Is Postman MCP Server safe?

Yes, with the usual care.

A86/100grade A

Passed every safety check we run. Maintained, authenticated, reachable, clean scan.

No critical or high findings in the latest scan.

Public scan report

scanner v0.1.9 · 2026-09-19 · same rubric, same numbers if you re-run it

2 medium

Code scan195 source files scanned15/25
Live reliabilityremote reachable in 137ms (auth required)20/20
–Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
Auth qualityOAuth resource metadata advertised on 40115/15
Maintenancelast push 2 days ago15/15
Maintainer identitynamespace and repository owner differ; GitHub account older than a year; website matches verified namespace8/10

mediumnpm install lifecycle script presentinstall.script

package.json: …roduct/mcp-server/", "scripts": { "preinstall": "npx only-allow pnpm", "start:stdio…

Overall 86/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON