Close Menu
    DevStackTipsDevStackTips
    • Home
    • News & Updates
      1. Tech & Work
      2. View All

      Tenable updates Vulnerability Priority Rating scoring method to flag fewer vulnerabilities as critical

      July 24, 2025

      Google adds updated workspace templates in Firebase Studio that leverage new Agent mode

      July 24, 2025

      AI and its impact on the developer experience, or ‘where is the joy?’

      July 23, 2025

      Google launches OSS Rebuild tool to improve trust in open source packages

      July 23, 2025

      EcoFlow’s new portable battery stations are lighter and more powerful (DC plug included)

      July 24, 2025

      7 ways Linux can save you money

      July 24, 2025

      My favorite Kindle tablet just got a kids model, and it makes so much sense

      July 24, 2025

      You can turn your Google Photos into video clips now – here’s how

      July 24, 2025
    • Development
      1. Algorithms & Data Structures
      2. Artificial Intelligence
      3. Back-End Development
      4. Databases
      5. Front-End Development
      6. Libraries & Frameworks
      7. Machine Learning
      8. Security
      9. Software Engineering
      10. Tools & IDEs
      11. Web Design
      12. Web Development
      13. Web Security
      14. Programming Languages
        • PHP
        • JavaScript
      Featured

      Blade Service Injection: Direct Service Access in Laravel Templates

      July 24, 2025
      Recent

      Blade Service Injection: Direct Service Access in Laravel Templates

      July 24, 2025

      This Week in Laravel: NativePHP Mobile and AI Guidelines from Spatie

      July 24, 2025

      Retrieve the Currently Executing Closure in PHP 8.5

      July 24, 2025
    • Operating Systems
      1. Windows
      2. Linux
      3. macOS
      Featured

      FOSS Weekly #25.30: AUR Poisoned, Linux Rising, PPA Explained, New Open Source Grammar Checker and More

      July 24, 2025
      Recent

      FOSS Weekly #25.30: AUR Poisoned, Linux Rising, PPA Explained, New Open Source Grammar Checker and More

      July 24, 2025

      How to Open Control Panel in Windows 11

      July 24, 2025

      How to Shut Down Windows 11

      July 24, 2025
    • Learning Resources
      • Books
      • Cheatsheets
      • Tutorials & Guides
    Home»Tech & Work»In MCP era API discoverability is now more important than ever

    In MCP era API discoverability is now more important than ever

    June 5, 2025

    API discoverability — the ability for developers to actually find your API and use it — has always been important, but it’s becoming increasingly more important as AI agents become more prevalent.

    “If your APIs are lying around and they’re not discoverable or they’re not documented, then it’s going to be very hard for people to build agents,” Abhinav Asthana, CEO and co-founder of Postman, told SD Times at POST/CON, the company’s user conference held this week in Los Angeles.

    RELATED: Postman introduces Agent Mode to integrate the power of AI agents into Postman’s core capabilities

    API as the building blocks for agents was a key theme at the event. Sterling Chin, senior developer advocate at Postman, told SD Times that the industry needs to get to a point where an API is so easy to digest that it’s just like building with LEGO. 

    “You grab the pieces that you need, put them together, and then you have a full application and you make an agentic workflow out of it where if this happens, an agent can start running and you can deploy it and redeploy and fix it without having to touch code. I think that’s the future of agentic AI,” he said.

    At the conference, Postman announced that it launched a network for verified MCP servers. “We basically took all the remote MCP servers available today, verified them, and put them on the public network because everybody’s gonna need a verified place soon. People started with unverified MCP servers, and there is a risk there that if you just start having your agents be connected to unverified MCP servers, it’s just like remote injection,” Asthana said.

    Postman also released an update to its platform that enables any public API on its network of over 100,000 public APIs to be turned into an MCP server, making it more important than ever that API developers ensure their APIs are discoverable by the people that will want to use them. 

    Chin said that what is typically seen of APIs is only the tip of the iceberg. “We only see the top maybe 10 percent. Those are the external APIs that get all the hype. The majority of services are internal to us, and those are the ones that when MCP starts to really take off, those are the APIs that are going to blow everyone away.”

    Making your APIs stand out

    Allen Helton, ecosystem engineer at Momento, maker of reliability solutions and a customer of Postman, told SD Times that the most important benefit they get out of Postman is that it allows their APIs to be easily discovered by developers. 

    “Being a small tech startup, it’s easy to get lost in the weeds and it’s hard to get your name out there and have brand recognition when you’re just starting out,” he said. “We build inside of Postman to help people discover us and then subsequently when they do, they figure out what we’re about and how to use the products.”

    He said that the Postman network is great because if you’re doing anything in public, you’re on it, and that means you can come up in search and be discovered. 

