and data access layers, to improve modularity, scalability, and m...
RFC 8705 defines mutual-TLS client authentication and certificate-bound access tokens for OAuth. The client authenticates with an X.509 certificate, and the issued token is bound to it, so the toke...
MVC (Model-View-Controller) is a software design pattern that separates an application into three interconnected parts — the model that holds data and rules, the view that renders the interface, an...
MXML is an XML-based markup language, introduced by Macromedia and later maintained by Adobe, for declaratively laying out the user interfaces and components of Flex applications that run on the Fl...
NACHA governs the ACH Network and publishes the NACHA Operating Rules, which define the file format and rules for Automated Clearing House electronic payments in the United States. These rules stan...
Standardized rules and conventions for communication between network devices, including protocols like TCP/IP, HTTP, DNS, and others that enable data exchange across networks.
NFC (Near Field Communication) is a short-range wireless standard that lets two devices exchange data by being held within a few centimeters of each other, widely used for contactless payments, tra...
NIO (Java New I/O) is the non-blocking I/O API introduced in Java 1.4 that provides buffer, channel, and selector primitives for handling many concurrent connections without dedicating a thread to ...
National Institute of Standards and Technology - develops and promotes measurement standards, cybersecurity frameworks, and technology guidelines
NMFTA (the National Motor Freight Traffic Association) is the nonprofit membership body that has set the standards for North American freight since 1956, and through its Digital Standards Developme...
Normalization is the practice of structuring data so that each fact is stored once and dependencies are made explicit, reducing redundancy and update anomalies. In databases it is expressed as a pr...
The Notary Project signature specification defines a portable signature envelope for OCI artifacts and blobs, along with how those signatures are stored in and discovered from an OCI registry. Nota...
The New Payments Platform is Australia's real-time account-to-account payment infrastructure, operated by NPP Australia, carrying data-rich ISO 20022 messages and addressable PayID identifiers. Pay...
NTP (Network Time Protocol, RFC 5905) is a protocol for synchronizing the clocks of computers over packet-switched networks. Accurate time is essential for logging, security, and distributed coordi...
OAI-PMH is the Open Archives Initiative protocol for harvesting metadata from repositories. Six verbs over HTTP let an aggregator discover what a repository holds and collect its records incrementa...
OAuth 2.0 is an authorization framework that allows third-party applications to securely access a user's resources (such as accounts or data) on another service without sharing passwords. It is wid...
OAuth 2.1 is a consolidation of OAuth 2.0 and the extensions and security practices that have become standard since 2012. It is not a new protocol — it folds the Security Best Current Practice into...
The OAuth 2.0 Security Best Current Practice is the IETF's consolidated, current security guidance for OAuth deployments. It refines and in places overrides the original RFC 6749 advice — most cons...
OAuth is an open authorization framework that enables third-party applications to access user resources without exposing credentials. It provides a secure, token-based delegation mechanism widely u...
Object-Oriented Programming (OOP) is a software design paradigm that structures code around objects — bundles of data (attributes) and the behavior (methods) that acts on them — using principles li...
The OCI Distribution Specification defines the HTTP API a container registry exposes for pushing, pulling and discovering artifacts, including the referrers API. It is the one specification in the ...
The OCI Image Specification defines the container image format — the manifest, the image configuration, the filesystem layers and the descriptors that tie them together — so an image built by one t...
OCI is SAP's Open Catalog Interface, the punchout protocol that connects an enterprise procurement system to a supplier's external catalog — the buyer browses the supplier's own site and the select...
The OCI Runtime Specification defines the configuration, execution environment and lifecycle of a container — what a runtime is handed and what operations it must support — so that runc, crun, and ...
OCI (Open Container Initiative) is an open governance project under the Linux Foundation that defines vendor-neutral specifications for container images, runtimes, and distribution, so containers b...
OCPI is the roaming protocol of electric-vehicle charging — the interface between charge point operators and mobility service providers that lets a driver with one account use another network's cha...
OCPP is the open protocol between an electric-vehicle charging station and the network that operates it — the link that lets a charge point from one manufacturer be run by any management system. Ve...
OData (Open Data Protocol) is an OASIS and ISO/IEC-approved standard for building and consuming RESTful APIs, defining consistent conventions for querying and updating data — including a shared URL...
ODBC (Open Database Connectivity) is a standard API specification that provides a database-agnostic interface for applications to connect to and interact with various relational database management...
OGC API is a family of Open Geospatial Consortium standards for sharing geospatial data over modern RESTful, OpenAPI-described web APIs. It modernizes earlier OGC web services such as WFS and WMS.
WMS is the Open Geospatial Consortium standard for requesting map images over HTTP. A client asks a server for a rendered map of a named layer, in a named coordinate system, for a given bounding bo...
OneRoster is the 1EdTech standard for exchanging class rosters, enrollments, users, academic sessions and grades between a student information system and the applications around it. It has both a C...
OPC UA (Unified Architecture, IEC 62541) is a platform-independent, service-oriented standard for secure, reliable industrial data exchange. It provides information modeling and transport for facto...
