Close Menu
    DevStackTipsDevStackTips
    • Home
    • News & Updates
      1. Tech & Work
      2. View All

      This week in AI updates: Mistral’s new Le Chat features, ChatGPT updates, and more (September 5, 2025)

      September 6, 2025

      Designing For TV: Principles, Patterns And Practical Guidance (Part 2)

      September 5, 2025

      Neo4j introduces new graph architecture that allows operational and analytics workloads to be run together

      September 5, 2025

      Beyond the benchmarks: Understanding the coding personalities of different LLMs

      September 5, 2025

      Hitachi Energy Pledges $1B to Strengthen US Grid, Build Largest Transformer Plant in Virginia

      September 5, 2025

      How to debug a web app with Playwright MCP and GitHub Copilot

      September 5, 2025

      Between Strategy and Story: Thierry Chopain’s Creative Path

      September 5, 2025

      What You Need to Know About CSS Color Interpolation

      September 5, 2025
    • Development
      1. Algorithms & Data Structures
      2. Artificial Intelligence
      3. Back-End Development
      4. Databases
      5. Front-End Development
      6. Libraries & Frameworks
      7. Machine Learning
      8. Security
      9. Software Engineering
      10. Tools & IDEs
      11. Web Design
      12. Web Development
      13. Web Security
      14. Programming Languages
        • PHP
        • JavaScript
      Featured

      Why browsers throttle JavaScript timers (and what to do about it)

      September 6, 2025
      Recent

      Why browsers throttle JavaScript timers (and what to do about it)

      September 6, 2025

      How to create Google Gemini AI component in Total.js Flow

      September 6, 2025

      Drupal 11’s AI Features: What They Actually Mean for Your Team

      September 5, 2025
    • Operating Systems
      1. Windows
      2. Linux
      3. macOS
      Featured

      Harnessing GitOps on Linux for Seamless, Git-First Infrastructure Management

      September 6, 2025
      Recent

      Harnessing GitOps on Linux for Seamless, Git-First Infrastructure Management

      September 6, 2025

      How DevOps Teams Are Redefining Reliability with NixOS and OSTree-Powered Linux

      September 5, 2025

      Distribution Release: Linux Mint 22.2

      September 4, 2025
    • Learning Resources
      • Books
      • Cheatsheets
      • Tutorials & Guides
    Home»Tech & Work»In MCP era API discoverability is now more important than ever

    In MCP era API discoverability is now more important than ever

    June 5, 2025

    API discoverability — the ability for developers to actually find your API and use it — has always been important, but it’s becoming increasingly more important as AI agents become more prevalent.

    “If your APIs are lying around and they’re not discoverable or they’re not documented, then it’s going to be very hard for people to build agents,” Abhinav Asthana, CEO and co-founder of Postman, told SD Times at POST/CON, the company’s user conference held this week in Los Angeles.

    RELATED: Postman introduces Agent Mode to integrate the power of AI agents into Postman’s core capabilities

    API as the building blocks for agents was a key theme at the event. Sterling Chin, senior developer advocate at Postman, told SD Times that the industry needs to get to a point where an API is so easy to digest that it’s just like building with LEGO. 

    “You grab the pieces that you need, put them together, and then you have a full application and you make an agentic workflow out of it where if this happens, an agent can start running and you can deploy it and redeploy and fix it without having to touch code. I think that’s the future of agentic AI,” he said.

    At the conference, Postman announced that it launched a network for verified MCP servers. “We basically took all the remote MCP servers available today, verified them, and put them on the public network because everybody’s gonna need a verified place soon. People started with unverified MCP servers, and there is a risk there that if you just start having your agents be connected to unverified MCP servers, it’s just like remote injection,” Asthana said.

    Postman also released an update to its platform that enables any public API on its network of over 100,000 public APIs to be turned into an MCP server, making it more important than ever that API developers ensure their APIs are discoverable by the people that will want to use them. 

    Chin said that what is typically seen of APIs is only the tip of the iceberg. “We only see the top maybe 10 percent. Those are the external APIs that get all the hype. The majority of services are internal to us, and those are the ones that when MCP starts to really take off, those are the APIs that are going to blow everyone away.”

    Making your APIs stand out

    Allen Helton, ecosystem engineer at Momento, maker of reliability solutions and a customer of Postman, told SD Times that the most important benefit they get out of Postman is that it allows their APIs to be easily discovered by developers. 

    “Being a small tech startup, it’s easy to get lost in the weeds and it’s hard to get your name out there and have brand recognition when you’re just starting out,” he said. “We build inside of Postman to help people discover us and then subsequently when they do, they figure out what we’re about and how to use the products.”

