# Postman

Postman is an API platform for developing, testing, managing, and distributing APIs and services.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Scheduling gRPC and GraphQL Requests with Postman Monitors (Beta)

DevFeed: [Scheduling gRPC and GraphQL Requests with Postman Monitors (Beta)](<https://devfeed.tech/articles/scheduling-grpc-and-graphql-requests-with-postman-monitors-beta-31414.md>)

Original publisher: [Read original article](<https://blog.postman.com/scheduling-grpc-and-graphql-requests-with-postman-monitors-beta/>)

Author: Harsh Vardhan

Published: 2026-09-16T16:00:00Z

Content type: tutorial

Language: en

Sources: [Postman Blog](<https://devfeed.tech/sources/postman-blog.md>)

Topics: [gRPC](<https://devfeed.tech/topics/grpc.md>), [Postman](<https://devfeed.tech/topics/postman.md>), [Monitoring](<https://devfeed.tech/topics/monitoring.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>)

Tags: [beta](<https://devfeed.tech/tags/beta.md>), [general](<https://devfeed.tech/tags/general.md>), [graphql](<https://devfeed.tech/tags/graphql.md>), [graphql-monitoring](<https://devfeed.tech/tags/graphql-monitoring.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [monitor-grpc-streaming](<https://devfeed.tech/tags/monitor-grpc-streaming.md>), [monitoring](<https://devfeed.tech/tags/monitoring.md>), [monitors](<https://devfeed.tech/tags/monitors.md>), [postman](<https://devfeed.tech/tags/postman.md>), [postman-monitors-grpc-graphql](<https://devfeed.tech/tags/postman-monitors-grpc-graphql.md>), [scheduling](<https://devfeed.tech/tags/scheduling.md>), [test](<https://devfeed.tech/tags/test.md>)

### AI overview

This tutorial explains how to schedule gRPC and GraphQL requests with Postman Monitors in beta. It covers supported request types, streaming caveats, response testing, authentication, and current feature limitations.

### Source excerpt

Postman Monitors now run gRPC and GraphQL requests in beta. Learn how to schedule them, test responses, and send feedback. Start monitoring today. The post Scheduling gRPC and GraphQL Requests with Postman Monitors (Beta) appeared first on Postman Blog.

## Honoring #IconsOfQuality: Pricilla Bilavendran

DevFeed: [Honoring #IconsOfQuality: Pricilla Bilavendran](<https://devfeed.tech/articles/honoring-iconsofquality-pricilla-bilavendran-27001.md>)

Original publisher: [Read original article](<https://www.browserstack.com/blog/honoring-icons-of-quality-pricilla-bilavendran/>)

Author: Rajrupa Roychowdhury

Published: 2026-09-16T08:21:09Z

Content type: article

Language: en

Sources: [BrowserStack Blog](<https://devfeed.tech/sources/browserstack-blog.md>)

Topics: [Testing](<https://devfeed.tech/topics/testing.md>), [Test automation](<https://devfeed.tech/topics/test-automation.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [Playwright](<https://devfeed.tech/topics/playwright.md>), [Postman](<https://devfeed.tech/topics/postman.md>), [Amazon Machine Learning](<https://devfeed.tech/topics/amazon-machine-learning.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [api-testing](<https://devfeed.tech/tags/api-testing.md>), [community](<https://devfeed.tech/tags/community.md>), [icons-of-quality](<https://devfeed.tech/tags/icons-of-quality.md>), [playwright](<https://devfeed.tech/tags/playwright.md>), [postman](<https://devfeed.tech/tags/postman.md>), [quality](<https://devfeed.tech/tags/quality.md>), [test-automation](<https://devfeed.tech/tags/test-automation.md>), [testing](<https://devfeed.tech/tags/testing.md>)

### AI overview

BrowserStack profiles Pricilla Bilavendran, a quality engineering and API testing leader, and discusses her views on AI-assisted quality engineering, human curiosity, critical thinking, and the continuing importance of testers' judgment.

### Source excerpt

To celebrate the relentless passion and invaluable contributions of leaders in software quality, BrowserStack is proud to honour Icons of Quality.

## The thoroughness of Tom Johnson's free Documenting API's course on OpenAPI 3.0 and Swagger UI

DevFeed: [The thoroughness of Tom Johnson's free Documenting API's course on OpenAPI 3.0 and Swagger UI](<https://devfeed.tech/articles/the-thoroughness-of-tom-johnson-s-free-documenting-api-s-course-on-openapi-3-0-and-swagger-ui-22428.md>)

Original publisher: [Read original article](<https://www.tjmaher.com/2026/09/the-thoroughness-of-tom-johnsons-free.html>)

Author: T.J. Maher (noreply@blogger.com)

Published: 2026-09-09T21:17:32Z

Content type: article

Language: en

Sources: [T.J. Maher](<https://devfeed.tech/sources/t-j-maher.md>)

