@postman/postman-mcp-server 2.7.0 → 2.7.1

package/dist/src/tools/createCollectionResponse.js

@@ -5,11 +5,406 @@ export const method = 'createCollectionResponse';
 export const description = 'Creates a request response in a collection. For a complete list of request body properties, refer to the **Response** entry in the [Postman Collection Format documentation](https://schema.postman.com/collection/json/v2.1.0/draft-07/docs/index.html).\n\n**Note:**\n\nIt is recommended that you pass the \\`name\\` property in the request body. If you do not, the system uses a null value. As a result, this creates a response with a blank name.\n';
 export const parameters = z.object({
     collectionId: z.string().describe("The collection's ID."),
-    requestId: z.string().describe("The parent request's ID."),
+    request: z.string().describe("The parent request's ID."),
     name: z
         .string()
         .describe("The response's name. It is recommended that you pass the `name` property in the request body. If you do not, the system uses a null value. As a result, this creates a response with a blank name.")
         .optional(),
+    originalRequest: z
+        .object({
+        url: z
+            .union([
+            z.string().nullable().describe("The request's raw URL."),
+            z.object({
+                raw: z.string().describe("The request's raw URL.").optional(),
+                protocol: z.string().describe('The request protocol.').optional(),
+                host: z.array(z.string().nullable()).describe("The host's URL.").optional(),
+                path: z.array(z.string()).describe("A list of the URL's path components.").optional(),
+                port: z
+                    .string()
+                    .describe("The URL's port number. An empty value indicates port `80` (http) or `443` (https).")
+                    .optional(),
+                query: z
+                    .array(z.object({
+                    key: z.string().nullable().describe("The query parameter's key.").optional(),
+                    value: z.string().nullable().describe("The key's value.").optional(),
+                    disabled: z
+                        .boolean()
+                        .describe("If true, the query parameter isn't sent with the request.")
+                        .default(false),
+                    description: z
+                        .string()
+                        .nullable()
+                        .describe("The query parameter's description.")
+                        .optional(),
+                }))
+                    .describe('A list of query parameters. These are the query string parts of the URL, parsed as separate variables.')
+                    .optional(),
+            }),
+        ])
+            .describe('Information about the URL.')
+            .optional(),
+        auth: z
+            .object({
+            type: z
+                .enum([
+                'basic',
+                'bearer',
+                'apikey',
+                'digest',
+                'oauth1',
+                'oauth2',
+                'hawk',
+                'awsv4',
+                'ntlm',
+                'edgegrid',
+                'jwt',
+                'asap',
+            ])
+                .describe('The authorization type.'),
+            apikey: z
+                .array(z
+                .object({
+                key: z.string().describe("The auth method's key value."),
+                value: z
+                    .union([z.string(), z.array(z.record(z.string(), z.unknown()))])
+                    .describe("The key's value.")
+                    .optional(),
+                type: z
+                    .enum(['string', 'boolean', 'number', 'array', 'object', 'any'])
+                    .describe("The value's type.")
+                    .optional(),
+            })
+                .describe('Information about the supported Postman [authorization type](https://learning.postman.com/docs/sending-requests/authorization/authorization-types/).'))
+                .describe("The API key's authentication information.")
+                .optional(),
+            awsv4: z
+                .array(z
+                .object({
+                key: z.string().describe("The auth method's key value."),
+                value: z
+                    .union([z.string(), z.array(z.record(z.string(), z.unknown()))])
+                    .describe("The key's value.")
+                    .optional(),
+                type: z
+                    .enum(['string', 'boolean', 'number', 'array', 'object', 'any'])
+                    .describe("The value's type.")
+                    .optional(),
+            })
+                .describe('Information about the supported Postman [authorization type](https://learning.postman.com/docs/sending-requests/authorization/authorization-types/).'))
+                .describe('The attributes for [AWS Signature](https://learning.postman.com/docs/sending-requests/authorization/aws-signature/) authentication.')
