Postman

Postman Secret Scanner API

Operations for managing detected secrets and leaked credentials.

GitHub OpenAPI

Operations 9

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /secret-scanner/detected-secrets List secrets detected in team resources · Postman Get detected secrets #
Ask an LLM
“Have any API keys or tokens leaked into our collections or environments?”
“Can I list only unresolved detected secrets found since a certain date?”
Tell an agent
List all detected secrets across the team.
Show detected secrets with status {statuses} in workspaces {workspaceIds}.
GET /secret-scanner/detected-secrets/{secretId} Get a detected secret's details · Postman Get a detected secret #
Ask an LLM
“What type of secret was found and what is its resolution history?”
“Can I see the full record of one detected secret?”
Tell an agent
Get detected secret {secretId}.
Show the resolution history of detected secret {secretId}.
PUT /secret-scanner/detected-secrets/{secretId} Resolve a detected secret · Postman Resolve a detected secret #
Ask an LLM
“How do I mark a leaked key as revoked after I've rotated it?”
“Can I flag a detected secret as a false positive or accepted risk?”
Tell an agent
Resolve detected secret {secretId} as {resolution}.
Mark secret {secretId} with resolution {resolution}.
GET /secret-scanner/detected-secrets/{secretId}/locations List where a detected secret appears · Postman Get locations of a detected secret #
Ask an LLM
“In which collections and environments does a leaked secret appear?”
“How many places does one detected secret show up?”
Tell an agent
List the locations of detected secret {secretId}.
Show every place secret {secretId} was found.
GET /secret-scanner/secret-types List secret types the scanner detects · Postman Get supported secret types #
Ask an LLM
“What kinds of credentials can the secret scanner detect?”
“Is there a list of supported secret types with descriptions?”
Tell an agent
List the secret types the scanner supports.
Show the names and descriptions of detectable secret types.
POST /detected-secrets-queries Search secrets found by the Secret Scanner · Search detected secrets #
Ask an LLM
“Which leaked secrets has the Secret Scanner found across our workspaces?”
“Can I filter detected secrets by type, status or workspace?”
Tell an agent
List all secrets the Secret Scanner has detected.
Search detected secrets in workspaces {workspaceIds}.
PUT /detected-secrets/{secretId} Mark a detected secret as resolved · Update detected secret resolution status #
Ask an LLM
“How do I mark a detected secret as revoked or a false positive?”
“Can I change the resolution status of a leaked secret?”
Tell an agent
Set secret {secretId} in workspace {workspaceId} to {resolution}.
Resolve detected secret {secretId} in {workspaceId} as {resolution}.
GET /detected-secrets/{secretId}/locations Find where a detected secret appears · Get detected secrets locations #
Ask an LLM
“Where exactly was this secret found in the workspace?”
“Can I narrow a secret's locations to one resource type?”
Tell an agent
Show where secret {secretId} was found in workspace {workspaceId}.
List locations of secret {secretId} in {workspaceId} within {resourceType} resources.
GET /secret-types List secret types the scanner detects · Get secret types #
Ask an LLM
“What kinds of secrets can the Secret Scanner detect?”
“Where do I get secret type IDs to filter detected secrets?”
Tell an agent
Get the secret type metadata, with type IDs, from the Secret Scanner secret-types endpoint.
Show secret type IDs I can use in detected-secret searches.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/postman/refs/heads/main/openapi/postman-secret-scanner-api-openapi.yml

Schemas & Data

📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/postman/refs/heads/main/json-schema/postman-detected-secrets-queries-request-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/postman/refs/heads/main/json-schema/postman-update-secret-resolutions-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/postman/refs/heads/main/json-schema/postman-detected-secret-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/postman/refs/heads/main/json-schema/postman-secret-location-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/postman/refs/heads/main/json-schema/postman-update-secret-resolutions-request-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/postman/refs/heads/main/json-schema/postman-detected-secret-detail-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/postman:postman-secret-scanner-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

postman-secret-scanner-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Postman APIs API Comments Secret Scanner API
  description: 'The Postman APIs API enables you to manage your API definitions in Postman''s

    API Builder. You can create APIs, manage versions, add schemas (OpenAPI,

    GraphQL, etc.), and link collections, environments, mock servers, monitors,

    and documentation to your API definitions.


    ## Authentication

    All requests require an API key passed in the `x-api-key` header.


    ## Rate Limits

    Standard Postman API rate limits apply.'
  version: 1.0.0
  contact:
    name: Postman Developer Support
    url: https://learning.postman.com/docs/developer/postman-api/intro-api/
    email: help@postman.com
  license:
    name: Postman Terms of Service
    url: https://www.postman.com/legal/terms/
servers:
- url: https://api.getpostman.com
  description: Postman Production API Server
security:
- apiKeyAuth: []
tags:


# --- truncated at 32 KB (46 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/postman/refs/heads/main/openapi/postman-secret-scanner-api-openapi.yml