From API Keys to Access Control: Rethinking Secrets Management

For as long as software has called APIs, we’ve solved the same problem the same way. The code needs a secret (a…

What Passport Found in 3 Weeks of AI Agent Traffic

I ran Postman Passport over an AI harness build for three weeks. It caught 33 credential-bearing requests to 18 hosts. Here’s what static scanning missed.

How Postman Passport keeps API secrets inside your network

Postman Passport grants API access using credential references, keeping the real secret inside your network. Here’s how the architecture works.

What’s new in Postman: Secrets management built in

Postman now detects and vaults API secrets automatically at runtime. Learn how Local Secrets Protection, Shared Vault, and Secrets Resolution keep your credentials safe.