
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
postman-mcp-server
Advanced tools
A Model Context Protocol (MCP) server for Postman API integration, providing tools for workspace, collection, request, environment, folder, and mock server management with AI-powered features
Transform your AI conversations into powerful API workflows with seamless Postman integration
Stop switching between your AI assistant and Postman! This Model Context Protocol (MCP) server brings the full power of Postman directly into your AI conversations with Cline, Claude Desktop, Cursor, and other MCP-compatible clients.
One command. Infinite possibilities. Connect your AI assistant directly to Postman and unlock:
โจ Instant API Management - Create, update, and organize API collections without leaving your AI conversation
๐ Real-time Sync - Changes made through AI are immediately available in Postman
๐ฏ Context-Aware Assistance - Your AI understands your entire API ecosystem
๐ Accelerated Development - Build and test APIs 10x faster with AI-powered workflows
๐ฅ Seamless Team Integration - AI-generated APIs automatically sync with your team's Postman workspace
npm install -g postman-mcp-server
Add to your Cline MCP settings:
{
"mcpServers": {
"postman": {
"command": "postman-mcp-server",
"env": {
"POSTMAN_API_KEY": "your-postman-api-key-here"
}
}
}
}
Add to your configuration file:
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%/Claude/claude_desktop_config.json
{
"mcpServers": {
"postman": {
"command": "postman-mcp-server",
"env": {
"POSTMAN_API_KEY": "your-postman-api-key-here"
}
}
}
}
Add to your Cursor MCP configuration:
{
"mcpServers": {
"postman": {
"command": "postman-mcp-server",
"env": {
"POSTMAN_API_KEY": "your-postman-api-key-here"
}
}
}
}
Restart your AI agent and start with:
"Show me all my Postman workspaces and help me create a new API collection for my e-commerce project"
You: "I'm building a social media app. Create a complete API collection with user management, posts, and comments."
AI: *Creates workspace, sets up collections with proper folder structure, adds CRUD operations for users/posts/comments, configures authentication, and sets up test environments*
You: "Convert this OpenAPI spec into a Postman collection and add realistic test data."
AI: *Imports spec, creates organized collection, generates sample requests with proper headers and realistic JSON payloads*
You: "Set up a development environment for our new team member with all our microservice endpoints."
AI: *Creates workspace, imports all collections, sets up environment variables, organizes by service, adds documentation*
You: "Add comprehensive tests to all endpoints in my user management collection."
AI: *Adds status code checks, response validation, authentication tests, and error handling to every request*
Found a security vulnerability? Please see our Security Policy for responsible disclosure guidelines.
# Recommended: Use environment variables for API keys
export POSTMAN_API_KEY="your-secure-api-key"
# Never commit API keys to version control
echo "POSTMAN_API_KEY=*" >> .gitignore
export POSTMAN_API_KEY="your-postman-api-key-here"
{
"mcpServers": {
"postman": {
"command": "node",
"args": ["$(npm root -g)/postman-mcp-server/build/index.js"],
"env": {
"POSTMAN_API_KEY": "your-postman-api-key-here"
}
}
}
}
Test your installation:
# Check if the command is available
postman-mcp-server --help
# Verify global installation
npm list -g postman-mcp-server
list_workspaces
Get all your Postman workspaces instantly
{ "name": "list_workspaces", "arguments": {} }
get_workspace
Detailed workspace information and metadata
{ "name": "get_workspace", "arguments": { "workspaceId": "workspace-id" } }
create_workspace
Create new team or personal workspaces
{
"name": "create_workspace",
"arguments": {
"name": "My New Workspace",
"type": "team",
"description": "Workspace for our new project"
}
}
update_workspace
Modify workspace settings and descriptions
{
"name": "update_workspace",
"arguments": {
"workspaceId": "workspace-id",
"name": "Updated Name",
"description": "New description"
}
}
delete_workspace
Remove workspaces (use with caution!)
