postman-mcp-server
Postman MCP Server — connect AI agents (Claude Code, Cursor, VS Code Copilot, Gemini CLI) to your Postman collections, OpenAPI specs, and environments via Model Context Protocol (MCP)
1 outside report on file
The main danger is that AI agents could access sensitive API credentials in your Postman environments and make unintended API calls to your services, so restrict this tool to read-only access and use separate credentials when possible.
Based on public adoption and transparency signals as of Oct 27, 2026. Our opinion, not a code audit or security guarantee.
What it can access
- Local filesNo local folder access notedLOW
- Command executionNo shell command runner notedLOW
- Network reachConnects to outside service APINOTED
- CredentialsRequires API key or tokenREVIEW
- Package sourcenpm (@postman/postman-mcp-server)PUBLIC
Inferred from this listing’s public package details and description. Check the project’s source before installing.
Install
npx -y @postman/postman-mcp-serverAbout Postman MCP Server
This tool lets AI assistants (like Claude and Cursor) access your Postman API collections, OpenAPI specifications, and saved environments. It acts as a bridge so AI agents can read your API definitions and potentially make API calls based on what's in your Postman workspace.
Who it’s for
Developers who use Postman to manage APIs and want AI assistants to understand and work with those API definitions. Teams that want to automate API exploration or testing using AI agents.
Alternatives
- Swagger UI + manual API docs: Share OpenAPI specs with AI through copy-paste instead of a live connector.
- AWS API Gateway documentation: Use API Gateway's built-in documentation features for AI context.
- Insomnia API client: Similar to Postman; check if it has its own MCP connector.
- Custom API documentation: Write plain-text API docs and share them with the AI agent.
Setup
Check these steps against the project’s own instructions before running anything.
Follow the project's README at https://github.com/postmanlabs/postman-mcp-server (opens external site) for installation and configuration steps, which likely involve npm setup and Claude Desktop or editor configuration.
Why this grade
Signal-based grade (3/7 points): listed in several sources, public source code. This reflects adoption and transparency, not a code review.
Popularity and upkeep
- GitHub stars
- 325
- Listing last refreshed
- 2026-10-29
These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.
Security reports
Reports from our research that name this package. We list them as published and do not rate them.
- Malicious code in @postman/postman-mcp-server (npm)OSV · 2025-11-24
Risks to watch for
- API credentials exposure: If your Postman environments contain API keys or tokens, the AI agent gains access to them and could leak them in responses or logs.
- Unintended API calls: An AI agent connected to this tool could make unexpected API requests to your services based on user prompts, changing or deleting data.
- Private API definitions leaked: OpenAPI specs and collection contents could be shared with third-party AI services if the agent sends them for processing.
- Malicious specs: If you import an OpenAPI spec created by an attacker, it could contain misleading descriptions that trick the AI into making harmful requests.
- Workspace scope unclear: The tool may access all collections and environments in your linked Postman account, not just the ones you intend to expose.
How to lower the risk
Least-privilege permissions
- Remove API keys and tokens from Postman environments; use separate read-only credentials for the AI agent.
- Limit the Postman workspaces or collections the server can access.
Network isolation
- Only enable this tool when you actively need AI help with APIs; disable it otherwise.
- Keep your Postman API key (if required) secure and rotate it regularly.
Monitoring
- Log and review what API calls the AI agent makes through this connector.
- Check Postman's audit logs for unexpected access to collections or environments.
Red flags to watch for
- AI responses that include your API keys, tokens, or other secrets.
- Unexpected API calls appearing in your service logs after using this tool.
- The tool requesting access to all workspaces or collections when you only intended one.
Questions
How do I install Postman MCP Server?
Run npx -y @postman/postman-mcp-server in your terminal, or add the server entry to your claude_desktop_config.json or .cursor/mcp.json as shown in the Setup section on this page. Full setup docs and environment variables are in github.com/postmanlabs/postman-mcp-server.
Are there security reports about Postman MCP Server?
1 report was found for this package in our research. Titles and dates (OSV) are listed in the Reports section above. Postman MCP Server currently holds Grade C (Moderate risk signals) based on public adoption and transparency signals. Key risk areas to watch include api credentials exposure, unintended api calls, private api definitions leaked.
Is Postman MCP Server actively maintained?
Postman MCP Server has 325 GitHub stars. Our directory data was last refreshed on 2026-10-29. Check recent commit activity, release tags, and open issues at github.com/postmanlabs/postman-mcp-server before pinning it in production.
What are alternatives to Postman MCP Server?
Notable alternatives to Postman MCP Server include Swagger UI + manual API docs (Share OpenAPI specs with AI through copy-paste instead of a live connector), AWS API Gateway documentation (Use API Gateway's built-in documentation features for AI context), Insomnia API client (Similar to Postman), Custom API documentation (Write plain-text API docs and share them with the AI agent). You can also compare Postman MCP Server side by side with other MCP servers in the Related tools section on this page.
README badge and team notes
Maintain or use Postman MCP Server? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.
GitHub README Markdown:
[](https://agentarmorhq.com/skills/postmanlabs-postman-mcp-server)HTML embed:
<a href="https://agentarmorhq.com/skills/postmanlabs-postman-mcp-server"><img src="https://agentarmorhq.com/api/badge/postmanlabs-postman-mcp-server" alt="AgentArmorHQ Risk Grade for Postman MCP Server" height="20" /></a>Terminal check:
curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "postmanlabs-postman-mcp-server"- Compare Postman MCP Server →
- Add to a team allowlist
- Claude and terminal guide →
- Download the PDF guide
Share with your security lead
Need sign-off to use postman-mcp-server? Copy this note for Slack, a ticket or a pull request.
### AgentArmorHQ Security Review Memo: postman-mcp-server
- **Listing URL:** https://agentarmorhq.com/skills/postmanlabs-postman-mcp-server
- **Type:** App connector
- **Risk Grade:** Grade C (Moderate risk signals)
- **Outside Security Advisories on File:** 1
- **Public Adoption:** 325 GitHub stars
#### Permission & Blast-Radius Signals
- **Local files:** No local folder access noted
- **Command execution:** No shell command runner noted
- **Network reach:** Connects to outside service API
- **Credentials:** Requires API key or token
- **Package source:** npm (@postman/postman-mcp-server)
#### Recommended Hardened Setup
- **Command:** `npx -y --ignore-scripts @postman/postman-mcp-server`
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.
_Based on public adoption and transparency signals as of Oct 27, 2026. Our opinion, not a code audit or security guarantee._Key facts
- Type
- App connector
- Publisher
- postmanlabs
- Source code
- github.com/postmanlabs/postman-mcp-server
- Install command
- npm install @postman/postman-mcp-server
- Est. context load
- ~700 tokens / turn (~4 tool schemas, 0.35% of 200k context)
- Popularity
- 325 GitHub stars
- Last updated
- 2026-10-29
- Last graded
- 2026-10-27
Community
Discussions for Postman MCP Server
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.
Check before you install, in Claude
Your assistant answers Block, Review or No known issues for any package before it installs it.
Get this check inside Claude