Everything your team needs to work with APIs.
Sir, Post keeps your collections, environments and docs in one shared place, so everyone tests the same thing and sees changes the moment they happen.
One workspace, the whole team, live.
Invite teammates by email and give each one the right role. When someone saves a request, renames a folder or changes an environment, everyone sees it straight away.
Invite your team →Live updates for saves, renames, environments and roles See who is online in the workspace Owner, Admin, Editor and Viewer roles Viewers can send requests without changing anything A "newer version" banner instead of silent overwrites Email invites that work even before someone signs up
A request builder that stays out of your way.
Params, headers and every common body type, with a response viewer that shows pretty JSON, raw text, an HTML preview, headers and cookies.
Send your first request →GET, POST, PUT, PATCH, DELETE, HEAD and OPTIONS JSON, form-data, urlencoded, binary and GraphQL bodies History and a console for every send Quick "not saved" tabs for one-off calls Folders to keep big collections tidy Works on phones and tablets too
Dev, UAT and Live, one click apart.
Put base URLs and tokens in environments as {{variables}}. Each person can keep a private current value, and secret values stay encrypted and hidden from viewers.
Set up environments →Environments and Globals A private current value for each person Secrets encrypted at rest and masked in history Hover a {{variable}} to see its value Missing variables show up in red before you send Dynamic values like {{$guid}} and {{$timestamp}}
Every auth type, and payment signatures without scripts.
Choose from 12 auth types or set auth once on the collection. The Signature Builder signs requests on the server at the moment of sending, so the secret never reaches a teammate’s browser.
Use the Signature Builder →Bearer, Basic, API key, Digest and NTLM OAuth 2.0 with token fetch, and OAuth 1.0 AWS Signature v4 and JWT bearer Signature Builder: HMAC or hash, hex or Base64, to headers or query Templates for PhonePe X-VERIFY, body HMAC and timestamp signatures Preview the signature before you send
Scripts, a runner and a mock server.
Write pre-request and post-response scripts in JavaScript, check responses with pm.test, chain requests with variables, run whole collections with data files, and hand front-end developers a mock URL.
Write scripts and tests →Pre-request and post-response scripts on requests and collections pm.test and pm.expect with a Tests tab and a script console pm.environment.set feeds values to the next request Collection Runner with iterations, delay and CSV or JSON data Mock server that answers with your saved examples Scripts run in a sandbox without network access
Docs that stay in sync with the API.
Write Markdown docs next to each request, save real responses as examples, and publish a read-only link for partners. Credentials are hidden on the public page.
Publish API docs →Markdown docs for collections, folders and requests Saved response examples Code in cURL, JavaScript, Python and PHP Public read-only docs link that updates live Fork a collection, then update it from the original Secrets never travel with a fork or export
Bring your Postman work in minutes.
Import Postman collections and environments as they are, turn an OpenAPI or Swagger file into a collection, or paste a cURL command. Export back to Postman any time: your work is never locked in.
Import from Postman →Postman collections v2.0 and v2.1, with their scripts OpenAPI 3 and Swagger 2.0, JSON or YAML Postman environments and globals Export any collection as Postman v2.1 Full workspace backup and restore Up to 5,000 requests in one import
On the roadmap.
These are planned, not promised dates. Follow the changelog to see them land.