The UK Open Banking Standard is the technical and operational specification developed by the Open Banking Implementation Entity, now Open Banking Limited — read/write account and payment initiation...
A modern, developer-first specification pioneered by Bruno for defining and sharing API collections. Designed for simplicity and collaboration.
The Open Compute Project is a collaborative community that open-sources data-center hardware designs — servers, racks, storage, networking, cooling and power — contributed by hyperscalers and vendo...
Open Policy Agent (OPA) is an open-source, policy-based control engine that allows you to define and enforce fine-grained access control and policy decisions across microservices, APIs, and infrast...
OpenADR is the open standard for automated demand response — the signals a grid operator or utility sends to shift, shed or shape electricity load at the customer's premises. Version 2.0 is standar...
The Overlay Specification is an auxiliary standard that complements the OpenAPI Specification. An OpenAPI description defines API operations, data structures, and metadata—the overall shape of an A...
OpenAPI (formerly known as Swagger) is a specification for building, documenting, and consuming RESTful APIs. It defines a standard, language-agnostic format for describing APIs, enabling both huma...
OpenChain is a Linux Foundation project defining conformance requirements for open-source license-compliance and security-assurance programs, ratified as ISO/IEC 5230:2020 and ISO/IEC 18974:2023. I...
An open source specification and tool for real-time cost monitoring of Kubernetes infrastructure and cloud spending, enabling teams to measure, allocate, and optimize cloud costs across workloads.
openCypher is an open-source project that provides a standardized graph query language originally developed by Neo4j for querying property graphs. It enables developers to write expressive pattern-...
OpenFeature is an incubating CNCF specification for a vendor-agnostic feature-flag evaluation API. It defines the evaluation interface, evaluation context and provider model so applications can cha...
OpenID Connect (OIDC) is an identity layer built on top of OAuth 2.0, maintained by the OpenID Foundation. It lets clients verify a user's identity based on the authentication performed by an autho...
OpenMetrics is a specification for transmitting metrics at scale, formalizing and extending the Prometheus exposition format. It defines a standard text and protobuf representation for time-series ...
OpenRTB is the IAB Tech Lab specification for real-time bidding — the message format and protocol by which an ad exchange asks demand-side platforms to bid on an impression and receives their respo...
OpenTelemetry is a CNCF project that provides a specification, APIs, and the OTLP protocol for generating and exporting traces, metrics, and logs. It standardizes telemetry collection across langua...
The OpenTravel Specification is the royalty-free message vocabulary the travel industry uses between suppliers, GDSs, channel managers and OTAs. It ships in two forms — the OTA 1.0 XML message suit...
Apache ORC (Optimized Row Columnar) is a self-describing, type-aware columnar file format for large-scale data processing. It provides efficient compression, predicate pushdown, and indexing for an...
ORCID provides a persistent identifier for a researcher, plus an API for reading and writing the record of their affiliations, works and funding. It solves name ambiguity — the same person publishi...
OSCAL is NIST's machine-readable format for compliance documentation — control catalogs, control baselines, system security plans, assessment plans and assessment results, expressed in XML, JSON an...
OSGi is a Java module system and service platform that lets applications be built from small, reusable components called bundles. It manages dynamic installation, versioning, and lifecycle of these...
Occupational Safety and Health Administration - U.S. federal agency responsible for setting and enforcing workplace safety and health standards
The OSV Schema is an OpenSSF JSON format for describing open-source vulnerabilities, with precise affected-version ranges expressed against package ecosystems. It gives vulnerability data a machine...
Open Web Application Security Project - A nonprofit foundation that works to improve the security of software through community-led open source projects, hundreds of chapters worldwide, and educati...
Apache Parquet is an open source, column-oriented data file format designed for efficient data storage and retrieval. It provides efficient data compression and encoding schemes with enhanced perfo...
Partitioning is the practice of dividing a large dataset, table, or system into smaller, independently manageable pieces based on a key such as date, region, or tenant, so that storage and queries ...
PASETO (Platform-Agnostic Security Tokens) is a specification for secure stateless tokens designed as a less error-prone alternative to JWT. It uses versioned, well-defined cryptographic primitives...
Payment Card Industry Data Security Standard (PCI DSS) is a set of security standards designed to ensure that all companies that accept, process, store or transmit credit card information maintain ...
PCI Express is the PCI-SIG standard for high-speed serial interconnect between a processor and peripherals — GPUs, NVMe storage, network adapters and accelerators — defining the electrical, protoco...
PDF (Portable Document Format), standardized as ISO 32000, is a fixed-layout document format that preserves the exact appearance of text, fonts, graphics, and layout across every device and platfor...
Peppol is an open, governed network for exchanging electronic procurement and invoicing documents across borders — a four-corner model where each party connects once to an accredited access point, ...
Pig Latin is the high-level data-flow language used by Apache Pig to express extract-transform-load and analysis pipelines over large datasets, compiling down to MapReduce (and later Tez/Spark) job...
PKCE is an OAuth extension that protects the authorization code flow against interception. The client generates a secret verifier, sends its hash with the authorization request, and presents the ve...