+                .optional(),
+            basic: z
+                .array(z
+                .object({
+                key: z.string().describe("The auth method's key value."),
+                value: z
+                    .union([z.string(), z.array(z.record(z.string(), z.unknown()))])
+                    .describe("The key's value.")
+                    .optional(),
+                type: z
+                    .enum(['string', 'boolean', 'number', 'array', 'object', 'any'])
+                    .describe("The value's type.")
+                    .optional(),
+            })
+                .describe('Information about the supported Postman [authorization type](https://learning.postman.com/docs/sending-requests/authorization/authorization-types/).'))
+                .describe('The attributes for [Basic Auth](https://learning.postman.com/docs/sending-requests/authorization/authorization-types/#basic-auth).')
+                .optional(),
+            bearer: z
+                .array(z
+                .object({
+                key: z.string().describe("The auth method's key value."),
+                value: z
+                    .union([z.string(), z.array(z.record(z.string(), z.unknown()))])
+                    .describe("The key's value.")
+                    .optional(),
+                type: z
+                    .enum(['string', 'boolean', 'number', 'array', 'object', 'any'])
+                    .describe("The value's type.")
+                    .optional(),
+            })
+                .describe('Information about the supported Postman [authorization type](https://learning.postman.com/docs/sending-requests/authorization/authorization-types/).'))
+                .describe('The attributes for [Bearer Token](https://learning.postman.com/docs/sending-requests/authorization/authorization-types/#bearer-token) authentication.')
+                .optional(),
+            digest: z
+                .array(z
+                .object({
+                key: z.string().describe("The auth method's key value."),
+                value: z
+                    .union([z.string(), z.array(z.record(z.string(), z.unknown()))])
+                    .describe("The key's value.")
+                    .optional(),
+                type: z
+                    .enum(['string', 'boolean', 'number', 'array', 'object', 'any'])
+                    .describe("The value's type.")
+                    .optional(),
+            })
+                .describe('Information about the supported Postman [authorization type](https://learning.postman.com/docs/sending-requests/authorization/authorization-types/).'))
+                .describe('The attributes for [Digest](https://learning.postman.com/docs/sending-requests/authorization/digest-auth/) access authentication.')
+                .optional(),
+            edgegrid: z
+                .array(z
+                .object({
+                key: z.string().describe("The auth method's key value."),
+                value: z
+                    .union([z.string(), z.array(z.record(z.string(), z.unknown()))])
+                    .describe("The key's value.")
+                    .optional(),
+                type: z
+                    .enum(['string', 'boolean', 'number', 'array', 'object', 'any'])
+                    .describe("The value's type.")
+                    .optional(),
+            })
+                .describe('Information about the supported Postman [authorization type](https://learning.postman.com/docs/sending-requests/authorization/authorization-types/).'))
+                .describe('The attributes for [Akamai Edgegrid](https://learning.postman.com/docs/sending-requests/authorization/akamai-edgegrid/) authentication.')
+                .optional(),
+            hawk: z
+                .array(z
+                .object({
+                key: z.string().describe("The auth method's key value."),
+                value: z
+                    .union([z.string(), z.array(z.record(z.string(), z.unknown()))])
+                    .describe("The key's value.")
+                    .optional(),
+                type: z
+                    .enum(['string', 'boolean', 'number', 'array', 'object', 'any'])
+                    .describe("The value's type.")
+                    .optional(),
+            })
+                .describe('Information about the supported Postman [authorization type](https://learning.postman.com/docs/sending-requests/authorization/authorization-types/).'))
+                .describe('The attributes for [Hawk](https://learning.postman.com/docs/sending-requests/authorization/hawk-authentication/) authentication.')
+                .optional(),
+            ntlm: z
+                .array(z
+                .object({
+                key: z.string().describe("The auth method's key value."),
+                value: z
+                    .union([z.string(), z.array(z.record(z.string(), z.unknown()))])
+                    .describe("The key's value.")