    He said that the Postman network is great because if you’re doing anything in public, you’re on it, and that means you can come up in search and be discovered. 

    “If I am looking for services that offer caching, Momento is going to slide up to the top because we’ve done a lot of work on standing out,” he said. 

    He has a few main recommendations he’d give to other API developers looking to stand out. First off  is to make sure they’re not standing out in a bad way by ensuring they’re doing basic best practices that every API owner should do, such as setting up easy auth.

    “Postman has a great feature where whenever you paste a URL into a request, it recognizes ‘oh, this is Momento, do you need help getting your auth token or API key?’ And it actually walks you through exactly how to get it and then puts that API key in the right spot for you.”

    Another recommendation is to make sure your public profile is filled out. The public profile includes everything an API publisher owns, including workspaces, collections, and API specs. He advises everyone to have a profile picture and links to their social media and website on that page. 

    Getting verified by Postman will also help, as verified publishers get a badge that essentially proves that you’re the domain owner, increasing confidence among API consumers. Postman’s requirements for getting verified include things like having a verified domain, setting up authentication for public APIs, and having good documentation. 

    “What’s nice about how Momento has used the Postman API Network is if you build things in a way that tells a story and that pushes your branding, it really helps to get noticed,” Helton said. “It helps with your search engine results. It helps people get a very clear and immediate idea of what they can do with your services. Just kind of weave in your personality into all the different areas that Postman allows you to have rich text and images.”

    Another popular API publisher on the network is PayPal, and Brenden Lane, senior director of developer products at the company, said that the discoverability aspect of the network is also a big part of their strategy. 

    “We are a very big ecosystem,” he said. “We have a lot of tools that might be useful for different people or companies. One of the things that Postman really helps us do is explain very simply and clearly what you need and how to hook it up.”

    PayPal launched its own MCP Server as a Postman Collection earlier this week. According to Lane, this opens up access to a number of commerce tools that are useful for AI.

    “The public network makes it very easy for people to understand and discover tools across different companies or different types of tools, and then make it very easy to compose experiences together,” he said.


    Disclosure: The reporter’s trip to POST/CON, including flights, hotel, and meals, was covered by Postman. The reporter also received a bag of conference merchandise.

    The post In MCP era API discoverability is now more important than ever appeared first on SD Times.

    Source: Read More 

    news
    Facebook Twitter Reddit Email Copy Link
    Previous ArticleResearchers Detail Bitter APT’s Evolving Tactics as Its Geographic Scope Expands
    Next Article Clean Up Your Code with the whenHas Method

    Related Posts

    Tech & Work

    This week in AI updates: Mistral’s new Le Chat features, ChatGPT updates, and more (September 5, 2025)

    September 6, 2025
    Tech & Work

    Designing For TV: Principles, Patterns And Practical Guidance (Part 2)

    September 5, 2025
    Leave A Reply Cancel Reply

    For security, use of Google's reCAPTCHA service is required which is subject to the Google Privacy Policy and Terms of Use.

    Continue Reading

    How healthy is your home? Ultrahuman’s newest device will tell you

    News & Updates

    The best anti-Prime Day deals 2025 from Best Buy, Walmart, & more: Top sales from Amazon’s competition

    News & Updates

    Diablo 4’s Paladin might finally be here soon — plus Season 10’s Chaos theme fully revealed

    News & Updates

    CVE-2025-34127 – Achat UDP Stack-based Buffer Overflow

    Common Vulnerabilities and Exposures (CVEs)

    Highlights

    CVE-2023-7307 – Sangfor Behavior Management System XXE Injection Vulnerability

    August 27, 2025

    CVE ID : CVE-2023-7307

    Published : Aug. 27, 2025, 10:15 p.m. | 3 hours, 34 minutes ago

    Description : Sangfor Behavior Management System (also referred to as DC Management System in Chinese-language documentation) contains an XML external entity (XXE) injection vulnerability in the /src/sangforindex endpoint. A remote unauthenticated attacker can submit crafted XML data containing external entity definitions, leading to potential disclosure of internal files, server-side request forgery (SSRF), or other impacts depending on parser behavior. The vulnerability is due to improper configuration of the XML parser, which allows resolution of external entities without restriction. This product is now integrated into their IAM (Internet Access Management) platform and an affected version range is undefined.

    Severity: 8.7 | HIGH

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    CVE-2025-6613 – PHPGurukul Hospital Management System Cross-Site Scripting Vulnerability

    June 25, 2025

    SatIntel is a OSINT tool for satellite reconnaissance

    April 26, 2025

    CVE-2025-43011 – SAP Landscape Transformation Authorization Bypass Vulnerability

    May 13, 2025
    © DevStackTips 2025. All rights reserved.
    • Contact
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.