POP3 (Post Office Protocol version 3, RFC 1939) is a standard protocol for retrieving email from a remote mail server to a local client. It is one of the foundational email access protocols alongsi...
POSIX (Portable Operating System Interface, IEEE 1003) is a family of IEEE standards that defines a common API, shell, and utility interface for Unix-like operating systems so that software written...
A Postman Collection is a portable JSON artifacts that organizes one or more API requests—plus their params, headers, auth, scripts, and examples—so you can run, share, and automate them in the Pos...
Postman environments are collections of variables that let you easily switch between different configurations (like development, staging, and production server URLs) without manually changing value...
A framework and approach that embeds privacy protections into the design and operation of IT systems, networked infrastructure, and business practices from the ground up, rather than as an aftertho...
private_key_jwt is an OAuth 2.0 and OpenID Connect client authentication method in which the client proves its identity to the token endpoint by signing a JWT assertion with its private key, rather...
Problem Details for HTTP APIs, defined in RFC 7807 (now obsoleted by RFC 9457), is a standardized machine-readable format for carrying error details in HTTP API responses using the application/prob...
Problem Details for HTTP APIs (RFC 9457, obsoleting RFC 7807) defines a standard machine-readable format for carrying error details in HTTP responses. The application/problem+json media type provid...
Visual representations that illustrate the sequential steps and decision points in a process, showing how inputs are transformed into outputs through various activities and pathways. They are used ...
The individual entries on a product backlog - features, enhancements, fixes, and other work - each expressing something of value to be built or improved, typically used in Agile and Scrum practice....
A prioritized list of features, enhancements, and fixes that serves as the single source of requirements for product development, typically used in Agile and Scrum methodologies. Teams use it to al...
Detailed documentation that captures the requirements, behavior, and constraints of a product, giving teams a shared, authoritative description of what is to be built and how it should work. Stakeh...
A programming paradigm is a fundamental style or approach to writing software — such as imperative, object-oriented, functional, or declarative — that shapes how developers structure code, model st...
A project management methodology is a structured framework for planning, executing, and controlling work to hit specific goals within constraints of time, budget, and scope — spanning approaches fr...
.prompt.md files are reusable, version-controlled prompt templates for AI coding assistants — Markdown documents that package task-specific instructions (with optional frontmatter) so a common deve...
Protocol Buffers (protobuf) is Google's language- and platform-neutral mechanism for serializing structured data, defined by a .proto schema and encoded as a compact binary format. It is the interf...
Prototypes are early, preliminary versions of a product built to explore ideas, validate designs, and gather feedback before full-scale development. In API work, a prototype is often a mocked inter...
Pub/Sub (publish-subscribe) is a messaging pattern where publishers send messages to named topics without any knowledge of who receives them, and subscribers register interest in topics to receive ...
Template file that pre-populates pull request descriptions with structured sections like change summary, testing steps, and checklist items.
Pushed Authorization Requests (PAR), defined in RFC 9126, let an OAuth 2.0 client send its authorization request parameters directly to the authorization server over a secured back channel and rece...
QoS (Quality of Service) is the measurement and management of a service's performance characteristics - latency, throughput, availability, and error rate - so that its behavior meets agreed expecta...
QTI is the 1EdTech standard for representing assessment items, tests and results in a portable form. It covers question types, scoring rules, item banks and outcome reporting, so an assessment auth...
Quality of Service (QoS) is the measurement and management of a service's performance characteristics - latency, throughput, availability, and error rate - so that its behavior meets agreed expecta...
Frameworks and benchmarks that define acceptable levels of quality for products, services, or processes to ensure consistency and meet customer expectations. Proper implementation reduces legal and...
QUIC (RFC 9000) is a UDP-based, multiplexed, and secure transport protocol that provides built-in TLS 1.3 encryption and low-latency connection establishment. It is the transport foundation for HTT...
A responsibility assignment matrix that defines roles and responsibilities using four key designations - Responsible (those who do the work), Accountable (the ultimate decision maker), Consulted (t...
Raft is a consensus algorithm for managing a replicated log across a cluster of servers, designed to be more understandable than Paxos while providing the same fault-tolerance and consistency guara...
RAML (RESTful API Modeling Language) is a YAML-based specification for describing RESTful APIs in a structured, reusable format. It emphasizes patterns, resource types, and traits to promote consis...
Role-Based Access Control (RBAC) is a security paradigm that restricts system access based on assigned roles rather than individual user identities. Users are granted permissions through their role...
Rich Communication Services is the GSMA's successor to SMS — an operator-standardised messaging protocol supporting rich media, read receipts, typing indicators, verified sender identity and intera...
RDF (Resource Description Framework) is a W3C standard data model for describing resources as subject-predicate-object triples, providing a common, graph-based foundation for linked data and the se...
RDP (Remote Desktop Protocol) is a Microsoft-developed protocol that lets a user connect to and control a remote computer's graphical desktop over a network, transmitting display, input, and device...
Reactive Programming is a declarative programming paradigm oriented around asynchronous data streams and the propagation of change, letting systems react to events as they flow rather than pulling ...
