What it can do: Postman MCP Server

MCP server · postman.com

What Postman MCP Server declares, asks for and runs, according to the marketplaces we read. Runs on a remote server: your AI tool connects to it over the network. mcp.postman.com/mcp. Tools it declares: 42. Environment variables it asks for: 1, secrets among them: 1. As of our marketplace pass on 2026-10-11.

This is not a security audit. We list what the marketplaces publish about this plugin: what it declares, what it asks for and what it runs. We do not run or inspect its code, and a verified mark is the marketplace's statement, not ours.

Where it runs

Runs on a remote server: your AI tool connects to it over the network. mcp.postman.com/mcpTransport: Streamable HTTP. As declared on: Official MCP Registry.
Runs on your machine, in a container started from this image: mcp/postmanAs declared on: Docker MCP Catalog.

What it declares

Tools it declares: 42. As declared on: Docker MCP Catalog.

createCollection
createCollectionRequest
createCollectionResponse
createEnvironment
createMock
createSpec
createSpecFile
createWorkspace
duplicateCollection
generateCollection
generateSpecFromCollection
getAllSpecs

Show the remaining 30

getAuthenticatedUser
getCollection
getCollections
getDuplicateCollectionTaskStatus
getEnabledTools
getEnvironment
getEnvironments
getGeneratedCollectionSpecs
getMock
getMocks
getSpec
getSpecCollections
getSpecDefinition
getSpecFile
getSpecFiles
getTaggedEntities
getWorkspace
getWorkspaces
publishMock
putCollection
putEnvironment
runCollection
searchPostmanElements
syncCollectionWithSpec
syncSpecWithCollection
updateCollectionRequest
updateMock
updateSpecFile
updateSpecProperties
updateWorkspace

Prompts and resources: the marketplaces we read do not publish them.

What it asks for

Environment variables it asks for: 1, secrets among them: 1. As declared on: Official MCP Registry, Docker MCP Catalog.

POSTMAN_API_KEY secret required

Names only: we keep no values, examples or descriptions of these variables. OAuth scopes and install-time settings are not published by the marketplaces we read.

What it runs besides MCP

None of the marketplaces we read lists hooks, commands, agents or language servers for it.

Who answers for it

postman.com

No marketplace we read marks it or its publisher as verified.
License: Apache-2.0.

How it has changed

Its tools, settings, hooks and composition have not changed since we started watching it.

In context

Median number of secrets an MCP server asks for on the marketplaces we read: 0.0. This one asks for: 1.
Share of MCP servers that run on a remote server: 63%.

Where it is published and how its figures have moved

Data comes from the Official MCP Registry (registry.modelcontextprotocol.io), CC0 1.0. Data comes from the Docker MCP Catalog (desktop.docker.com/mcp/catalog) and Docker Hub. Figures come from our own regular passes over the marketplaces, last read on 2026-10-11. We publish no contact details for plugin publishers.