Twitxy Saved

Abhinav Asthana

Verified account This account is verified. Learn more

@a85

CEO and Founder, Postman (Postman.ai)
San Francisco, CA postman.ai Joined March 2008
775 Following 13K Followers 3.2K Posts

Latest posts 5

Pinned post

Abhinav Asthana Verified account @a85
.@getpostman is now natively available in your favorite coding agent!

The new Postman CLI is designed to bring API engineering for agents:

1️⃣ Works in Git and your code repo - Just drop Postman where your agent lives and works.
2️⃣ No GUI - Work in your coding agent. Bring up the Postman UI for review and approval.
3️⃣ No sign-up - Get started right away. Sign-up when you have to save your work and want more.

Install once, work in your agent. Run npm install -g postman-cli, then postman init. This loads Postman's skills into your coding agent so it can create collections, write tests, and much more. Available as a plugin for all coding agents!

The skills cover the API lifecycle: find APIs your org already has, generate tests that catch regressions, mock an API before it exists, watch live endpoints for downtime and drift, run checks in CI on every commit, and run performance tests.

You can also extend the abilities of your agent with the Context Graph. An agent often sees only the code that is accessible to them. The Context Graph API gives it a map of your team's infrastructure, APIs, and services, and how they depend on each other.

As your agent works, you stay the reviewer. Your agent does the work from the command line. Open Postman when you want to review or approve it.

Check out more at postman.com!
0:37
3 replies 25 reposts 63 likes 494K views View on X
Abhinav Asthana Verified account @a85
We unfortunately burnt >$1M in 2-3 days on farming for tokens in our trial program and had to shut down model access.
claire vo 🖤 Verified account @clairevo 2d
if you're curious the kind of creative fraud we see, here are some examples:

1. chinese reseller that farms promo codes for trial access (typically sold in bundles) then bizarrely wraps their authenticated session and proxies it to their own app, where they resell it -- not very successfully -- as their own app. they run outlook email signups on a loop when they exhaust promo or trial limits. we have evidence they're doing this to companies like @linear @cognition @granola @SpaceXSI and @gumloop as well. They sell these through AliPay and their dispatcher loops in a promo code and routes to their "paying" users. they auto rotate through these tools to keep spend under the trial or promo limits.

2. egyptian team building fortnite and roblox maps and slamming our most expensive models in the most inefficient way on trials held w real cards (but cancelled and restarted.) this started subtle and ramped up quickly over 3 days. should have been caught (and less expensive) but we had a prompt caching bug and the monitor had been muted temporarily because of some real business things. super painful one.

3. indonesia - banned the entire country. hundreds of people were using chatprd on trial as a temu chatgpt. luckily the token cost here was low enough but it was annoying so the entire country go the ban hammer.

i am NOT VC funded so i have to eat every single one of these learnings. me, our eng team, and the bots are doing hand to hand on a 15 minute basis to try to catch things while keeping customer privacy and prospect access high.

its a nightmare.
View quoted post on X
4 replies 2 reposts 20 likes 4.4K views View on X
Abhinav Asthana Verified account @a85
Agents are reading docs more than humans!

The Latest State of Docs report from @buildwithfern is out.

We pulled nine months of traffic across every docs site we host. Between January and September:

→ Agent requests grew 6x!
→ 74% of API reference and changelog views came from agents
→ 93% of agent requests went to Markdown, not HTML

We also ranked what to fix first to make your docs better for agents in State of Docs:

buildwithfern.com/post/biggest-r…
2 replies 3 reposts 11 likes 742 views View on X
Abhinav Asthana Verified account @a85
Coding agents are the biggest leak vectors for API keys. Usepassport.ai
The Hacker News @TheHackersNews 5d
‼️ Claude Code's "Don't Ask Again" option can save passwords and API keys in plaintext.

Apiiro found 2,539 exposed secrets across 1,994 public GitHub repos, including database credentials, SSH logins, and cloud keys.

Deleting files doesn't erase Git history.

Read: thehackernews.com/2026/11/claude…
View quoted post on X