Standard repository documentation file providing project overview, setup instructions, and usage examples. Automatically displayed on repository landing pages by GitHub, GitLab, and other hosting p...
Redfish is the DMTF's RESTful, JSON, schema-backed API standard for managing server and data-center hardware — power, thermals, firmware, inventory, boot and out-of-band management — designed to re...
A sequence of characters that define a search pattern, commonly used for string matching, validation, and text manipulation in programming and data processing. It supports the full software develop...
Rules issued by governments and regulators that increasingly mandate how APIs are built, secured, and made available — from open banking and data-portability regimes to privacy and consumer-protect...
Pre-built templates and frameworks for meeting regulatory compliance requirements across various industries and jurisdictions. Proper implementation reduces legal and operational risk while support...
Regulatory is a compliance-related concept that helps organizations meet regulatory requirements and maintain adherence to industry standards. It supports audit readiness, risk management, and the ...
A database design approach that organizes data into tables (relations) with rows and columns, establishing relationships between tables through keys to ensure data integrity and minimize redundancy...
renovate.json is the configuration file for the Renovate bot, which automates dependency updates across many package managers by opening pull requests based on customizable update rules, schedules,...
Reporting templates are pre-built, reusable document and dashboard structures that standardize how reports are generated, so that metrics, formatting, and layout stay consistent across teams and re...
Reserve requirements are central-bank regulations that set the minimum fraction of customer deposits a bank must hold in reserve rather than lend out, used as a tool to manage liquidity, credit cre...
The RESO Data Dictionary is the Real Estate Standards Organization's field-level vocabulary for property data — the shared nouns of American residential real estate. It defines resources including ...
The RESO Universal Property Identifier is a URN-based scheme for identifying a piece of real property unambiguously across systems, jurisdictions and data providers. Version 2.0 encodes country, ju...
The RESO Web API is the Real Estate Standards Organization's OData-based standard for moving property listing data between multiple listing services, brokers, portals and applications. Core 2.0.0 s...
REST (Representational State Transfer) is an architectural style for designing networked applications that uses stateless communication and standard HTTP methods to interact with resources identifi...
RETS, the Real Estate Transaction Standard, is the XML-based protocol that carried multiple listing service data between systems for roughly two decades before the RESO Web API replaced it. Version...
RFID (Radio-Frequency Identification) uses electromagnetic fields to automatically identify and track tags attached to objects, enabling contactless reading of stored data for inventory, access con...
Rich Authorization Requests extend OAuth with an `authorization_details` parameter carrying structured, fine-grained authorization data instead of a flat list of scope strings. A request can expres...
RISC-V is an open standard instruction set architecture (ISA) governed by RISC-V International, freely available for any organization to implement in a processor without licensing fees — the first ...
.roorules is a configuration file for the Roo Code AI coding assistant that supplies project-specific rules, conventions, and custom instructions the agent follows when reading and editing a codebase.
ROS is the middleware most modern robotics software is built on — a node, topic, service and action model with a large ecosystem of drivers, planners and tools. ROS 2 rebuilt it on DDS for real-tim...
RPC (Remote Procedure Call) is a request-response pattern where a client invokes a named procedure on a remote server as if it were a local function call. It underpins protocols and frameworks like...
RSS (Really Simple Syndication) is an XML-based web feed format for publishing frequently updated content such as blog posts and news. Clients subscribe to feeds to receive new items without visiti...
RTSP (Real-Time Streaming Protocol), standardized as RFC 2326 and updated by RFC 7826, is a network control protocol for establishing and controlling media streaming sessions. It acts as a "network...
Documented procedures and step-by-step instructions for handling routine operations, troubleshooting issues, and responding to incidents in IT systems and infrastructure. They reduce manual effort ...
SAE J3016 defines the six levels of driving automation, from no automation at Level 0 to full automation at Level 5, along with the vocabulary for describing who is responsible for which part of th...
Scaled Agile Framework (SAFe) is an enterprise-scale agile framework that provides guidance for implementing agile practices across large organizations with multiple teams working together. Teams u...
SAML (Security Assertion Markup Language) is an XML-based open standard for exchanging authentication and authorization data between identity providers and service providers. It enables single sign...
SCADA (Supervisory Control and Data Acquisition) is a category of industrial control system used to monitor and control physical processes—factories, power grids, water systems, and pipelines—by ga...
Scaled Agile, most often the Scaled Agile Framework (SAFe), is a set of organizational and workflow patterns for applying agile and lean practices across many teams at once—coordinating dozens or h...
Schema Design is the practice of defining the structure of data—its objects, fields, types, and relationships—so that databases and APIs represent information consistently and can be validated, evo...
Schema Evolution is the practice of changing a data schema over time—adding, removing, or altering fields and types—without breaking the producers and consumers that already depend on it, using com...
Schema Free (or schemaless) describes data stores and APIs that do not enforce a fixed structure up front—records can carry different fields from one to the next—trading rigid validation for flexib...
Schema.org is a collaborative, community-driven vocabulary (launched in 2011 by Google, Microsoft, Yahoo!, and Yandex) that defines shared types and properties to describe things on the web—people,...
