Manage the full API lifecycle from Claude Code: discover and explore Postman collections, send requests, run and debug test suites, sync specs with code, generate OpenAPI documentation, create mock servers, and audit security against OWASP Top 10.
Generate, improve, and publish API documentation from Postman collections.
Generate or update an OpenAPI spec from your codebase
Create Postman mock servers for frontend development. Generates missing examples, provides integration config.
Run Postman collection tests using the CLI
Discover APIs across your Postman workspaces. Ask natural language questions about available endpoints and capabilities.
Knowledge about AI agent API compatibility. Use when user asks about API readiness, agent compatibility, or wants to improve their API for AI consumption.
Generate or update an OpenAPI 3.0 spec from code. Use when the user wants to create, update, or write an OpenAPI/Swagger spec, API definition, or API documentation from their codebase.
Postman CLI reference and git sync file structure knowledge - provides context for CLI-based commands (send-request, generate-spec, run-collection, context)
Discover, explore, install, and generate client code from APIs in Postman. Use when the user wants to find or integrate an API, explore a collection, or generate or maintain API client code — required before generating code from any Postman collection, even one already explored via MCP tools.
Postman concepts and MCP tool guidance. Loaded when working with Postman MCP tools to make better decisions about tool selection and workarounds.
External network access
Connects to servers outside your machine
Uses power tools
Uses Bash, Write, or Edit tools
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
The Postman Plugin provides a single, simple install for Claude Code. It provides full API lifecycle management, and best practices when working with Postman APIs.
Clone the repo and load it as a local plugin:
git clone https://github.com/Postman-Devrel/postman-claude-code-plugin.git
Then start Claude Code with the plugin loaded:
cd your-api-project/
claude --plugin-dir /path/to/postman-claude-code-plugin
claude --plugin-dir /path/to/postman-claude-code-plugin
/postman:setup
export POSTMAN_API_KEY=PMAK-your-key-here
If you use an API key, add it to your shell profile (~/.zshrc or ~/.bashrc) to persist across sessions. Get one at go.postman.co/settings/me/api-keys.
That's it. The plugin auto-configures the Postman MCP Server, verifies your connection, and lists your workspaces. You're ready to go.
| Command | What It Does |
|---|---|
/postman:setup | Configure API key, verify connection, select workspace |
/postman:sync | Create or update Postman collections from OpenAPI specs |
/postman:search | Find APIs across your org's private network, your workspaces and the public Postman network |
/postman:context | Fetch real API definitions, generate and maintain typed client code |
/postman:test | Run collection tests, diagnose failures, suggest fixes |
/postman:mock | Create mock servers for frontend development |
/postman:docs | Generate, improve, and publish API documentation |
/postman:security | Security audit against OWASP API Top 10 |
"Sync my OpenAPI spec with Postman"
→ Detects local spec, creates/updates collection, sets up environment
"Generate a TypeScript client for the payments API"
→ Reads your Postman collection, detects project language, writes typed code
"Is there an endpoint that returns user emails?"
→ Searches private collections, drills into endpoint details, shows response shapes
"Run the tests for my User API collection"
→ Executes collection, parses results, diagnoses failures, suggests code fixes
"Create a mock for frontend development"
→ Generates missing examples, creates mock, provides integration config
"Run a security audit on my API"
→ 20+ checks including OWASP Top 10, severity scoring, remediation guidance
"Is my API ready for AI agents?"
→ 48 checks across 8 pillars, scored 0-100, prioritized fix recommendations
You don't need to remember command names. Claude matches your intent to the right command or skill natively:
/postman:sync/postman:securityThe built-in readiness analyzer evaluates APIs for AI agent compatibility across 8 pillars:
| Pillar | What It Checks |
|---|---|
| Metadata | operationIds, summaries, descriptions, tags |
| Errors | Error schemas, codes, retry guidance |
| Introspection | Parameter types, required fields, examples |
| Naming | Consistent casing, RESTful paths |
| Predictability | Response schemas, pagination, date formats |
| Documentation | Auth docs, rate limits |
| Performance | Rate limit headers, caching, bulk endpoints |
| Discoverability | OpenAPI version, server URLs |
70%+ with no critical failures = Agent-Ready.
/postman:setup, or set a POSTMAN_API_KEY environment variablenpx claudepluginhub anthropics/claude-plugins-official --plugin postmanAutomated API endpoint testing with request generation, validation, and comprehensive test coverage
Use this agent for comprehensive API testing including performance testing, load testing, and contract testing. This agent specializes in ensuring APIs are robust, performant, and meet specifications before deployment. Examples:\n\n<example>\nContext: Testing API performance under load
Use this agent for comprehensive API testing including performance testing, load testing, and contract testing. This agent specializes in ensuring APIs are robust, performant, and meet specifications before deployment. Examples:\n\n<example>\nContext: Testing API performance under load
API design, documentation, and testing with OpenAPI spec generation
API integration and testing - REST endpoints, client generation, contract testing
Connector - Production-ready API integration specialist. Orchestrates 10 agents to generate typed clients, auth flows, error handling, rate limiting, and mock servers from OpenAPI/GraphQL specs. Delivers enterprise-grade API integrations, not basic fetch wrappers.