    “If I am looking for services that offer caching, Momento is going to slide up to the top because we’ve done a lot of work on standing out,” he said. 

    He has a few main recommendations he’d give to other API developers looking to stand out. First off  is to make sure they’re not standing out in a bad way by ensuring they’re doing basic best practices that every API owner should do, such as setting up easy auth.

    “Postman has a great feature where whenever you paste a URL into a request, it recognizes ‘oh, this is Momento, do you need help getting your auth token or API key?’ And it actually walks you through exactly how to get it and then puts that API key in the right spot for you.”

    Another recommendation is to make sure your public profile is filled out. The public profile includes everything an API publisher owns, including workspaces, collections, and API specs. He advises everyone to have a profile picture and links to their social media and website on that page. 

    Getting verified by Postman will also help, as verified publishers get a badge that essentially proves that you’re the domain owner, increasing confidence among API consumers. Postman’s requirements for getting verified include things like having a verified domain, setting up authentication for public APIs, and having good documentation. 

    “What’s nice about how Momento has used the Postman API Network is if you build things in a way that tells a story and that pushes your branding, it really helps to get noticed,” Helton said. “It helps with your search engine results. It helps people get a very clear and immediate idea of what they can do with your services. Just kind of weave in your personality into all the different areas that Postman allows you to have rich text and images.”

    Another popular API publisher on the network is PayPal, and Brenden Lane, senior director of developer products at the company, said that the discoverability aspect of the network is also a big part of their strategy. 

    “We are a very big ecosystem,” he said. “We have a lot of tools that might be useful for different people or companies. One of the things that Postman really helps us do is explain very simply and clearly what you need and how to hook it up.”

    PayPal launched its own MCP Server as a Postman Collection earlier this week. According to Lane, this opens up access to a number of commerce tools that are useful for AI.

    “The public network makes it very easy for people to understand and discover tools across different companies or different types of tools, and then make it very easy to compose experiences together,” he said.


    Disclosure: The reporter’s trip to POST/CON, including flights, hotel, and meals, was covered by Postman. The reporter also received a bag of conference merchandise.

    The post In MCP era API discoverability is now more important than ever appeared first on SD Times.

    Source: Read More 

    news
    Facebook Twitter Reddit Email Copy Link
    Previous ArticleResearchers Detail Bitter APT’s Evolving Tactics as Its Geographic Scope Expands
    Next Article Clean Up Your Code with the whenHas Method

    Related Posts

    Tech & Work

    Tenable updates Vulnerability Priority Rating scoring method to flag fewer vulnerabilities as critical

    July 24, 2025
    Tech & Work

    Google adds updated workspace templates in Firebase Studio that leverage new Agent mode

    July 24, 2025
    Leave A Reply Cancel Reply

    For security, use of Google's reCAPTCHA service is required which is subject to the Google Privacy Policy and Terms of Use.

    Continue Reading

    Microsoft Family Safety Blocks Google Chrome in Windows 11: Workarounds Revealed

    Security

    CVE-2025-52573 – “iOS Simulator MCP Server Command Injection Vulnerability”

    Common Vulnerabilities and Exposures (CVEs)

    AI in Sitecore: How Artificial Intelligence is Shaping Modern Digital Experiences

    Development

    These old iPhones, Macs, and iPads won’t run Apple’s latest updates – did yours make the cut?

    News & Updates

    Highlights

    CVE-2025-4280 – Poedit for MacOS Privilege Escalation Vulnerability

    May 22, 2025

    CVE ID : CVE-2025-4280

    Published : May 22, 2025, 10:15 a.m. | 1 hour, 52 minutes ago

    Description : MacOS version of Poedit bundles a Python interpreter that inherits the Transparency, Consent, and Control (TCC) permissions
    granted by the user to the main application bundle. An attacker with local user access can
    invoke this interpreter with arbitrary commands or scripts, leveraging the
    application’s previously granted TCC permissions to access user’s files in privacy-protected folders without triggering user prompts. Accessing other resources beyond previously granted TCC permissions will prompt the user for approval in the name of Poedit, potentially disguising attacker’s malicious intent.

    This issue has been fixed in 3.6.3 version of Poedit.

    Severity: 0.0 | NA

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    CVE-2025-4832 – TOTOLINK HTTP POST Request Handler Buffer Overflow Vulnerability

    May 17, 2025

    CVE-2025-44887 – Fujitsu Workstation WGS-804HPT Stack Overflow Vulnerability

    May 20, 2025

    CVE-2025-4154 – PHPGurukul Pre-School Enrollment System SQL Injection Vulnerability

    May 1, 2025
    © DevStackTips 2025. All rights reserved.
    • Contact
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.