Schema Validation is the practice of checking that a data payload conforms to a declared structure - its types, required fields, formats, and constraints - before it is accepted or returned. In the...
SCIM (System for Cross-domain Identity Management, RFC 7643/7644) is a standard for automating the exchange of user identity information between identity domains and applications. It defines a comm...
SCORM is the packaging and runtime standard for e-learning content, developed by the US Department of Defense's ADL Initiative. It defines how a course package is structured, how it is launched by ...
Scrum is an agile project management framework that organizes work into fixed-length iterations called sprints, typically lasting two to four weeks. It defines clear roles (Product Owner, Scrum Mas...
Software Development Life Cycle - A systematic process for planning, creating, testing, and deploying software systems. Effective use of this practice reduces bugs in production and supports a cult...
Security Operations - the practice of integrating security practices into IT operations to identify, manage, and respond to security threats and vulnerabilities in real-time while maintaining syste...
A security design principle where systems and software are configured with the most secure settings from the initial deployment, requiring users to explicitly opt-in to less secure options rather t...
A software development approach that prioritizes security from the initial design phase through implementation, ensuring security considerations are built into the foundation of systems rather than...
A framework that integrates security practices and considerations into every phase of the software development process, from initial design through deployment and maintenance, to minimize vulnerabi...
A framework that integrates security practices into every phase of the software development process, from design and development through testing and deployment, to identify and mitigate vulnerabili...
Network protocols that create encrypted tunnels for secure data transmission over untrusted networks, including VPN technologies like IPsec, SSL/TLS, WireGuard, and SSH tunneling for protecting com...
A software development approach that integrates security considerations and practices from the initial design phase through the entire development lifecycle, rather than adding security as an after...
Security policy document describing supported versions, vulnerability reporting procedures, and responsible disclosure guidelines for a project.
A set of rules and standards that define how data is transmitted securely over networks, including protocols like SSL/TLS, HTTPS, SSH, and IPsec that provide encryption, authentication, and data in...
Frameworks and documented guidelines that establish security requirements, controls, and best practices for protecting organizational assets and information systems. It plays a critical role in pro...
Security standards are the established frameworks, specifications, and benchmarks that define how systems, networks, and data are protected from unauthorized access, attack, and vulnerabilities. Th...
security.txt, standardized as RFC 9116, is a simple machine- and human-readable file served at /.well-known/security.txt that tells security researchers how to report vulnerabilities responsibly. I...
Semantic versioning (SemVer) is a versioning system designed to convey meaningful information about software updates through a standardized format. It follows the structure MAJOR.MINOR.PATCH, where...
SECS/GEM is the SEMI family of standards (SEMI E4, E5, E30, E37) defining how semiconductor fabrication equipment communicates with factory host systems — status, events, alarms, recipes and proces...
Server-Sent Events (SSE) is a WHATWG-standardized mechanism for servers to push a stream of text-based events to clients over a single long-lived HTTP connection. The browser EventSource API consum...
A collection of serverless architectures and patterns for building applications on AWS, featuring ready-to-use templates and best practices for Lambda, API Gateway, EventBridge, and other serverles...
The Service Mesh Interface was a CNCF specification defining a standard set of Kubernetes custom resources for traffic policy, telemetry and traffic management across service meshes. It is archived...
An architectural pattern where software components provide services to other components through a communication protocol over a network. Services are loosely coupled, reusable, and can be independe...
Design patterns and architectural approaches for building microservices and service-oriented applications, covering how services are decomposed, communicate, handle data, and stay resilient across ...
SFTP, the SSH File Transfer Protocol, is a network protocol that provides secure file access, transfer, and management over a single encrypted SSH connection, widely used to move data and batch fil...
Sharding is a database and system design technique that horizontally partitions a dataset across multiple nodes, so that each shard holds a subset of the data, allowing storage and query load to sc...
Sigstore is an open standard and set of tools for signing, verifying, and proving the provenance of software artifacts. It provides keyless signing with short-lived certificates and a transparency ...
Siren is a hypermedia specification for representing entities in JSON, including their properties, actions, and links. It enables clients to discover available state transitions and operations dyna...
A data-driven methodology and set of techniques for process improvement that seeks to reduce defects and variability in business processes to achieve near-perfect quality (3.4 defects per million o...
Sketches are low-fidelity, throwaway drawings of an interface, data model, or API flow used early in the design process to explore ideas quickly and cheaply before committing to higher-fidelity moc...
SLSA (Supply-chain Levels for Software Artifacts) is a security framework and specification of progressive levels for hardening software build and release pipelines. It defines requirements and pro...
SMART on FHIR is an HL7 standard that layers OAuth 2.0 and OpenID Connect onto FHIR so third-party, provider, and patient-facing apps can be authorized against an EHR with scoped, revocable permiss...
SMTP (Simple Mail Transfer Protocol) is the internet standard for sending and relaying electronic mail between servers. Defined in the RFC series and in wide use since the early 1980s, it remains t...
SNMP (Simple Network Management Protocol) is an internet-standard protocol for collecting and organizing information about managed devices on IP networks. It is widely used for monitoring routers, ...
