Skip to content
Back to skills

Postman Publisher

ASecurity

Validate and sync a curated Postman Collection to an owned public workspace on the Postman API Network. Use for API distribution, not for reading a customer's Postman workspace.

  • 17 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 17, 2026
ai-agentspythonbashapi

Works with

  • api
  • mcp

Security analysis

A100/100

Pro scans all 3 files and shows the line behind each finding

Scanned October 17, 2026

npx -y skills add AceDataCloud/Skills --skill postman-publisher --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Postman Publisher?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Postman Publisher
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/acedatacloud-postman-publisher/badge)](https://www.skillsdirectory.com/skills/acedatacloud-postman-publisher)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: postman-publisher
description: Validate and sync a curated Postman Collection to an owned public workspace on the Postman API Network. Use for API distribution, not for reading a customer's Postman workspace.
when_to_use: |
  Use when publishing or updating the user's own public API collection. The
  existing Postman remote MCP connector is for browsing and running requests;
  this skill is the separate outbound publisher.
connections: [postmanpublisher]
allowed_tools: [Bash, publish_artifact]
license: Apache-2.0
metadata:
  author: acedatacloud
  version: "1.0"
---

# Postman public API publisher

The connected account supplies `$POSTMANPUBLISHER_API_KEY` and
`$POSTMANPUBLISHER_WORKSPACE_ID`. Prepare a **curated** Postman Collection v2.1
JSON file with working examples. Do not copy production keys, customer data, or
secret headers into the collection. Use `{{api_key}}` with an empty default.

```bash
SCRIPT="$SKILL_DIR/scripts/postman_publisher.py"
python3 "$SCRIPT" sync --collection-file collection.json
# After reviewing the complete collection and target public workspace:
python3 "$SCRIPT" sync --collection-file collection.json --confirm
# Future updates use the collection ID returned by the first sync:
python3 "$SCRIPT" sync --collection-file collection.json --collection-id UUID --confirm
```

Dry-run validation makes no network request. A confirmed sync first reads the
workspace and refuses to write unless its type is `public`. It then creates or
replaces one collection and reads it back. A successful API readback means the
collection is in the public workspace; verify the actual anonymous public URL
before claiming API Network discoverability or recording an artifact.

Official references: [publish a public API](https://learning.postman.com/docs/postman-api-network/showcase/publish/public-apis), [create a collection](https://learning.postman.com/api-docs/api-reference/collections/create-collection), [replace a collection](https://learning.postman.com/api-docs/api-reference/collections/put-collection).

Files in this skill

  • SKILL.md2 KB
  • scripts/postman_publisher.py7.4 KB
  • tests/test_postman_publisher.py4 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.