Topics: [OpenAPI Specification](<https://devfeed.tech/topics/openapi.md>), [Documentation](<https://devfeed.tech/topics/documentation.md>), [REST API](<https://devfeed.tech/topics/rest-api.md>), [Swagger](<https://devfeed.tech/topics/swagger.md>), [Testing](<https://devfeed.tech/topics/testing.md>), [Postman](<https://devfeed.tech/topics/postman.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [JSON](<https://devfeed.tech/topics/json.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [cURL](<https://devfeed.tech/topics/curl.md>), [Chrome](<https://devfeed.tech/topics/chrome.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [api-documentation](<https://devfeed.tech/tags/api-documentation.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [chrome](<https://devfeed.tech/tags/chrome.md>), [chrome-extension](<https://devfeed.tech/tags/chrome-extension.md>), [curl](<https://devfeed.tech/tags/curl.md>), [documentation](<https://devfeed.tech/tags/documentation.md>), [github](<https://devfeed.tech/tags/github.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [json](<https://devfeed.tech/tags/json.md>), [openapi](<https://devfeed.tech/tags/openapi.md>), [pdf](<https://devfeed.tech/tags/pdf.md>), [postman](<https://devfeed.tech/tags/postman.md>), [rest-api](<https://devfeed.tech/tags/rest-api.md>), [swagger](<https://devfeed.tech/tags/swagger.md>), [testing](<https://devfeed.tech/tags/testing.md>)

### AI overview

The article reviews Tom Johnson's free "Documenting APIs: A guide for technical writers and engineers" course. It describes the course's 17 chapters, practical API-learning exercises, coverage of REST APIs, OpenAPI, Swagger UI, testing and publishing API documentation, and a PDF edition exceeding 900 pages.

### Source excerpt

While researching information for my job about the Swagger UI and how it can be used for testing, I came across this free course, called Documenting APIs: A guide for technical writers and engineers at https://idratherbewriting.com/learnapidoc/docapis_overview.html written by Tom Johnson, a technical writer based in Seattle who works for Google. The course looks intense, containing 17 chapters talking about Introduction to REST APIs, using APIs like a developer, Documenting API endpoints, the Open API spec, Testing API docs, Publishing API docs, and more. From the Course Introduction: "You'll first learn about API documentation by using a simple weather API to put a weather forecast on your site. [...] As you use the API, you'll learn about endpoints, parameters, data types, authentication, curl, JSON, the command line, Chrome's Developer Console, JavaScript, and more. The idea is that rather than learning about these concepts independent of any context, you learn them by immersing yourself in a real scenario while using an API. Immersion in real scenarios makes these tools and technologies more meaningful. "We'll then transition into standards, tools, and specifications for REST APIs. You'll learn about the required sections in API documentation, analyze examples of REST API documentation from various companies, learn how to join an open-source project to get experience, and more. "[...] We'll also dive into specifications such as the OpenAPI specification and Swagger UI (which provides tooling for the OpenAPI specification). Additionally, you'll learn how to document native library APIs and generate Javadoc". Tom Johnson offers a PDF version of this free course... over 900 pages, with more always being added. It also offers many workshop-like activities you could put in an actual itinerary. You would need for the course: Chrome, since it provides "a Javascript Console that works well for inspecting JSON", the JSON Formatter Chrome extension, Postman, a GitHub acco

## Catching Salesforce Custom Field Drift With the Postman AI Engineer

DevFeed: [Catching Salesforce Custom Field Drift With the Postman AI Engineer](<https://devfeed.tech/articles/catching-salesforce-custom-field-drift-with-the-postman-ai-engineer-12633.md>)

Original publisher: [Read original article](<https://blog.postman.com/catching-three-way-drift-between-your-spec-collection-and-code/>)

Author: Talia Kohan

Published: 2026-09-03T16:00:00Z

Content type: article

Language: en

Sources: [Postman Blog](<https://devfeed.tech/sources/postman-blog.md>)

Topics: [Postman](<https://devfeed.tech/topics/postman.md>), [Claude](<https://devfeed.tech/topics/claude.md>), [Automation](<https://devfeed.tech/topics/automation.md>), [API](<https://devfeed.tech/topics/api.md>), [Front end](<https://devfeed.tech/topics/frontend.md>), [OpenAPI Specification](<https://devfeed.tech/topics/openapi.md>), [GitHub](<https://devfeed.tech/topics/github.md>), [Back end](<https://devfeed.tech/topics/backend.md>), [Pull Request](<https://devfeed.tech/topics/pull-request.md>), [payload](<https://devfeed.tech/topics/payload.md>), [Slack](<https://devfeed.tech/topics/slack.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [ai-automation](<https://devfeed.tech/tags/ai-automation.md>), [api](<https://devfeed.tech/tags/api.md>), [api-drift](<https://devfeed.tech/tags/api-drift.md>), [backend](<https://devfeed.tech/tags/backend.md>), [code](<https://devfeed.tech/tags/code.md>), [frontend](<https://devfeed.tech/tags/frontend.md>), [general](<https://devfeed.tech/tags/general.md>), [github](<https://devfeed.tech/tags/github.md>), [payload](<https://devfeed.tech/tags/payload.md>), [postman-agent-mode](<https://devfeed.tech/tags/postman-agent-mode.md>), [pull-request](<https://devfeed.tech/tags/pull-request.md>), [salesforce](<https://devfeed.tech/tags/salesforce.md>), [slack](<https://devfeed.tech/tags/slack.md>)

### AI overview

This Postman Blog article explains how a Salesforce custom field caused drift between an API collection, frontend code, and an OpenAPI specification. It describes using the Postman AI Engineer to diagnose the failing request and Postman AI Automation to update the affected artifacts and add tests through a GitHub pull request.

### Source excerpt

A Salesforce custom field broke my app. See how Postman Agent Mode found the drift and how a Skill kept it from happening again. The post Catching Salesforce Custom Field Drift With the Postman AI Engineer appeared first on Postman Blog.