SOA (Service-Oriented Architecture) is an architectural style in which application functionality is organized into discrete, network-accessible services with well-defined contracts, so that capabil...
SOAP (Simple Object Access Protocol) is a messaging protocol for exchanging structured information in web services using XML over HTTP and other transport protocols. It provides built-in standards ...
SOC 2 is an audit and reporting framework from the AICPA, based on the Trust Services Criteria (security, availability, processing integrity, confidentiality, and privacy), under which an independe...
Network architecture approach that enables dynamic, programmatically efficient network configuration to improve performance and monitoring by decoupling the network control plane from the data plan...
Reusable solutions and best practices for organizing software system architecture, including patterns like MVC, Microservices, Layered Architecture, Event-Driven, and CQRS that provide proven appro...
Reusable solutions to commonly occurring problems in software design, including creational, structural, and behavioral patterns that help developers write more maintainable and scalable code. Organ...
A structured process for planning, creating, testing, and deploying software systems through defined phases including requirements analysis, design, implementation, testing, deployment, and mainten...
A structured process for planning, creating, testing, and deploying software systems through distinct phases including requirements gathering, design, implementation, testing, deployment, and maint...
A Single Page Application (SPA) is a web application that loads a single HTML document and dynamically rewrites the page in the browser using JavaScript, driving all its data and state changes thro...
SPARQL is the W3C standard query language and protocol for retrieving and manipulating data stored in RDF (Resource Description Framework) format, letting you query graph data across the semantic w...
SPDX (Software Package Data Exchange) is an open, ISO/IEC 5962 standard for communicating software bill-of-materials information, including components, licenses, and copyrights. It supports license...
In the API world a specification is a machine-readable document that formally describes how an API behaves — its endpoints, operations, schemas, and contracts — so that humans and tooling can desig...
Spectral is a flexible, open-source tool designed for linting and validating API specifications such as OpenAPI, AsyncAPI, and JSON Schema files. It helps enforce best practices, standards, and cus...
SPIFFE (Secure Production Identity Framework for Everyone) is a graduated CNCF set of specifications for workload identity. It defines a URI naming scheme for workloads, verifiable identity documen...
SQL (Structured Query Language) is the standard programming language for managing and querying relational databases. It provides commands for creating, reading, updating, and deleting data, as well...
SSH (Secure Shell) is a cryptographic network protocol for secure remote login, command execution, and file transfer between computers over unsecured networks. It provides strong encryption, authen...
SSL/TLS (Secure Sockets Layer / Transport Layer Security) is the cryptographic protocol that encrypts data in transit across networks, authenticating servers (and optionally clients) and protecting...
SSO (Single Sign-On) is an authentication scheme that lets a user sign in once with a single set of credentials and gain access to multiple independent applications and services without logging in ...
Documented step-by-step instructions for routine operations and processes to ensure consistency, quality, and compliance across an organization. It is essential for organizations operating in regul...
Standard Webhooks is a set of open source tools and guidelines to send webhooks easily, securely and reliably. Webhooks are becoming increasingly popular, though every webhooks provider implements ...
The process of implementing and developing technical standards based on the consensus of different parties, including firms, users, interest groups, standards organizations, and governments, to est...
Established specifications, protocols, and guidelines that define technical requirements and best practices for consistency and interoperability across systems and organizations. It is essential fo...
STOMP (Simple Text Oriented Messaging Protocol) is a lightweight, text-based protocol for interoperable messaging between clients and message brokers. Its frame-based design makes it easy to implem...
File describing how users can get help with a project, including links to documentation, forums, issue trackers, and support channels.
An open-source framework for designing, building, documenting, and consuming RESTful web services. Swagger provides a specification (OpenAPI) and tools for API development including interactive doc...
SWORD is the standard protocol for depositing content into a repository — the write side of the scholarly infrastructure that OAI-PMH reads. It lets an author, a publisher or a current-research-inf...
An open table format defines how large analytic datasets are organized as tables on top of files in object storage, adding a metadata layer that tracks schema, partitions, and snapshots so that eng...
Pre-built templates and frameworks for generating tax reports, compliance documents, and financial summaries required for tax filing and regulatory purposes. It helps organizations meet regulatory ...
Pre-designed templates for organizing, calculating, and filing tax documents and returns. Financial institutions and enterprises use them to streamline reporting operations and manage recurring fis...
TCP/IP (Transmission Control Protocol/Internet Protocol) is the foundational communication protocol suite that powers the internet and most computer networks. It provides reliable, ordered delivery...
Detailed technical requirements, standards, and parameters that define the characteristics and performance criteria of a product, system, or service. Organizations adopt it to address specific tech...
Technology Standards are the agreed-upon specifications, protocols, and conventions that let independently built systems interoperate. In the API economy they are the shared rules — from wire proto...
Reusable, pre-structured starting points — for documents, code, API definitions, or collections — that capture a known-good pattern so it can be forked and filled in rather than rebuilt each time.
Structured scenarios that verify software functionality by defining inputs, execution conditions, and expected results to ensure quality and correctness. It is widely used by developers to build, m...
