- PostmanSource searches public collections via internal search proxy - SwaggerHubSource searches published API specs for embedded keys - Both credentialless, use BuildQueries + ciLogKeyPattern - httptest-based tests for both sources