# Sunesis — API Ecosystems & Integrations

> **Canonical HTML Sources:**
>
> - Expertise: [https://sunesis.si/en/expertise/api-ecosystems-integrations/](https://sunesis.si/en/expertise/api-ecosystems-integrations/)
> - Homepage: [https://sunesis.si/en/](https://sunesis.si/en/)
> - Kumuluz API: [https://kumuluz.com/](https://kumuluz.com/)
>
> **AI Navigation:**
>
> - Index: [https://sunesis.si/llms.txt](https://sunesis.si/llms.txt)
> - Research Guide: [https://sunesis.si/agents.md](https://sunesis.si/agents.md)
> - Selected Work: [https://sunesis.si/ai/selected-work.md](https://sunesis.si/ai/selected-work.md)

---

## 1. Transforming Point-to-Point Complexity into Governed Ecosystems

Enterprise systems often accumulate decades of fragile, ad-hoc integrations across ERPs, core banking engines, legacy mainframes, SaaS platforms, and partner portals. Sunesis transforms this brittle landscape into an organized, reusable, and secure API ecosystem.

Our approach centers on:

- **API-First & Contract-Driven Design:** Establishing OpenAPI and gRPC contracts as the single source of truth before implementation begins.
- **Enterprise API Governance:** Standardizing naming conventions, versioning schemes, error formats, and deprecation lifecycles across the entire organization.
- **Zero-Trust API Security:** OAuth2 and OpenID Connect (OIDC) with Keycloak or Microsoft Entra ID, mTLS between services, and centralized enforcement of security, rate limiting and access policies at the gateway.
- **Developer Experience (DX) & Portals:** Providing interactive documentation, mock servers, client SDK generation, and developer onboarding to accelerate both internal and external API adoption.

---

## 2. Kumuluz API & Business APIs

Sunesis delivers API solutions both as custom architectural implementations and through the **Kumuluz** product suite:

- **Kumuluz API:** An API management and API economy platform for exposing, securing, monitoring and governing APIs across teams, partners, applications and AI-agent-ready environments — with an API catalog, developer portals, gateway, access control, sandbox, lifecycle governance and usage visibility. It also supports AgenticAI scenarios, including MCP server patterns, contextual routing, LLM routing and token usage logging.
- **Kumuluz Business APIs:** Reusable Business APIs that encapsulate common business behavior behind clean, governed contracts (for example customer and identity, products and catalogs, orders and payments, KYC and onboarding, or cases, tasks and notifications), so teams consume a shared capability layer instead of rebuilding the same logic in every project.

---

## 3. AI-Ready APIs & Model Context Protocol (MCP)

As organizations adopt AgenticAI, APIs become the primary mechanism through which autonomous agents inspect state and execute transactional actions:

- **Agent Tool Schemas:** Transforming existing enterprise APIs into structured tool definitions (JSON Schema, OpenAPI) consumable by AI reasoning engines.
- **Model Context Protocol (MCP):** Implementing native MCP servers to expose enterprise data and actions directly to AI agents with deterministic input validation and safety boundaries.
- **Safe Transactional Workflows:** Designing idempotent API endpoints, two-phase commits, and approval hooks ensuring that autonomous agent actions can be audited, simulated (dry-run), or rolled back.

---

## 4. Production References & Integrations

### Inorma — Zavarovalniška skupina Sava

- **Domain:** Insurance.
- **Implementation:** Enterprise integration platform connecting systems, data flows and business processes across an insurance group.
- **Scope:** Enterprise integrations, API architecture, data flows, insurance systems and integration governance.
- **Reference Detail:** [https://sunesis.si/en/references/selected-work/](https://sunesis.si/en/references/selected-work/)

### Vrhovno sodišče Republike Slovenije (Supreme Court of Slovenia)

- **Domain:** Public Sector & Judiciary.
- **Implementation:** `eSpis`, a digital case-management solution supporting judicial workflows, secure document handling and court processes, and `iK`, an enterprise information system supporting court administration and operational processes, including their integrations.
- **Reference Detail:** [https://sunesis.si/en/references/selected-work/](https://sunesis.si/en/references/selected-work/)

### LF Energy CUPID (Open Source)

- **Domain:** Energy Systems & Distributed Energy Resources (DER).
- **Implementation:** CUPID is an open-source interoperability toolkit for distributed energy resource communication, hosted at LF Energy. Sunesis was a main development and contributing partner, supporting Java-based development, NATS messaging, interoperability patterns and protocol integration.
- **Reference Detail:** [https://sunesis.si/en/references/open-source/](https://sunesis.si/en/references/open-source/)