A software development approach where tests are written before the actual code, following a red-green-refactor cycle to ensure code quality and maintainability. It supports the full software develo...
A software development approach where tests are written before the implementation code, ensuring code quality and driving design decisions through test requirements. It is widely used by developers...
Structured documentation outlining test objectives, scope, approach, resources, schedule, and deliverables for software testing activities. It supports the full software development lifecycle from ...
Automated scripts used to verify software functionality, validate code behavior, and ensure quality through repeatable testing procedures. It supports the full software development lifecycle from d...
Documentation that defines the requirements, procedures, and expected outcomes for testing software systems. Effective use of this practice reduces bugs in production and supports a culture of qual...
A collection of organized test cases designed to validate specific functionality or features of software applications. It is widely used by developers to build, maintain, and scale software applica...
Thread is a low-power, IPv6-based mesh networking protocol for connected devices, governed by the Thread Group. It provides the self-healing wireless mesh that Matter runs over, giving every device...
Apache Thrift is an interface definition language and binary RPC framework for building cross-language services. It generates client and server stubs and serialization code from a language-neutral ...
The TM Forum Open API suite is a family of standard REST APIs covering the operational and business support side of a telecom operator — product catalog, ordering, service qualification, billing, t...
TOGAF is the most widely adopted enterprise architecture framework, maintained by The Open Group since 1995 and now in its 10th Edition. It is a method rather than a notation or a product: the Arch...
Token Exchange defines how one security token is traded for another, with explicitly modelled delegation and impersonation. It carries `actor_token` and `may_act` semantics so a token can record th...
TOML (Tom's Obvious Minimal Language) is a configuration file format designed to be easy to read and to map unambiguously to a hash table. It has a formal specification and is widely used in modern...
W3C Trace Context is a Recommendation that standardizes the traceparent and tracestate HTTP headers for propagating distributed tracing context across services. It enables end-to-end correlation of...
The Update Framework is a graduated CNCF specification for securing software update systems. It defines a set of signed JSON metadata roles and a client workflow designed to remain safe even when t...
The Turbo EA Reference Catalog is an open, MIT-licensed reference model for business architecture, covering three orthogonal artefacts — business capabilities (what the enterprise does), business p...
UBL is an OASIS standard defining royalty-free XML schemas for the common documents of trade — order, despatch advice, receipt advice, invoice, credit note and dozens more — providing the shared do...
OSDM is the International Union of Railways' open standard for rail sales and distribution — the offer, booking, fulfilment and after-sales interface that lets any retailer sell any operator's rail...
The UK Open Banking Standard is the machine-readable API specification created by the Open Banking Implementation Entity (OBIE, now Open Banking Limited) under the Competition and Markets Authority...
User-Managed Access (UMA 2.0) is a Kantara Initiative profile of OAuth 2.0 that lets a resource owner control authorization for protected resources across services. It introduces an authorization s...
UML (Unified Modeling Language) is a standardized, general-purpose visual modeling language maintained by the Object Management Group for specifying, visualizing, and documenting the structure and ...
UN/CEFACT is the United Nations Centre for Trade Facilitation and Electronic Business, the intergovernmental body responsible for UN/EDIFACT and for the modern semantic models — the Buy-Ship-Pay re...
Underwriting Standards are the documented criteria and guidelines a lender or insurer uses to assess and price risk when deciding whether to extend credit or issue a policy. They define the thresho...
The Unique Property Reference Number is the United Kingdom's persistent identifier for every addressable location — building, plot, parcel or subdivision. Issued by local authorities, curated by Ge...
US Core is the HL7 FHIR implementation guide that defines the minimum set of resource profiles, data elements, and interactions a US health IT system must support for nationwide interoperability. I...
The United States Core Data for Interoperability (USCDI) is a standardized set of health data classes and data elements, published and versioned by the ONC, that health IT must be able to exchange ...
A use case describes a concrete way an API, product, or capability gets applied to accomplish a specific goal for a specific actor. It anchors abstract technical features to the real-world problems...
A tool or practice for capturing software requirements from an end-user perspective, typically following the format "As a [user], I want [goal], so that [benefit]". Teams use it to align stakeholde...
UTF-8 is the recommended character encoding for APIs because it ensures compatibility, efficiency, and universality. Here’s why you should use UTF-8: * **Universal Compatibility** - UTF-8 suppor...
RuleSets are how to configure vacuum to know which rules to run for each specification, and how it should evaluate those rules, and a RuleSet is a style guide with each rule being an individual req...
Variable Recurring Payments (VRP) is a UK Open Banking payment-initiation standard that lets a customer authorize a trusted third party, via a single long-lived consent, to initiate a series of pay...
VAST — the Video Ad Serving Template — is the IAB Tech Lab XML specification that tells a video player what ad to play, where to fetch it, and which events to report back. VMAP sits alongside it de...
The vCard Ontology is a W3C specification that expresses vCard contact information — names, phone numbers, email addresses, and postal addresses — as RDF, so that people and organizations can be de...
vCard (RFC 6350) is the standard file format for electronic business cards, encoding contact information such as names, addresses, phone numbers, and emails. It is widely supported for exchanging c...
