# Agent Skills

> Postman Agent Skills for AI coding agents. Sync collections, generate code, run tests, create mocks, publish docs, audit security, and analyze API readiness.

- **Type:** MCP server
- **Install:** `agentstack add mcp-postman-devrel-agent-skills`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [Postman-Devrel](https://agentstack.voostack.com/s/postman-devrel)
- **Installs:** 0
- **Category:** [Integrations](https://agentstack.voostack.com/c/integrations)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [Postman-Devrel](https://github.com/Postman-Devrel)
- **Source:** https://github.com/Postman-Devrel/agent-skills

## Install

```sh
agentstack add mcp-postman-devrel-agent-skills
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Postman Agent Skills

[](https://opensource.org/licenses/MIT)

Give your AI coding agent full access to Postman. Sync collections, generate client code, run tests, create mocks, publish docs, audit security, and analyze API readiness for AI agents.

Works with **Claude Code**, **Cursor**, **Windsurf**, **Codex**, and [40+ other agents](https://skills.sh).

## Install

```bash
npx skills add Postman-Devrel/agent-skills
```

This installs two skills:

| Skill | What It Does |
|-------|-------------|
| **postman** | Full API lifecycle: sync specs, generate code, run tests, create mocks, publish docs, audit security |
| **postman-api-readiness** | Analyze any API for AI agent compatibility (48 checks, 8 pillars, 0-100 scoring) |

## Prerequisites

1. **Postman API Key**: Get one at [postman.postman.co/settings/me/api-keys](https://postman.postman.co/settings/me/api-keys)

2. **Set the environment variable**:
   ```bash
   export POSTMAN_API_KEY=PMAK-your-key-here
   ```
   Add to `~/.zshrc` or `~/.bashrc` to persist.

3. **Postman MCP Server**: The skills use Postman's MCP Server for all operations. If you're using the [Postman Claude Code Plugin](https://github.com/Postman-Devrel/postman-claude-code-plugin), MCP is already configured. Otherwise, add to your MCP config:
   ```json
   {
     "mcpServers": {
       "postman": {
         "type": "http",
         "url": "https://mcp.postman.com/mcp",
         "headers": {
           "Authorization": "Bearer ${POSTMAN_API_KEY}"
         }
       }
     }
   }
   ```

## What You Can Do

### Sync Collections
Push OpenAPI specs to Postman, create collections, keep everything in sync.
```
"Sync my OpenAPI spec to Postman"
"Create a collection from my local API spec"
"Push my endpoint changes to Postman"
```

### Generate Client Code
Generate typed clients from your Postman collections in TypeScript, Python, Go, Rust, Java, or Ruby.
```
"Generate a TypeScript client from my Users API collection"
"Create a Python SDK for the Pet Store API"
```

### Run Tests
Execute Postman collection tests, diagnose failures, and fix code.
```
"Run the tests for my API collection"
"Why are my API tests failing?"
```

### Create Mock Servers
Spin up mock servers for frontend development and testing.
```
"Create a mock server for my collection"
"I need a fake API for frontend development"
```

### Publish Documentation
Analyze, improve, and publish API docs.
```
"How complete is my API documentation?"
"Generate docs for my OpenAPI spec"
"Publish my collection docs"
```

### Security Audit
Audit APIs against OWASP API Security Top 10.
```
"Run a security audit on my API"
"Check my spec for vulnerabilities"
```

### API Readiness Analysis
Score your API for AI agent compatibility.
```
"Is my API agent-ready?"
"Scan my OpenAPI spec for agent compatibility"
"How do I get my API to a 90% readiness score?"
```

## Skills Structure

```
skills/
  postman/
    SKILL.md                    # Main skill (7 workflows)
    references/
      mcp-tools.md              # MCP tool catalog
      mcp-limitations.md        # Known limitations + workarounds
  postman-api-readiness/
    SKILL.md                    # Readiness analyzer (48 checks)
    references/
      pillars.md                # Full pillar reference
```

## About

Built by the [Postman Developer Relations](https://www.postman.com) team. These skills give AI coding agents native access to Postman's API platform, turning your agent into a full API development partner.

The **postman** skill covers the complete API lifecycle: design, build, test, secure, deploy, observe, and distribute. The **postman-api-readiness** skill is a standalone analyzer that evaluates any OpenAPI spec for AI agent compatibility using a framework of 48 checks across 8 pillars.

## See Also

- [Postman Plugin for Claude Code](https://github.com/Postman-Devrel/postman-claude-code-plugin) - Full plugin with commands, skills, and agents for Claude Code (source of truth)
- [Postman Plugin for Cursor](https://github.com/Postman-Devrel/cursor-postman-plugin) - Same capabilities, adapted for Cursor IDE
- [Postman Cursor Rules](https://github.com/Postman-Devrel/postman-cursor-rules) - Lightweight MCP config + rules for Cursor

## License

MIT

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [Postman-Devrel](https://github.com/Postman-Devrel)
- **Source:** [Postman-Devrel/agent-skills](https://github.com/Postman-Devrel/agent-skills)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-postman-devrel-agent-skills
- Seller: https://agentstack.voostack.com/s/postman-devrel
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.