A basic MCP server to operate on the Postman API.
{
"mcpServers": {
"postman-code": {
"env": {},
"args": [
"mcp-remote",
"https://mcp.postman.com/code"
],
"disabled": false,
"disabledTools": []
},
"postman-full": {
"env": {},
"args": [
"mcp-remote",
"https://mcp.postman.com/mcp"
],
"disabled": false,
"disabledTools": []
},
"postman-minimal": {
"env": {},
"args": [
"mcp-remote",
"https://mcp.postman.com/minimal"
],
"disabled": false,
"disabledTools": []
}
}
}A basic MCP server to operate on the Postman API.
Is it safe?
1 open CVE. Verify on OSV.dev →
No authentication — any process on your machine can connect.
License not specified.
Is it maintained?
Last commit 4 days ago. 209 stars. 2,921 weekly downloads.
Will it work with my client?
Transport: stdio, sse, http. Works with Claude Desktop, Cursor, Claude Code, and most MCP clients.
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y '@postman/postman-mcp-server' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
1 open vulnerability.
This server is missing a description. Tools and install config are also missing.If you've used it, help the community.
Add informationMAL-2025-190909OpenMalicious code in @postman/postman-mcp-server (npm)
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (c7c276129c0d99cb4f8aa63e9f3911b1f38145837396ac3b00ba48533a6050b8) The package @postman/postman-mcp-server was found to contain malicious code. ## Source: google-open-source-security (0c419e14201055a516cc9ef8dfe3f0ecc29ae793e9b304eeb4da6589465ab1d4) This package was compromised by the Sha1-Hulud: The Second Coming NPM worm. The malicious payload steals tokens and credentials and publishes them to GitHub. T
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
MCP Security Weekly
Get CVE alerts and security updates for com.postman/postman-mcp-server and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.