Voiden Blog
API tutorials, resources & updates
Phurpa Tsering
Where API Secrets Leak, and How to Keep Them in Your Vault
Most API keys don't leak from production. They leak from the tools we test it with: saved requests, exports, synced workspaces and curl commands. Why copies of secrets are the real problem, and how to keep only references in your requests with Vault, Doppler, Infisical, Bitwarden or KeePassXC.
Davinder singh
Agents Live on the Error Path
An error that says what to do next is an instruction. Test it like one. What an agent needs from your API errors, where hints should stop, and how to keep error contracts from breaking.
Phurpa Tsering
Turn Your Tested API Requests Into Agent-Callable MCP Tools
Turn a request you've already tested into an MCP tool that agents can call, then publish it with @voiden/mcp. Use stdio for local use, or --http/--tunnel for a server you can host.
Phurpa Tsering
Bring Any MCP Server Into Your API Testing Workflow
Connect to any Streamable HTTP MCP server, browse its tools, resources, and prompts, and call one. Check the response with the same auth and assertion blocks you use for REST, all from a plain .void file.
Phurpa Tsering
Give Your Coding Agent Real Access to Your API Requests
One status-bar button (or one CLI command) registers your project with Claude Code or Codex over MCP, giving your coding agent the same six tools Voiden uses to list, run, and manage requests.
Nikolas Dimitroulakis
Voiden 2.3: Three Ways to Connect Your API to AI Agents
Initialize MCP, the tool block, and the MCP client block all involve MCP and all start with a .void file. Here's the short version of what each one is for and which one you actually want.
Nikolas Dimitroulakis
API Client Security for Enterprises: The Vendor Risk Nobody Reviewed
API tooling holds your company's tokens, internal endpoints, and customer data. Here's what CISOs and engineering leaders actually look for, how that translates to tooling decisions in the agentic era, and what a privacy-first API IDE changes.
Nikolas Dimitroulakis
How to Import OpenAPI Specs into Voiden and Turn Them into API Tests
Import an OpenAPI spec into Voiden, turn it into runnable requests, and add the auth and assertions that make it a real test suite.
Nikolas Dimitroulakis
Obsidian vs Voiden: When to Use Both
Obsidian is a notes workspace. Voiden is an API workspace. Where one job ends, the other begins, and why a lot of developers should be running both.