Versioning protocols are the standards and conventions for signaling change in APIs, software interfaces, and data formats — such as Semantic Versioning (SemVer) — so that consumers can tell a safe...
VNC (Virtual Network Computing) is a graphical desktop-sharing system that uses the Remote Frame Buffer (RFB) protocol to transmit keyboard and mouse events from one computer to another and relay s...
A VPN (Virtual Private Network) creates an encrypted tunnel between a user's device and a remote network, protecting data from interception and masking the user's IP address. It is widely used for ...
WADL (Web Application Description Language) is an XML-based specification for describing HTTP-based web applications and RESTful services. It models resources, methods, request and response represe...
A sequential software development methodology where progress flows steadily downwards through phases of conception, initiation, analysis, design, construction, testing, deployment, and maintenance....
WCAG (Web Content Accessibility Guidelines) is a set of W3C recommendations for making web content more accessible to people with disabilities, organized around four principles — Perceivable, Opera...
Web standards are the specifications and guidelines — largely from the W3C, WHATWG, and IETF — that define how core web technologies like HTML, CSS, HTTP, URLs, and JavaScript APIs should behave, s...
Web Authentication (WebAuthn) is a W3C Recommendation that defines a browser API for strong, public-key-based authentication using authenticators such as security keys and platform biometrics. With...
WebDAV (Web Distributed Authoring and Versioning, RFC 4918) extends HTTP with methods for managing files and collections on remote servers. It adds capabilities such as properties, locking, and nam...
WebFinger (RFC 7033) is a protocol for discovering information about people and entities identified by a URI, such as an email-like account. It returns JSON Resource Descriptor documents and is use...
Webmention is a W3C Recommendation defining a simple protocol for notifying a URL when it is linked from another site. It enables decentralized cross-site conversations, comments, and reactions on ...
WebSocket is a communication protocol, standardized by the IETF as RFC 6455 and maintained as a living standard by the WHATWG, that provides full-duplex communication channels over a single TCP con...
WebSub is a W3C Recommendation defining an open protocol for real-time publish/subscribe notifications over HTTP. Subscribers register with a hub to receive content updates from publishers without ...
Well-Known URIs (RFC 8615) defines the /.well-known/ path prefix for hosting site-wide metadata and service discovery documents at predictable locations. It is used by standards such as OAuth, Open...
The `/.well-known/` path prefix is the IETF's standard place to put machine-readable metadata about a host. Registered under RFC 8615, it is how a client finds an OpenID Connect discovery document,...
Configuration file for the Windsurf AI code editor containing project-specific rules, coding conventions, and instructions that steer the Cascade AI assistant when it reads, writes, and refactors c...
Wireframes are low-fidelity visual representations of a user interface layout, used in early design stages to establish structure, hierarchy, and functionality before high-fidelity visual design an...
WireGuard is a modern, lightweight VPN protocol that uses state-of-the-art cryptography to establish secure point-to-point tunnels. Its small codebase and simple configuration have driven broad ado...
A Write-Ahead Log (WAL) is a standard technique in database systems where changes are first recorded to a sequential log file before being applied to the actual data files, ensuring durability and ...
WSDL (Web Services Description Language) is an XML-based format for describing the operations, messages, bindings, and endpoints of a SOAP web service so that clients and tools can understand and c...
ASC X12 is a chartered standards body whose EDI standard defines structured electronic business documents such as healthcare claims, purchase orders, and invoices. It is widely used for B2B and hea...
xAPI is the successor to SCORM's data model, describing learning experiences as actor-verb-object statements sent to a Learning Record Store. Unlike SCORM it is not confined to a browser session in...
xDS is the family of discovery APIs that Envoy and other data planes use to receive their configuration dynamically. It defines Protobuf services for listeners, routes, clusters and endpoints so a ...
XML (Extensible Markup Language) is a markup language and data format that defines rules for encoding documents in a way that is both human-readable and machine-readable. It is widely used for data...
XSLT (Extensible Stylesheet Language Transformations) is a language for transforming XML documents into other formats such as HTML, plain text, or different XML structures. It uses template-based r...
YAML (YAML Ain't Markup Language) is a human-readable, data serialization format commonly used for configuration files and data exchange between programming languages. It emphasizes simplicity and ...
Z39.50 is the ANSI/NISO standard for searching and retrieving records from remote databases, maintained by the Library of Congress and used to query library catalogues across institutions. SRU and ...
A security framework that requires all users and devices to be authenticated, authorized, and continuously validated before being granted access to applications and data, regardless of whether they...
A security framework that requires strict identity verification for every person and device attempting to access resources on a network, regardless of whether they are inside or outside the network...
A security framework that eliminates implicit trust and requires continuous verification of all users, devices, and applications attempting to access resources, regardless of their location inside ...
A security framework that requires all users and devices to be authenticated, authorized, and continuously validated before being granted access to applications and data, regardless of whether they...
Zigbee is a low-power wireless mesh standard for connected devices, governed by the Connectivity Standards Alliance, built on IEEE 802.15.4 with its own application and cluster layer. It carries a ...
