Magento 2 & Hyvä articles tagged “REST API”: hands-on tutorials, fixes, and guides from Kishan Savaliya, an Adobe-certified Magento developer.
3 articles
September 2026 brought StyleSmuggler, an unauthenticated Magento RCE that was a live zero-day at disclosure and hits every 2.4.x including 2.4.9, while SessionReaper (CVE-2025-54236) keeps owning unpatched stores a year on. Here is what each attack does and the prioritized playbook to protect your store: web-server mitigation, patching, key rotation, and a compromise hunt.
Let Claude actually talk to your Magento store. This is a tested, end-to-end build of a Model Context Protocol server in TypeScript: read-only tools, a scoped token, Claude Desktop/Code wiring, and how the same layer powers a Hyvä storefront assistant. Includes the real gotchas (stdout is sacred, searchCriteria traps, self-signed TLS) and live output.
Most Magento REST vs GraphQL articles compare syntax. After benchmarking three real queries against a Magento 2.4.9 store with 50,000 SKUs, the answer flips depending on the call pattern: REST wins single-resource by URL (95 ms vs 140 ms), GraphQL wins relational and grid loads by an order of magnitude (180 ms vs 665 ms), and the FPC versus @cache directive story decides whether either survives Black Friday. Here is the curl trace, the wrk concurrency test, and the cache invalidation pattern from client work on Magento 2.4.4-2.4.9.
