Connect your AI to your APIs on Postman
SaferSkills independently audited Postman Mcp Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
The Postman MCP Server connects Postman to AI tools, giving AI agents and assistants the ability to access workspaces, manage collections and environments, evaluate APIs, and automate workflows through natural language interactions. Learn more on the Postman MCP Server product page.
Postman also offers the server as an npm package.
The Postman MCP Server collection is the quickest way to explore, test, and connect to the Postman MCP Server. Use it to:
For the best developer experience and fastest setup, use OAuth on the remote server (https://mcp.postman.com). OAuth is fully compliant with the MCP Authorization specification and requires no manual API key configuration.
The EU remote server and the local server support only Postman API key authentication.
Remote (any OAuth-compatible MCP host):
Add this URL to your MCP host's configuration:
https://mcp.postman.com/minimalChange /minimal to /code or /mcp for Code or Full mode. For EU or API key auth, pass Authorization: Bearer <POSTMAN_API_KEY> as a header.
Local:
npx @postman/postman-mcp-serverAdd --code or --full for Code or Full mode. Set POSTMAN_API_KEY as an environment variable.
For IDE-specific setup instructions, see the table below. For more information, see the Postman MCP Server docs.
| Agent / IDE | Remote | Local |
|---|---|---|
| Claude Code | Docs | Docs |
| Claude Desktop | — | Docs |
| Cursor | Docs | Docs |
| VS Code | Docs | Docs |
| Codex | Docs | Docs |
| Windsurf | Docs | Docs |
| Antigravity | Docs | Docs |
| GitHub Copilot CLI | Docs | Docs |
| Gemini CLI | Docs | Docs |
| Kiro | Docs | Docs |
| Docker | — | Docs |
The Postman MCP Server supports the EU region for remote and local servers:
https://mcp.eu.postman.com/mcp (Full), https://mcp.eu.postman.com/code, and https://mcp.eu.postman.com/minimal.--region eu flag, or set the POSTMAN_API_BASE_URL environment variable directly.For Docker setup and installation, see DOCKER.md.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.