Postman
by Postman
Manage Postman collections, specs, environments and mocks from your AI assistant — and run a collection against live APIs. 42 tools on the default minimal endpoint, read from Postman's own open-source repository.
Verified connector
Listed by Anthropic as a partner connector in its Connectors Directory.
Connection checked by Agentman on .
Anthropic states this reflects the level of review a connector received, not a security audit.
Connect Postman via MCP
https://mcp.postman.com/minimalWorks in any MCP-compatible client. In Agentman Studio it is one click — no config file to edit.
Postman Tools & Capabilities (42)
Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.
Limits
- The directory's tool list does not describe this endpoint. Twenty-four of the forty-two names Anthropic publishes exist in no Postman tool set, and nine advertised
delete*tools are absent from the endpoint the directory links to. Read the mode you actually connected. runCollectionis an egress path with noopenWorldHint. It executes stored requests against arbitrary hosts and can substitute an environment's secrets into them. Treat it as you would a general HTTP client, not as a Postman-management call.- Environment variable values are readable in plain text.
getEnvironmentreturns them unredacted. Postman's API restricts modification to shared variables, but reading is unrestricted. putCollectionandputEnvironmentreplace rather than patch. Postman's own description warns that aputCollectioncall omitting item ID values removes existing items and recreates them with new IDs. Neither tool is annotated destructive.publishMockmakes a mock server public. Postman's description states that publishing sets the mock's access control configuration to public.- No OAuth scopes are offered.
scopes_supportedis absent from both metadata documents, so the grant cannot be narrowed at the consent screen. - Size ceilings apply. Postman documents a 100 MB maximum for a collection accepted by
putCollection, 30 MB for an environment body onputEnvironment, and 10 MB per specification file oncreateSpecFile. - Enterprise gate on one tool.
getTaggedEntitiesreturns 404 on Free, Basic and Professional accounts. - EU region loses OAuth. Postman documents API key authentication only for
mcp.eu.postman.com. - Telemetry is on by default remotely. Postman states that remote servers gather anonymous telemetry, and that the local server has it off unless you opt in.
- The remote server cannot reach your machine. Postman recommends the local server for testing local or internal APIs.
- We did not read a live
tools/list. The endpoint is OAuth-gated and we hold no Postman credential. Tool names, descriptions and annotations here come from Postman's published source at tag v2.12.0, which the server's ownregisterToolcalls pass through unchanged.
Frequently asked questions
Which tools does the Postman MCP server actually expose?
The default endpoint exposes 42 tools covering collections, specifications, environments, workspaces and mocks. Postman ships four tool configurations from one codebase — minimal, code, full and learn — selected by the URL path or a CLI flag. Anthropic's directory endpoint points at the minimal path, and Postman's source lists exactly 42 tool names in that set.
Can the Postman MCP server send HTTP requests to other websites?
Yes. The runCollection tool executes every request stored in a Postman collection using Newman, Postman's collection runner, so it reaches whatever hosts those requests target. That makes the connector an outbound egress path, not only a Postman-management tool. The tool carries no openWorldHint annotation in Postman's source, which understates that reach.
Can an AI agent read my Postman environment variable values?
Yes. getEnvironment returns the Postman API's environment response unchanged, and that payload carries variable keys alongside their values. Postman environments routinely hold API keys, bearer tokens and database passwords, so connecting this server exposes those secrets to your assistant. Postman's own documentation tells you to keep such keys out of shared files.
Does the Postman MCP server delete collections or workspaces?
Not on the default minimal endpoint. None of its 42 tools is a delete operation, and every one carries destructiveHint set to false in Postman's source. The full endpoint at mcp.postman.com/mcp is different: it exposes 135 tools, of which 23 are annotated destructive, including deleteCollection, deleteWorkspace and deleteEnvironment.
Does the Postman MCP server need a paid plan or an API key?
No paid plan is required, and the US remote server needs no API key. Postman documents OAuth with Dynamic Client Registration and PKCE on the US endpoint, so your client handles sign-in. The EU server and the local server accept only a Postman API key. One tool, getTaggedEntities, requires an Enterprise plan and returns 404 otherwise.
Can you connect the Postman MCP server with read-only access?
Not through OAuth scopes. Postman's RFC 9728 resource descriptor and its authorization server metadata both omit scopes_supported entirely, so no consent screen can narrow the grant. The practical read-only lever is the endpoint: the code configuration at mcp.postman.com/code exposes 23 tools that are all annotated read-only.
Why can't the remote Postman MCP server test my local API?
Postman hosts the remote server on its own infrastructure, so it has no network route to your workstation. Postman's repository documentation states this directly and recommends the local server for testing local APIs. Run the npm package @postman/postman-mcp-server on your own machine with a Postman API key when the target API is not publicly reachable.
Sources
- Postman MCP server source,
src/enabledResources.tsandsrc/tools/at tag v2.12.0, commit983f2252(retrieved 2026-08-21) · retrieved 2026-08-21 - Postman MCP server overview (retrieved 2026-08-21) · retrieved 2026-08-21
- Set up a remote Postman MCP server (retrieved 2026-08-21) · retrieved 2026-08-21
- Tips and best practices for the Postman MCP server (retrieved 2026-08-21) · retrieved 2026-08-21
- npm registry metadata for
@postman/postman-mcp-serverv2.12.0 (retrieved 2026-08-21) · retrieved 2026-08-21 - Live OAuth posture check: anonymous
initializereturned 401 with an authentication challenge; RFC 9728 metadata atmcp.postman.com/.well-known/oauth-protected-resource/minimal(2026-08-21) · retrieved 2026-08-21 - Anthropic Connectors Directory entry (snapshot dated 2026-08-16) · retrieved 2026-08-16
learning.postman.com/robots.txtpermits AI crawlers explicitly and carries noContent-Signalrestriction (retrieved 2026-08-21) · retrieved 2026-08-21- Postman support — · Privacy
Use in Agentman
Connect once and your agents call these tools on their own — on a schedule, in a workflow, with nobody at the keyboard.
Open in Agentman StudioServer Info
- Category
- Developer Tools
- Developer
- Postman
- Tools
- 42
- Domain
- mcp.postman.com
Using Claude Desktop or another MCP client? Setup docs — the connection URL above works anywhere.