## How AI Agents Discover and Integrate Public APIs

DevFeed: [How AI Agents Discover and Integrate Public APIs](<https://devfeed.tech/articles/how-ai-agents-discover-and-integrate-public-apis-12636.md>)

Original publisher: [Read original article](<https://blog.postman.com/how-ai-agents-discover-and-integrate-public-apis/>)

Author: Anthony Viard

Published: 2026-09-02T16:00:00Z

Content type: article

Language: en

Sources: [Postman Blog](<https://devfeed.tech/sources/postman-blog.md>)

Topics: [AI Agent](<https://devfeed.tech/topics/ai-agent.md>), [API](<https://devfeed.tech/topics/api.md>), [Postman](<https://devfeed.tech/topics/postman.md>), [MCP](<https://devfeed.tech/topics/mcp.md>)

Tags: [ai-agent](<https://devfeed.tech/tags/ai-agent.md>), [ai-agents](<https://devfeed.tech/tags/ai-agents.md>), [api](<https://devfeed.tech/tags/api.md>), [api-discovery](<https://devfeed.tech/tags/api-discovery.md>), [apis](<https://devfeed.tech/tags/apis.md>), [general](<https://devfeed.tech/tags/general.md>), [integration](<https://devfeed.tech/tags/integration.md>), [mcp](<https://devfeed.tech/tags/mcp.md>), [model-context-protocol](<https://devfeed.tech/tags/model-context-protocol.md>), [orbit](<https://devfeed.tech/tags/orbit.md>)

### AI overview

The article presents Orbit by Postman, which lets developers and AI agents discover public API endpoints by describing a desired workflow in plain language. Orbit evaluates endpoint capabilities, identifies gaps, and generates integration details such as authentication, URLs, parameters, response shapes, execution order, and implementation pitfalls. It can be accessed through search and integration endpoints or via the Model Context Protocol (MCP).

### Source excerpt

I couldn't name the API my feature needed. Orbit found it in one search, then handed me the request bodies and the three bugs I'd have shipped. The post How AI Agents Discover and Integrate Public APIs appeared first on Postman Blog.

## Finding three-way API drift with the AI Engineer

DevFeed: [Finding three-way API drift with the AI Engineer](<https://devfeed.tech/articles/finding-three-way-api-drift-with-the-ai-engineer-12635.md>)

Original publisher: [Read original article](<https://blog.postman.com/finding-three-way-api-drift-with-the-ai-engineer/>)

Author: Talia Kohan

Published: 2026-09-01T16:00:00Z

Content type: article

Language: en

Sources: [Postman Blog](<https://devfeed.tech/sources/postman-blog.md>)

Topics: [API](<https://devfeed.tech/topics/api.md>), [Postman](<https://devfeed.tech/topics/postman.md>), [OpenAPI Specification](<https://devfeed.tech/topics/openapi.md>), [Claude](<https://devfeed.tech/topics/claude.md>), [Tooling](<https://devfeed.tech/topics/tooling.md>), [client](<https://devfeed.tech/topics/client.md>), [servers](<https://devfeed.tech/topics/servers.md>)

Tags: [ai-engineer](<https://devfeed.tech/tags/ai-engineer.md>), [api](<https://devfeed.tech/tags/api.md>), [api-drift](<https://devfeed.tech/tags/api-drift.md>), [apis](<https://devfeed.tech/tags/apis.md>), [ci](<https://devfeed.tech/tags/ci.md>), [fintech](<https://devfeed.tech/tags/fintech.md>), [general](<https://devfeed.tech/tags/general.md>), [openapi](<https://devfeed.tech/tags/openapi.md>), [postman-ai-engineer](<https://devfeed.tech/tags/postman-ai-engineer.md>), [production](<https://devfeed.tech/tags/production.md>), [qa](<https://devfeed.tech/tags/qa.md>)

### AI overview

The article explains how to detect three-way API drift by comparing an OpenAPI specification, the requests in Postman Collections, and the responses returned by a running server. It argues that pairwise checks can miss cases where all three sources disagree, and describes using Postman AI Engineer and the Context Graph to identify these inconsistencies.

### Source excerpt

Find three-way API drift with Postman AI Engineer and the Context Graph. Compares your OpenAPI spec, collection requests, and live server responses. The post Finding three-way API drift with the AI Engineer appeared first on Postman Blog.

## Introducing Orbit: Turn Any Task Into the Right API Calls

DevFeed: [Introducing Orbit: Turn Any Task Into the Right API Calls](<https://devfeed.tech/articles/introducing-orbit-turn-any-task-into-the-right-api-calls-12638.md>)

Original publisher: [Read original article](<https://blog.postman.com/introducing-orbit-turn-any-task-into-the-right-api-calls/>)

Author: Abhinav Asthana

Published: 2026-08-27T16:00:00Z

Content type: article

Language: en

Sources: [Postman Blog](<https://devfeed.tech/sources/postman-blog.md>)

Topics: [API](<https://devfeed.tech/topics/api.md>), [MCP Server](<https://devfeed.tech/topics/mcp-server.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [MCP](<https://devfeed.tech/topics/mcp.md>), [Postman](<https://devfeed.tech/topics/postman.md>), [REST API](<https://devfeed.tech/topics/rest-api.md>), [Claude Code](<https://devfeed.tech/topics/claude-code.md>)