{ "name": "delete_workspace", "arguments": { "workspaceId": "workspace-id" } }
list_collections
Browse all collections or filter by workspace
{ "name": "list_collections", "arguments": { "workspaceId": "optional-workspace-id" } }
get_collection
Complete collection structure and metadata
{ "name": "get_collection", "arguments": { "collectionId": "collection-id" } }
create_collection
Build new API collections
{
"name": "create_collection",
"arguments": {
"name": "User Management API",
"description": "Complete user CRUD operations",
"workspaceId": "workspace-id"
}
}
update_collection
Modify collection metadata and settings
{
"name": "update_collection",
"arguments": {
"collectionId": "collection-id",
"name": "Updated API Collection",
"description": "Enhanced description"
}
}
delete_collection
Remove collections permanently
{ "name": "delete_collection", "arguments": { "collectionId": "collection-id" } }
list_environments
View all environments or filter by workspace
{ "name": "list_environments", "arguments": { "workspaceId": "optional-workspace-id" } }
get_environment
Environment details with all variables
{ "name": "get_environment", "arguments": { "environmentId": "environment-id" } }
create_environment
Set up new environments with variables
{
"name": "create_environment",
"arguments": {
"name": "Production",
"values": [
{ "key": "baseUrl", "value": "https://api.production.com", "type": "default" },
{ "key": "apiKey", "value": "secret-key", "type": "secret" }
],
"workspaceId": "workspace-id"
}
}
update_environment
Modify environment variables and settings
{
"name": "update_environment",
"arguments": {
"environmentId": "environment-id",
"name": "Updated Environment",
"values": [
{ "key": "newVariable", "value": "newValue", "type": "default" }
]
}
}
delete_environment
Remove environments
{ "name": "delete_environment", "arguments": { "environmentId": "environment-id" } }
create_request
Create new API requests with complete configuration
{
"name": "create_request",
"arguments": {
"collectionId": "collection-id",
"name": "Create User",
"url": "https://api.example.com/users",
"method": "POST",
"description": "Create a new user account",
"headers": [
{ "key": "Content-Type", "value": "application/json" },
{ "key": "Authorization", "value": "Bearer {{token}}" }
],
"body": {
"mode": "raw",
"raw": "{\"name\": \"John Doe\", \"email\": \"john@example.com\"}"
},
"folderId": "optional-folder-id"
}
}
get_request
Retrieve detailed request information
{
"name": "get_request",
"arguments": {
"collectionId": "collection-id",
"requestId": "request-id"
}
}
update_request
Modify existing requests
{
"name": "update_request",
"arguments": {
"collectionId": "collection-id",
"requestId": "request-id",
"name": "Updated Request Name",
"url": "https://api.example.com/v2/users",
"method": "PUT",
"headers": [
{ "key": "Content-Type", "value": "application/json" }
]
}
}
delete_request
Remove requests from collections
{
"name": "delete_request",
"arguments": {
"collectionId": "collection-id",
"requestId": "request-id"
}
}
create_folder
Organize requests with folder structures
{
"name": "create_folder",
"arguments": {
"collectionId": "collection-id",
"name": "User Management",
"description": "All user-related API endpoints",
"parentFolderId": "optional-parent-folder-id"
}
}
update_folder
Modify folder properties
{
"name": "update_folder",
"arguments": {
"collectionId": "collection-id",
"folderId": "folder-id",
"name": "Updated Folder Name",
"description": "Updated description"
}
}
delete_folder
Remove folders and their contents
{
"name": "delete_folder",
"arguments": {
"collectionId": "collection-id",
"folderId": "folder-id"
}
}
move_request
Reorganize requests between folders
{
"name": "move_request",
"arguments": {
"collectionId": "collection-id",
"requestId": "request-id",
"targetFolderId": "target-folder-id"
}
}
list_mock_servers
Get all your mock servers instantly
{ "name": "list_mock_servers", "arguments": {} }
get_mock_server
Detailed mock server information and configuration
{ "name": "get_mock_server", "arguments": { "mockId": "mock-server-id" } }
create_mock_server
Create new mock servers from collections
{
"name": "create_mock_server",
"arguments": {
"name": "User API Mock",
"collectionId": "collection-id",
"environmentId": "environment-id",
"private": false,
"config": {
"headers": [
{ "key": "Content-Type", "value": "application/json" }
],
"matchBody": true,
"matchQueryParams": true,
"delay": {
"type": "fixed",
"preset": "medium"
}
}
}
}
create_ai_mock_server
Create AI-powered mock servers with intelligent data generation
{
"name": "create_ai_mock_server",
"arguments": {
"name": "Smart User API Mock",
"collectionId": "collection-id",
"generateRealisticData": true,
"includeErrorResponses": true,
"responseDelay": "medium",
"private": false
}
}
update_mock_server
Modify mock server settings and configuration
{
"name": "update_mock_server",
"arguments": {
"mockId": "mock-server-id",
"name": "Updated Mock Server",
"private": true,
"config": {
"matchBody": false,
"delay": {
"type": "random",
"preset": "low"
}
}
}
}
delete_mock_server
Remove mock servers
{ "name": "delete_mock_server", "arguments": { "mockId": "mock-server-id" } }
get_mock_server_call_logs
View mock server usage and call history
{
"name": "get_mock_server_call_logs",
"arguments": {
"mockId": "mock-server-id",
"limit": 50
}
}
git clone https://github.com/ankit-roy-0602/postman-mcp-server.git
cd postman-mcp-server
npm install
npm run build
npm run build
- Build TypeScript codenpm run dev
- Development mode with watchnpm test
- Run comprehensive test suitenpm run lint
- Code quality checksnpm run format
- Code formattingWe welcome contributions! Whether it's:
See our Contributing Guide for details.
Transform hours of manual API work into seconds of AI conversation
AI understands your exact API structure and requirements
Seamless sync between AI workflows and team collaboration
Enterprise-grade error handling and security practices
From prototype to production, scales with your needs
MIT License - see LICENSE file for details.
Ready to revolutionize your API workflow?
npm install -g postman-mcp-server
โญ Star this repo if it helps you build better APIs faster!
[1.2.0] - 2025-01-08
list_mock_servers
- List all mock servers in your accountget_mock_server
- Get detailed mock server information and configurationcreate_mock_server
- Create new mock servers from collections with advanced configurationcreate_ai_mock_server
- AI-powered mock server creation with realistic data generation and error scenariosupdate_mock_server
- Update mock server settings and configurationdelete_mock_server
- Remove mock serversget_mock_server_call_logs
- View mock server usage and call historyFAQs
A Model Context Protocol (MCP) server for Postman API integration, providing tools for workspace, collection, request, environment, folder, and mock server management with AI-powered features
The npm package postman-mcp-server receives a total of 331 weekly downloads. As such, postman-mcp-server popularity was classified as not popular.
We found that postman-mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.ย It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socketโs new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.