Back to Browse

Postman MCP Server

Developer ToolsUse Caution4.5MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

A basic MCP server to operate on the Postman API.

About

A basic MCP server to operate on the Postman API.

Remote endpoints: streamable-http: https://mcp.postman.com/mcp streamable-http: https://mcp.postman.com/minimal streamable-http: https://mcp.eu.postman.com/mcp streamable-http: https://mcp.eu.postman.com/minimal

Security Report

4.5
Use Caution4.5High Risk

The Postman MCP Server is a well-maintained, officially published tool from Postman, Inc. with appropriate authentication mechanisms (OAuth and API keys), reasonable permission scope aligned with its purpose, and clean dependency management. Code quality is good with proper input validation via Zod schemas. Minor findings include broad exception handling and standard logging practices that do not significantly impact security. Supply chain analysis found 3 known vulnerabilities in dependencies (1 critical, 0 high severity). Package verification found 1 issue.

4 files analyzed · 7 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

What You'll Need

Set these up before or after installing:

A valid Postman API key.Required

Environment variable: POSTMAN_API_KEY

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

Postman MCP Server

The Postman MCP Server implements the Model Context Protocol (MCP) to connect AI agents and coding assistants — including Claude Code, Cursor, VS Code Copilot, GitHub Copilot CLI, and Gemini CLI — directly to your Postman workspaces, collections, specifications, and environments.

Postman also offers the server as an npm package.

For the full installation guide with agent-specific setup, see Postman's MCP Server product page.


Postman MCP Server collection

The Postman MCP Server collection is the quickest way to explore, test, and connect to the Postman MCP Server. Use it to:

  • Browse the complete list of available tools across all configurations.
  • Connect to and test the remote server — Full and Minimal.
  • Connect to and test the local server.

Tool configurations

  • Minimal — (Default) Only includes essential tools for basic Postman operations. Ideal for users who want to modify a single Postman element, such as collections, workspaces, or environments.
  • Code — Includes tools to generate high-quality, well-organized client code from public and internal API definitions. Ideal for users who need to consume APIs or get API context to their agents.
  • Full — Includes all available Postman API tools (100+ tools). Ideal for users who engage in advanced collaboration and Postman's Enterprise features.
  • Learn — Searches Postman Docs for guides, tutorials, and reference content. Ideal for agents who need to discover Postman features, look up API concepts, or find learning resources.

Authentication

For the best developer experience and fastest setup, use OAuth on the remote server (https://mcp.postman.com). OAuth is fully compliant with the MCP Authorization specification and requires no manual API key configuration.

The EU remote server and the local server support only Postman API key authentication.


Quick start

Remote (any OAuth-compatible MCP host):

Add this URL to your MCP host's configuration:

https://mcp.postman.com/minimal

Change /minimal to /code or /mcp for Code or Full mode. For EU or API key auth, pass Authorization: Bearer <POSTMAN_API_KEY> as a header.

Local:

npx @postman/postman-mcp-server

Add --code or --full for Code or Full mode. Set POSTMAN_API_KEY as an environment variable.

For IDE-specific setup instructions, see the following table. For more information, see the Postman MCP Server docs.


Supported agents and IDEs

Agent / IDERemoteLocal
Claude CodeDocsDocs
Claude DesktopDocsDocs
CursorDocsDocs
VS CodeDocsDocs
CodexDocsDocs
Antigravity CLIDocsDocs
GitHub Copilot CLIDocsDocs
KiroDocsDocs
DockerDocs

EU support

The Postman MCP Server supports the EU region for remote and local servers:

  • For streamable HTTP, the remote server is available at https://mcp.eu.postman.com/mcp (Full), https://mcp.eu.postman.com/code, and https://mcp.eu.postman.com/minimal.
  • For the STDIO public package, use the --region eu flag, or set the POSTMAN_API_BASE_URL environment variable directly.
  • OAuth isn't supported for the EU server. The EU remote server only supports API key authentication.

Use cases

  • API Testing — Continuously test your API using your Postman collection. Use the local server to test local APIs, as the remote server won't have network access to your workstation.
  • Code synchronization — Keep your code in sync with your Postman Collections and specs.
  • Collection management — Create and tag collections, update documentation, add comments, or perform actions across multiple collections without leaving your editor.
  • Workspace and environment management — Create workspaces and environments, plus manage environment variables.
  • Automatic spec creation — Create specs from your code and use them to generate collections.
  • Client code generation — Generate production-ready client code that consumes APIs following best practices and project conventions.

Docker

For Docker setup and installation, see DOCKER.md.


Contributing

Bug reports, tool requests, and documentation fixes are all welcome — see CONTRIBUTING.md.

The MCP tool definitions and the server implementation here are synced from Postman's internal source of truth, so changes to files under src/ can't be merged in this repository — but issues are how those changes get made, and we credit contributions that ship. Documentation and repository tooling accept pull requests directly.

Found a security issue? See SECURITY.md — please don't open a public issue.


Questions and support


Keywords

Model Context Protocol · MCP Server · Postman · AI Agents · Claude Code · Cursor · VS Code · Specifications · REST API · API Testing · TypeScript · OpenAPI

Reviews

No reviews yet

Be the first to review this server!