Tags: [agents](<https://devfeed.tech/tags/agents.md>), [ai](<https://devfeed.tech/tags/ai.md>), [ai-agents](<https://devfeed.tech/tags/ai-agents.md>), [api-discovery](<https://devfeed.tech/tags/api-discovery.md>), [blog](<https://devfeed.tech/tags/blog.md>), [free](<https://devfeed.tech/tags/free.md>), [general](<https://devfeed.tech/tags/general.md>), [mcp](<https://devfeed.tech/tags/mcp.md>), [mcp-server](<https://devfeed.tech/tags/mcp-server.md>), [model-context-protocol](<https://devfeed.tech/tags/model-context-protocol.md>), [orbit](<https://devfeed.tech/tags/orbit.md>), [post](<https://devfeed.tech/tags/post.md>), [rest-api](<https://devfeed.tech/tags/rest-api.md>)

### AI overview

Postman introduces Orbit, a free API discovery tool for AI agents. Agents can describe a task to find suitable public API endpoints, then select an endpoint and receive an integration brief covering authentication, URLs, request steps, parameters, response codes, dependencies, and common pitfalls. Orbit is available as an MCP server and a REST API, with no account, API key, or OAuth setup required.

### Source excerpt

Orbit is a free API discovery tool for AI agents. Describe a task, get the endpoints that fit, then get a task brief to integrate them. No account, no auth. The post Introducing Orbit: Turn Any Task Into the Right API Calls appeared first on Postman Blog.

## How Postman Passport keeps API secrets inside your network

DevFeed: [How Postman Passport keeps API secrets inside your network](<https://devfeed.tech/articles/how-postman-passport-keeps-api-secrets-inside-your-network-12637.md>)

Original publisher: [Read original article](<https://blog.postman.com/how-postman-passport-keeps-api-secrets-inside-your-network/>)

Author: Talia Kohan

Published: 2026-08-24T16:00:00Z

Content type: article

Language: en

Sources: [Postman Blog](<https://devfeed.tech/sources/postman-blog.md>)

Topics: [API](<https://devfeed.tech/topics/api.md>), [Postman](<https://devfeed.tech/topics/postman.md>), [API keys](<https://devfeed.tech/topics/api-keys.md>), [Security](<https://devfeed.tech/topics/security.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [Network](<https://devfeed.tech/topics/network.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [api-keys](<https://devfeed.tech/tags/api-keys.md>), [api-security](<https://devfeed.tech/tags/api-security.md>), [architecture](<https://devfeed.tech/tags/architecture.md>), [general](<https://devfeed.tech/tags/general.md>), [network](<https://devfeed.tech/tags/network.md>), [postman-passport](<https://devfeed.tech/tags/postman-passport.md>), [secret-store](<https://devfeed.tech/tags/secret-store.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [secrets-management](<https://devfeed.tech/tags/secrets-management.md>), [security](<https://devfeed.tech/tags/security.md>), [token](<https://devfeed.tech/tags/token.md>)

### AI overview

Postman Passport keeps real API secrets inside an organization's network by issuing credential references instead of exposing underlying keys. An internal proxy resolves the references, injects the credentials, and forwards requests while cryptographically binding references to their authorized holders.

### Source excerpt

Postman Passport grants API access using credential references, keeping the real secret inside your network. Here's how the architecture works. The post How Postman Passport keeps API secrets inside your network appeared first on Postman Blog.

## 5 QE Pipeline Metrics That Show Where Quality Is Leaking

DevFeed: [5 QE Pipeline Metrics That Show Where Quality Is Leaking](<https://devfeed.tech/articles/5-qe-pipeline-metrics-that-show-where-quality-is-leaking-12631.md>)

Original publisher: [Read original article](<https://blog.postman.com/5-qe-pipeline-metrics-that-show-where-quality-is-leaking/>)

Author: Rick Crawford

Published: 2026-08-21T15:00:10Z

Content type: article

Language: en

Sources: [Postman Blog](<https://devfeed.tech/sources/postman-blog.md>)

Topics: [Development](<https://devfeed.tech/topics/development.md>), [Postman](<https://devfeed.tech/topics/postman.md>)

Tags: [api-testing](<https://devfeed.tech/tags/api-testing.md>), [developer](<https://devfeed.tech/tags/developer.md>), [development](<https://devfeed.tech/tags/development.md>), [false-positives](<https://devfeed.tech/tags/false-positives.md>), [general](<https://devfeed.tech/tags/general.md>), [metrics](<https://devfeed.tech/tags/metrics.md>), [packages](<https://devfeed.tech/tags/packages.md>), [policy](<https://devfeed.tech/tags/policy.md>), [production](<https://devfeed.tech/tags/production.md>), [qe-program](<https://devfeed.tech/tags/qe-program.md>), [quality-engineering](<https://devfeed.tech/tags/quality-engineering.md>), [sdlc](<https://devfeed.tech/tags/sdlc.md>), [shift-left](<https://devfeed.tech/tags/shift-left.md>), [validation](<https://devfeed.tech/tags/validation.md>)

### AI overview

This developer article presents five quality-engineering pipeline metrics aligned with Design, Gate, Validate, Monitor, and Improve stages. The supplied text details package adoption, gate coverage and flake rate, and defect escape rate, explaining how they reveal uneven coverage, ineffective merge gates, false positives, and defects reaching production.

