Postilion AI Coding Agent
Coding agent for Postilion / PostBridge / ISO 8583. Chat in VS Code or Cursor, edit the open workspace, run the terminal, and ground answers in your team's Postilion AI backend (RAG + LLM).
This extension does not include the knowledge base. Point it at a running backend, then sign in.
Install
Search Postilion AI Coding Agent in:
- Cursor — Extensions view (Open VSX)
- VS Code — Extensions view (Visual Studio Marketplace)
Or from a terminal:
code --install-extension cassava-tps.postilion-ai-coding-agent
cursor --install-extension cassava-tps.postilion-ai-coding-agent
Reload the window, then Postilion AI: Open Coding Agent.
Connect to the backend
- Sign in to the Postilion AI web app and open API keys.
- Create a key, set an expiry, and copy it (shown once).
- Send a prompt in the coding agent. The first time it asks for the API URL (default
http://10.169.39.56:8000), then the API key.
- Change them later with Postilion AI: Set API URL and Postilion AI: Set API Key.
- Open a workspace folder. Tools only run inside that folder.
Disable or delete a key in the web app at any time — the extension will get 401 until you set a new one.
Confirm the API is up: curl http://YOUR_HOST:8000/api/v1/health
Permission modes
| Mode |
Meaning |
| Manual |
Ask in chat before file writes and terminal |
| Accept edits |
Auto-allow writes; still ask for terminal |
| Plan |
Read-only explore, then wait for Approve & implement |
Settings
| Setting |
Default |
Meaning |
postilionAi.apiBaseUrl |
http://10.169.39.56:8000 |
Optional fallback; prefer the first-prompt / Set API URL |
postilionAi.apiKey |
(empty) |
Optional fallback; prefer Set API Key |
postilionAi.model |
qwen |
LiteLLM model id |
postilionAi.permissionMode |
manual |
Manual / acceptEdits / plan |
postilionAi.requireShellApproval |
true |
Ask before run_terminal |
postilionAi.requireWriteApproval |
true |
Ask before writes in Manual |
postilionAi.maxRounds |
0 |
0 = no soft cap (safety ceiling still applies) |
postilionAi.includeSelection |
true |
Append current editor selection |
Security
- API keys are hashed on the server. The plaintext is shown once when you create the key.
- Postilion AI: Set API Key stores the key in VS Code/Cursor Secret Storage. Clear API Key removes it.
- Paths cannot escape the workspace root.
- Shell and writes use your OS user. Do not point this at production switch hosts.
- Postilion AI: Clear Session Shell Approvals clears “Allow for this session”.
Backend and architecture: GitHub repository.
