Kong

Connect an agent via an official MCP server G

Agent access

Drive the product through a documented public API G

Agent access

Plug MCP servers into this product so it can use their tools G

Agent access

Delegate tasks to a built-in AI assistant inside the product G

Agentic features

Point an agent at llms.txt or agent-oriented docs G

Agent access

Run the product headlessly / in CI for automation G

Agent access

Download a machine-readable API spec (OpenAPI or equivalent) G

Api quality

Issue scoped/least-privilege API credentials for an agent G

Agent access

Operate the product with natural-language commands G

Agentic features

Use an official CLI G

Agent access

Explore an interactive API reference with runnable examples G

Api quality

Build against official SDKs G

Agent access

Get AI-generated insights and suggestions from my data inside the product G

Agentic features

Rely on versioned APIs with a documented deprecation policy G

Api quality

Set up automations that run autonomously in the background G

Agentic features

Subscribe to events via webhooks G

Agent access

Test against a sandbox environment without touching production data G

Api quality

Enforce authentication (API keys, OAuth2, JWT, mTLS) on upstream APIs via gateway plugins or policies C

Traffic management

Enforce rate limits on API traffic per consumer or route C

Traffic management

Self-host the core product G

Export all of my data in open formats and leave G

Store collections as plain text files in my repo and version them with git C

Collections

Define rules that trigger actions automatically on events G

Import an OpenAPI spec to generate requests and collections C

Spec import export

Lint API specs against configurable style and governance rules C

Governance

Prevent my data from being used to train AI models G

Switch requests between dev, staging, and prod using environment variable sets C

Environments

Organize API requests into collections and folders and rerun them anytime C

Collections

Run an entire collection as an automated test suite with a pass/fail report C

Testing

Run my API test collections in CI with a CLI and fail the build on regressions C

Ci

Share collections with my team in a synced shared workspace C

Team workspaces

Spin up a mock server from saved examples or a spec so consumers can build before the API exists C

Mocking

Write test assertions against response status, body, and headers C

Testing

Proxy and govern LLM/MCP traffic (token limits, prompt guards, provider routing) through the platform C

Ai gateway

Route, load-balance, and transform requests between consumers and upstream services C

Traffic management

Keep credentials out of shared files with masked secrets or an external vault integration C

Secrets

Manage API infrastructure as declarative config and sync it from CI (GitOps/APIOps) C

Gateway ops

Publish an internal catalog or portal where teams discover and consume our APIs C

Api catalog

Do everything through the API that I can do in the UI G

Generate and publish API documentation from my collections or specs C

Docs generation

Monitor API traffic with metrics, logging, and tracing integrations C

Monitoring

Perform bulk operations across many items at once G

Read the product's source under an open license G

Work fully offline in a local workspace without a cloud account G

Offline

Script pre-request and post-response logic to chain requests and massage data C

Scripting

Control data retention and deletion G

Design an API spec-first and export it as OpenAPI C

Spec import export

Choose where my data is stored (region/residency) G

Control who can view or edit APIs and collections with roles and permissions G

Access control

Have AI generate test cases or assertions for an endpoint from its spec or responses C

Ai assist

Import and export collections in portable formats to move between tools C

Collections

Opt out of telemetry and usage tracking G

Schedule collection runs as monitors that alert me when an API breaks C

Monitors

Schedule recurring jobs or workflows G

Send GraphQL, gRPC, WebSocket, and SSE requests, not just REST C

Protocols

Validate live responses against the API contract to catch drift C

Contract testing

Version, review, and roll back my automations G