### Source excerpt

In the last post I described six problems that compound when development outruns the QE infrastructure underneath it. Most leaders recognize all... The post 5 QE Pipeline Metrics That Show Where Quality Is Leaking appeared first on Postman Blog.

## The prompts only the Postman AI Engineer can answer

DevFeed: [The prompts only the Postman AI Engineer can answer](<https://devfeed.tech/articles/the-prompts-only-the-postman-ai-engineer-can-answer-12641.md>)

Original publisher: [Read original article](<https://blog.postman.com/the-prompts-only-the-postman-ai-engineer-can-answer/>)

Author: Talia Kohan

Published: 2026-08-20T16:00:00Z

Content type: article

Language: en

Sources: [Postman Blog](<https://devfeed.tech/sources/postman-blog.md>)

Topics: [Claude](<https://devfeed.tech/topics/claude.md>), [Postman](<https://devfeed.tech/topics/postman.md>), [Graphs](<https://devfeed.tech/topics/graphs.md>), [API](<https://devfeed.tech/topics/api.md>), [OpenAPI Specification](<https://devfeed.tech/topics/openapi.md>), [monitor](<https://devfeed.tech/topics/monitor.md>), [React](<https://devfeed.tech/topics/react.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [ai-agents](<https://devfeed.tech/tags/ai-agents.md>), [api](<https://devfeed.tech/tags/api.md>), [apis](<https://devfeed.tech/tags/apis.md>), [general](<https://devfeed.tech/tags/general.md>), [monitor](<https://devfeed.tech/tags/monitor.md>), [openapi](<https://devfeed.tech/tags/openapi.md>), [postman-ai-engineer](<https://devfeed.tech/tags/postman-ai-engineer.md>), [react](<https://devfeed.tech/tags/react.md>)

### AI overview

This Postman Blog article presents the Postman AI Engineer as a natural-language interface over the Postman Context Graph. It describes prompts that trace identifiers across APIs, collections, runtime monitor results, repositories, and React dashboards, as well as prompts that expose specification-versus-code drift and three-way discrepancies involving live server responses.

### Source excerpt

The Postman AI Engineer prompts that trace an ID across your APIs, catch three-way drift, and auto-write a PR review from the graph. The post The prompts only the Postman AI Engineer can answer appeared first on Postman Blog.

## Develop and test MCP in Postman: jhipster-mcp in action

DevFeed: [Develop and test MCP in Postman: jhipster-mcp in action](<https://devfeed.tech/articles/develop-and-test-mcp-in-postman-jhipster-mcp-in-action-12634.md>)

Original publisher: [Read original article](<https://blog.postman.com/develop-and-test-mcp-in-postman-jhipster-mcp-in-action/>)

Author: Anthony Viard

Published: 2026-08-19T16:00:00Z

Content type: article

Language: en

Sources: [Postman Blog](<https://devfeed.tech/sources/postman-blog.md>)

Topics: [Model Context Protocol](<https://devfeed.tech/topics/model-context-protocol.md>), [Postman](<https://devfeed.tech/topics/postman.md>), [Spring Boot](<https://devfeed.tech/topics/spring-boot.md>), [Node.js](<https://devfeed.tech/topics/node-js.md>), [TypeScript](<https://devfeed.tech/topics/typescript.md>), [Angular](<https://devfeed.tech/topics/angular.md>), [React](<https://devfeed.tech/topics/react.md>), [Vue.js](<https://devfeed.tech/topics/vue.md>), [JSON](<https://devfeed.tech/topics/json.md>), [Remote Procedure Call (RPC)](<https://devfeed.tech/topics/rpc.md>)

Tags: [ai-agents](<https://devfeed.tech/tags/ai-agents.md>), [angular](<https://devfeed.tech/tags/angular.md>), [apache](<https://devfeed.tech/tags/apache.md>), [cli](<https://devfeed.tech/tags/cli.md>), [general](<https://devfeed.tech/tags/general.md>), [jhipster](<https://devfeed.tech/tags/jhipster.md>), [json](<https://devfeed.tech/tags/json.md>), [mcp](<https://devfeed.tech/tags/mcp.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [post](<https://devfeed.tech/tags/post.md>), [react](<https://devfeed.tech/tags/react.md>), [rpc](<https://devfeed.tech/tags/rpc.md>), [spring-boot](<https://devfeed.tech/tags/spring-boot.md>), [typescript](<https://devfeed.tech/tags/typescript.md>), [vue](<https://devfeed.tech/tags/vue.md>)

### AI overview

This Postman developer article demonstrates jhipster-mcp, an open-source MCP server that exposes the JHipster generator to MCP clients. It uses Postman's MCP client to test tools, prompts, and resources for generating and evolving Spring Boot applications from JDL.

### Source excerpt

Drive the jhipster-mcp server from Postman's MCP client to test tools, prompts, and resources before handing them to an AI agent. Try it today. The post Develop and test MCP in Postman: jhipster-mcp in action appeared first on Postman Blog.