+                    .optional(),
+                type: z
+                    .enum(['string', 'boolean', 'number', 'array', 'object', 'any'])
+                    .describe("The value's type.")
+                    .optional(),
+            })
+                .describe('Information about the supported Postman [authorization type](https://learning.postman.com/docs/sending-requests/authorization/authorization-types/).'))
+                .describe('The attributes for [NTLM](https://learning.postman.com/docs/sending-requests/authorization/ntlm-authentication/) authentication.')
+                .optional(),
+            oauth1: z
+                .array(z
+                .object({
+                key: z.string().describe("The auth method's key value."),
+                value: z
+                    .union([z.string(), z.array(z.record(z.string(), z.unknown()))])
+                    .describe("The key's value.")
+                    .optional(),
+                type: z
+                    .enum(['string', 'boolean', 'number', 'array', 'object', 'any'])
+                    .describe("The value's type.")
+                    .optional(),
+            })
+                .describe('Information about the supported Postman [authorization type](https://learning.postman.com/docs/sending-requests/authorization/authorization-types/).'))
+                .describe('The attributes for [OAuth1](https://learning.postman.com/docs/sending-requests/authorization/oauth-10/) authentication.')
+                .optional(),
+            oauth2: z
+                .array(z
+                .object({
+                key: z.string().describe("The auth method's key value."),
+                value: z
+                    .union([z.string(), z.array(z.record(z.string(), z.unknown()))])
+                    .describe("The key's value.")
+                    .optional(),
+                type: z
+                    .enum(['string', 'boolean', 'number', 'array', 'object', 'any'])
+                    .describe("The value's type.")
+                    .optional(),
+            })
+                .describe('Information about the supported Postman [authorization type](https://learning.postman.com/docs/sending-requests/authorization/authorization-types/).'))
+                .describe('The attributes for [OAuth2](https://learning.postman.com/docs/sending-requests/authorization/oauth-20/) authentication.')
+                .optional(),
+            jwt: z
+                .array(z
+                .object({
+                key: z.string().describe("The auth method's key value."),
+                value: z
+                    .union([z.string(), z.array(z.record(z.string(), z.unknown()))])
+                    .describe("The key's value.")
+                    .optional(),
+                type: z
+                    .enum(['string', 'boolean', 'number', 'array', 'object', 'any'])
+                    .describe("The value's type.")
+                    .optional(),
+            })
+                .describe('Information about the supported Postman [authorization type](https://learning.postman.com/docs/sending-requests/authorization/authorization-types/).'))
+                .describe('The attributes for JWT (JSON Web Token). Includes the `payload`, `secret`, `algorithm`, `addTokenTo`, and `headerPrefix` properties.')
+                .optional(),
+            asap: z
+                .array(z
+                .object({
+                key: z.string().describe("The auth method's key value."),
+                value: z
+                    .union([z.string(), z.array(z.record(z.string(), z.unknown()))])
+                    .describe("The key's value.")
+                    .optional(),
+                type: z
+                    .enum(['string', 'boolean', 'number', 'array', 'object', 'any'])
+                    .describe("The value's type.")
+                    .optional(),
+            })
+                .describe('Information about the supported Postman [authorization type](https://learning.postman.com/docs/sending-requests/authorization/authorization-types/).'))
+                .describe('The attributes for ASAP (Atlassian S2S Authentication Protocol). Includes the `kid`, `aud`, `iss`, `alg`, `privateKey`, and `claims` properties.')
+                .optional(),
+        })
+            .describe('The [authorization type supported by Postman](https://learning.postman.com/docs/sending-requests/authorization/authorization-types/).')
