Give your AI agents trusted access to the full Postman platform.
MCPpedia last refreshed this data
com.postman/postman-mcp-server is an MCP server that give your AI agents trusted access to the full Postman platform. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 94/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"postman-code": {
"env": {},
"args": [
"mcp-remote",
"https://mcp.postman.com/code"
],
"disabled": false,
"disabledTools": []
},
"postman-full": {
"env": {},
"args": [
"mcp-remote",
"https://mcp.postman.com/mcp"
],
"disabled": false,
"disabledTools": []
},
"postman-minimal": {
"env": {},
"args": [
"mcp-remote",
"https://mcp.postman.com/minimal"
],
"disabled": false,
"disabledTools": []
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Give your AI agents trusted access to the full Postman platform.
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
npx -y '@postman/postman-mcp-server' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories - click any category to see the underlying evidence.
Malicious code in @postman/postman-mcp-server (npm)
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (c7c276129c0d99cb4f8aa63e9f3911b1f38145837396ac3b00ba48533a6050b8) The package @postman/postman-mcp-server was found to contain malicious code. ## Source: google-open-source-security (0c419e14201055a516cc9ef8dfe3f0ecc29ae793e9b304eeb4da6589465ab1d4) This package was compromised by the Sha1-Hulud: The Second Coming NPM worm. The malicious payload steals tokens and credentials and publishes them to GitHub. T
Click any tool to inspect its schema.
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in developer-tools
Manage Supabase projects — databases, auth, storage, and edge functions
MCP server for using the GitLab API
XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.
MCP server for enterprise local codebase indexing, semantic search, and code dependency graphs.
MCP Security Weekly
Get CVE alerts and security updates for com.postman/postman-mcp-server and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.