## DAST without disruption: Burp Suite DAST winter update 2025

DevFeed: [DAST without disruption: Burp Suite DAST winter update 2025](<https://devfeed.tech/articles/dast-without-disruption-burp-suite-dast-winter-update-2025-7698.md>)

Original publisher: [Read original article](<https://portswigger.net/blog/burp-suite-dast-winter-update-2025>)

Author: Rob Samuels

Published: 2025-12-11T13:09:30Z

Content type: release

Language: en

Sources: [PortSwigger Blog](<https://devfeed.tech/sources/portswigger-blog.md>)

Topics: [Application Security](<https://devfeed.tech/topics/application-security.md>), [Security](<https://devfeed.tech/topics/security.md>), [CI/CD](<https://devfeed.tech/topics/cicd.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Deployment](<https://devfeed.tech/topics/deployment.md>), [API](<https://devfeed.tech/topics/api.md>), [OpenAPI Specification](<https://devfeed.tech/topics/openapi.md>), [Postman](<https://devfeed.tech/topics/postman.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [CSS](<https://devfeed.tech/topics/css.md>), [selectors](<https://devfeed.tech/topics/selectors.md>), [Single-page application (SPA)](<https://devfeed.tech/topics/spa.md>)

Tags: [2025](<https://devfeed.tech/tags/2025.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [automation](<https://devfeed.tech/tags/automation.md>), [ci-cd](<https://devfeed.tech/tags/ci-cd.md>), [deployment](<https://devfeed.tech/tags/deployment.md>), [environment-variables](<https://devfeed.tech/tags/environment-variables.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [openapi](<https://devfeed.tech/tags/openapi.md>), [real-time](<https://devfeed.tech/tags/real-time.md>), [responses](<https://devfeed.tech/tags/responses.md>), [security](<https://devfeed.tech/tags/security.md>), [selectors](<https://devfeed.tech/tags/selectors.md>), [troubleshooting](<https://devfeed.tech/tags/troubleshooting.md>), [ui](<https://devfeed.tech/tags/ui.md>), [update](<https://devfeed.tech/tags/update.md>)

### AI overview

A winter 2025 update to Burp Suite DAST adds scan freeze windows, improved site and folder management, editable recorded login flows, real-time authentication diagnostics, XPath and CSS session checks, and imports for Postman collections with environment variables. The changes aim to make automated application and API security scanning more reliable and easier to manage at scale.

### Source excerpt

AppSec teams are under constant pressure to secure fast-moving applications without slowing anything down. But scanning windows, fragile authentication, and sprawling API estates often get in the way

## The year so far: How Burp Suite DAST is leveling up enterprise security in 2025

DevFeed: [The year so far: How Burp Suite DAST is leveling up enterprise security in 2025](<https://devfeed.tech/articles/the-year-so-far-how-burp-suite-dast-is-leveling-up-enterprise-security-in-2025-7745.md>)

Original publisher: [Read original article](<https://portswigger.net/blog/the-year-so-far-how-burp-suite-dast-is-leveling-up-enterprise-security-in-2025>)

Author: Andrzej Matykiewicz

Published: 2025-08-28T12:07:45Z

Content type: article

Language: en

Sources: [PortSwigger Blog](<https://devfeed.tech/sources/portswigger-blog.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Automation](<https://devfeed.tech/topics/automation.md>), [API](<https://devfeed.tech/topics/api.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [OpenAPI Specification](<https://devfeed.tech/topics/openapi.md>), [Postman](<https://devfeed.tech/topics/postman.md>), [Web](<https://devfeed.tech/topics/web.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>)

Tags: [2025](<https://devfeed.tech/tags/2025.md>), [api](<https://devfeed.tech/tags/api.md>), [apis](<https://devfeed.tech/tags/apis.md>), [automation](<https://devfeed.tech/tags/automation.md>), [enterprise](<https://devfeed.tech/tags/enterprise.md>), [openapi](<https://devfeed.tech/tags/openapi.md>), [qa](<https://devfeed.tech/tags/qa.md>), [scale](<https://devfeed.tech/tags/scale.md>), [scanners](<https://devfeed.tech/tags/scanners.md>), [security](<https://devfeed.tech/tags/security.md>), [speed](<https://devfeed.tech/tags/speed.md>), [web](<https://devfeed.tech/tags/web.md>), [workflows](<https://devfeed.tech/tags/workflows.md>)

### AI overview

This article recaps Burp Suite DAST improvements delivered during the first half of 2025 for enterprise security teams. It describes recurring portfolio scans, custom asset tags, continuous authenticated API scanning with automatic token refresh, and scan triggers from Postman Collections alongside OpenAPI and SOAP WSDL imports.

### Source excerpt

Enterprise security teams are under more pressure than ever to secure sprawling application estates, without slowing down delivery. That's why, over the first half of 2025, we've delivered some of our

## Build Well-Documented and Authenticated APIs in Node.js with Fastify

DevFeed: [Build Well-Documented and Authenticated APIs in Node.js with Fastify](<https://devfeed.tech/articles/build-well-documented-and-authenticated-apis-in-node-js-with-fastify-26379.md>)

Original publisher: [Read original article](<https://www.heroku.com/blog/build-openapi-apis-nodejs-fastify/>)

Author: Julián Duque

Published: 2024-04-29T23:25:00Z

Content type: tutorial

Language: en

Sources: [Heroku](<https://devfeed.tech/sources/heroku.md>)

Topics: [Fastify](<https://devfeed.tech/topics/fastify.md>), [API](<https://devfeed.tech/topics/api.md>), [Node.js](<https://devfeed.tech/topics/node-js.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [JSON Web Tokens](<https://devfeed.tech/topics/jwt.md>), [OpenAPI Specification](<https://devfeed.tech/topics/openapi.md>), [Heroku](<https://devfeed.tech/topics/heroku.md>), [Postman](<https://devfeed.tech/topics/postman.md>), [Swagger](<https://devfeed.tech/topics/swagger.md>), [Back end](<https://devfeed.tech/topics/backend.md>)

Tags: [apis](<https://devfeed.tech/tags/apis.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [back-end](<https://devfeed.tech/tags/back-end.md>), [build](<https://devfeed.tech/tags/build.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [express](<https://devfeed.tech/tags/express.md>), [framework](<https://devfeed.tech/tags/framework.md>), [heroku](<https://devfeed.tech/tags/heroku.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [jwt](<https://devfeed.tech/tags/jwt.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [openapi](<https://devfeed.tech/tags/openapi.md>), [postman](<https://devfeed.tech/tags/postman.md>), [product-features](<https://devfeed.tech/tags/product-features.md>), [swagger](<https://devfeed.tech/tags/swagger.md>)

### AI overview

A hands-on walkthrough for building a documented and authenticated API with Node.js and Fastify. It covers JWT authentication, Fastify Swagger plugins for generating an OpenAPI specification, Postman as an API client, and deployment to Heroku.

### Source excerpt

If you're an API developer working with Node.js, then you're probably familiar with Express. But have you tried out the Fastify framework to build with power, speed, and convenience? In this walkthrough, we build a full-featured, easy-to-consume API with Fastify. And we deploy it to the cloud with ease. We show you how to: Get [...] The post Build Well-Documented and Authenticated APIs in Node.js with Fastify appeared first on Heroku.

## Battle-tested template project for backend with Kotlin and Ktor

DevFeed: [Battle-tested template project for backend with Kotlin and Ktor](<https://devfeed.tech/articles/battle-tested-template-project-for-backend-with-kotlin-and-ktor-24731.md>)

Original publisher: [Read original article](<https://medium.com/xorum-io/battle-tested-template-project-for-backend-with-kotlin-and-ktor-c655a2e276c2?source=rss----92bb7980cc9f---4>)

Author: Yev Kanivets

Published: 2021-07-16T05:24:17Z

Content type: tutorial

Language: en

Sources: [xorum.io - Medium](<https://devfeed.tech/sources/xorum-io-medium.md>)

Topics: [Kotlin](<https://devfeed.tech/topics/kotlin.md>), [Ktor](<https://devfeed.tech/topics/ktor.md>), [Template](<https://devfeed.tech/topics/template.md>), [mvc](<https://devfeed.tech/topics/mvc.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [Framework](<https://devfeed.tech/topics/framework.md>), [API](<https://devfeed.tech/topics/api.md>), [Firebase](<https://devfeed.tech/topics/firebase.md>), [Gradle](<https://devfeed.tech/topics/gradle.md>), [Heroku](<https://devfeed.tech/topics/heroku.md>), [Postman](<https://devfeed.tech/topics/postman.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [architecture](<https://devfeed.tech/tags/architecture.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [backend](<https://devfeed.tech/tags/backend.md>), [firebase](<https://devfeed.tech/tags/firebase.md>), [gradle](<https://devfeed.tech/tags/gradle.md>), [heroku](<https://devfeed.tech/tags/heroku.md>), [intellij](<https://devfeed.tech/tags/intellij.md>), [intellij-idea](<https://devfeed.tech/tags/intellij-idea.md>), [kotlin](<https://devfeed.tech/tags/kotlin.md>), [ktor](<https://devfeed.tech/tags/ktor.md>), [mvc](<https://devfeed.tech/tags/mvc.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [postgresql](<https://devfeed.tech/tags/postgresql.md>), [postman](<https://devfeed.tech/tags/postman.md>), [project](<https://devfeed.tech/tags/project.md>)

### AI overview

This article presents a personal Ktor template for Kotlin backend applications, describing its production use, project structure, tools, libraries, MVC-based architecture, API design, Heroku deployment files, and Firebase Auth integration.

### Source excerpt

With Kotlin and Ktor technologies gaining more popularity among the community of backend developers, dozens of different sample applications and templates are created and published as open-source projects. Ktor is an asynchronous framework for creating microservices, web applications, and more. It's fun, free, and open source. So it doesn't force any particular architecture, set of libraries, or framework to be used, which means that you are free to choose what's best for you and your project. Today, I'm finally ready to share my personal Ktor template, polished by almost a year of use in production applications. This article gives a short overview of the template, its architecture, chosen tools, and libraries. Tools Since we are using Kotlin to develop Ktor applications, pretty much any IDE compatible with Java/Kotlin should work. But the default choice is IntelliJ IDEA, of course. Community edition (free) will work just fine. Postman is a great choice for documenting, testing, and sharing your backend APIs. There are many similar tools. You can use cURL requests, for example. But always think about your API users first. What will be the most convenient for them, as they depend on you a lot. Structure Most of the Kotlin projects (including Ktor) are powered by Gradle, so they look quite similar. My template isn't different, with many Gradle-related files in the root and single src folder. Other files are related to Heroku deployment, but more on this later. Architecture Ktor isn't forcing you for any particular approach, so you are free to choose and implement the architecture that fits your needs best. In our case, we implemented classical MVC (Model -- View -- Controller) architecture with a public API instead of View and dedicated Interactors, which encapsulate all business logic related to each endpoint. Firebase Auth Most applications require some authentication and authorization business logic, so my template includes one of the possible implementations out of

## How to use GraphQL with Postman - Postman testing with GraphQL

DevFeed: [How to use GraphQL with Postman - Postman testing with GraphQL](<https://devfeed.tech/articles/how-to-use-graphql-with-postman-postman-testing-with-graphql-23388.md>)

Original publisher: [Read original article](<https://www.apollographql.com/blog/how-to-use-graphql-with-postman>)

Author: Khalil Stemmler

Published: 2021-03-18T00:01:12Z

Content type: tutorial

Language: en

Sources: [Apollo Blog](<https://devfeed.tech/sources/apollo-blog.md>)

Topics: [GraphQL](<https://devfeed.tech/topics/graphql.md>), [Postman](<https://devfeed.tech/topics/postman.md>), [Testing](<https://devfeed.tech/topics/testing.md>), [API](<https://devfeed.tech/topics/api.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [ide](<https://devfeed.tech/topics/ide.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [apollo](<https://devfeed.tech/tags/apollo.md>), [graphql](<https://devfeed.tech/tags/graphql.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [http](<https://devfeed.tech/tags/http.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [postman](<https://devfeed.tech/tags/postman.md>), [testing](<https://devfeed.tech/tags/testing.md>), [tooling](<https://devfeed.tech/tags/tooling.md>)

### AI overview

This tutorial explains how to use Postman to manually test a GraphQL API. It covers starting a sample Apollo server, reviewing its schema, sending GraphQL queries over HTTP POST, viewing responses, and using variables for filtering.

### Source excerpt

When building out APIs on the web, we'll often find ourselves in the situation where we need to quickly verify that the route or API call we just created works the way we intend it to. If you're not using Apollo Explorer to test your GraphQL API (our free GraphQL IDE in Apollo Studio), another option is Postman. It works as a great tool for testing any HTTP endpoint - that means GraphQL too. In this short post, we'll walk through how to manually test your GraphQL API using Postman.

## Secure and explore ASP.NET Core Web APIs

DevFeed: [Secure and explore ASP.NET Core Web APIs](<https://devfeed.tech/articles/secure-and-explore-asp-net-core-web-apis-20783.md>)

Original publisher: [Read original article](<https://conductofcode.io/post/secure-and-explore-aspnet-core-web-apis/>)

Author: {"twitter"=\>"hlaueriksson"}

Published: 2017-03-31T21:00:00Z

Content type: tutorial

Language: en

Sources: [Henrik Lau Eriksson](<https://devfeed.tech/sources/henrik-lau-eriksson.md>)

Topics: [ASP.NET Core](<https://devfeed.tech/topics/asp-net-core.md>), [Web APIs](<https://devfeed.tech/topics/web-apis.md>), [JSON Web Tokens](<https://devfeed.tech/topics/jwt.md>), [Postman](<https://devfeed.tech/topics/postman.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [API](<https://devfeed.tech/topics/api.md>), [JSON](<https://devfeed.tech/topics/json.md>)

Tags: [asp-net-core](<https://devfeed.tech/tags/asp-net-core.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [c-sharp](<https://devfeed.tech/tags/c-sharp.md>), [jwt](<https://devfeed.tech/tags/jwt.md>), [postman](<https://devfeed.tech/tags/postman.md>), [rest](<https://devfeed.tech/tags/rest.md>), [swagger](<https://devfeed.tech/tags/swagger.md>), [web-apis](<https://devfeed.tech/tags/web-apis.md>)

### AI overview

A tutorial on creating an ASP.NET Core Web API, securing its controller actions with JSON Web Tokens, and exploring the API through Swagger UI and Postman. It also describes JWT configuration and request-pipeline setup.

### Source excerpt

How to create a ASP.NET Core Web API, secure it with JSON Web Tokens and explore it with Swagger UI and Postman.

## Getting started with Postman and Square's APIs

DevFeed: [Getting started with Postman and Square's APIs](<https://devfeed.tech/articles/getting-started-with-postman-and-square-s-apis-15666.md>)

Original publisher: [Read original article](<https://developer.squareup.com/blog/getting-started-with-postman-and-squares-apis>)

Author: Tristan Sokol

Published: 2017-03-22T23:15:49Z

Content type: tutorial

Language: en

Sources: [Square Corner Blog RSS Feed](<https://devfeed.tech/sources/square-corner-blog-rss-feed.md>)

Topics: [Postman](<https://devfeed.tech/topics/postman.md>), [API](<https://devfeed.tech/topics/api.md>), [Documentation](<https://devfeed.tech/topics/documentation.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Transactions](<https://devfeed.tech/topics/transactions.md>)

Tags: [api-documentation](<https://devfeed.tech/tags/api-documentation.md>), [apis](<https://devfeed.tech/tags/apis.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [getting-started](<https://devfeed.tech/tags/getting-started.md>), [postman](<https://devfeed.tech/tags/postman.md>), [testing](<https://devfeed.tech/tags/testing.md>), [transactions](<https://devfeed.tech/tags/transactions.md>)

### AI overview

A tutorial on using Postman with Square's APIs. It explains how to install Postman, import Square's collection, configure environment variables with API credentials, and run sandbox API calls for locations, customers, charges, and transactions.

### Source excerpt

Being able to try out an API as quickly as possible is important when learning about its features. One of the tools to help you get up and...