+            .optional(),
+        method: z.string().describe("The request's standard HTTP method.").optional(),
+        description: z.string().nullable().describe("The request's description.").optional(),
+        header: z
+            .array(z
+            .object({
+            key: z
+                .string()
+                .describe("The header's key, such as `Content-Type` or `X-Custom-Header`."),
+            value: z.string().describe("The header key's value."),
+            description: z.string().nullable().describe("The header's description.").optional(),
+        })
+            .describe('Information about the header.'))
+            .describe('A list of headers.')
+            .optional(),
+        body: z
+            .object({
+            mode: z
+                .enum(['raw', 'urlencoded', 'formdata', 'file', 'graphql'])
+                .describe('The data associated with the request.')
+                .optional(),
+            raw: z
+                .string()
+                .describe('If the `mode` value is `raw`, the raw content of the request body.')
+                .optional(),
+            urlencoded: z
+                .array(z.object({
+                key: z.string().describe('The key value.'),
+                value: z.string().describe("The key's value.").optional(),
+                description: z.string().nullable().describe("The key's description.").optional(),
+            }))
+                .describe('A list of x-www-form-encoded key/value pairs.')
+                .optional(),
+            formdata: z
+                .array(z.record(z.string(), z.unknown()).and(z.union([
+                z.object({
+                    key: z.string().describe('The key value.').optional(),
+                    value: z.string().describe("The key's value.").optional(),
+                    type: z.literal('text').describe('The `text` value.').optional(),
+                    contentType: z
+                        .string()
+                        .describe('The form-data Content-Type header.')
+                        .optional(),
+                    description: z
+                        .string()
+                        .nullable()
+                        .describe("The key's description.")
+                        .optional(),
+                }),
+                z.object({
+                    key: z.string().describe('The key value.').optional(),
+                    src: z
+                        .unknown()
+                        .superRefine((x, ctx) => {
+                        const schemas = [z.string().nullable(), z.array(z.string())];
+                        const errors = schemas.reduce((errors, schema) => ((result) => (result.error ? [...errors, result.error] : errors))(schema.safeParse(x)), []);
+                        if (schemas.length - errors.length !== 1) {
+                            ctx.addIssue({
+                                path: ctx.path,
+                                code: 'invalid_union',
+                                unionErrors: errors,
+                                message: 'Invalid input: Should pass single schema',
+                            });
+                        }
+                    })
+                        .optional(),
+                    type: z.literal('file').describe('The `file` value.').optional(),
+                    contentType: z
+                        .string()
+                        .describe('The form-data Content-Type header.')
+                        .optional(),
+                    description: z
+                        .string()
+                        .nullable()
+                        .describe("The key's description.")
+                        .optional(),
+                }),
+            ])))
+                .describe('If the `mode` value is `formdata`, then a list of form-data key/pair values.')
+                .optional(),
+            file: z
+                .object({
+                src: z
+                    .string()
+                    .nullable()
+                    .describe('The name of the file to upload (not its path). A null value indicates that no file is selected as a part of the request body.')
+                    .optional(),
+            })
+                .describe('If the `mode` value is `file`, an object containing the file request information.')
+                .optional(),
+            graphql: z
+                .object({
+                query: z.string().describe('The GraphQL query.').optional(),
+                variables: z
+                    .string()
+                    .nullable()
+                    .describe('The GraphQL query variables, in JSON format.')
+                    .optional(),
+            })
+                .describe('If the `mode` value is `graphql`, an object containing the GraphQL request information.')
+                .optional(),
+            options: z
+                .record(z.string(), z.unknown())
+                .describe('Additional configurations and options set for various modes.')
+                .optional(),
+        })
+            .describe("Information about the collection's request body.")
+            .optional(),
+    })
+        .describe('Information about the collection request.')
+        .optional(),
+    responseTime: z
+        .number()
+        .nullable()
+        .describe('The time taken by the request to complete. The unit is milliseconds.')
+        .optional(),
+    timings: z
+        .record(z.string(), z.unknown())
+        .nullable()
+        .describe('Data related to the request and response timing, in milliseconds.')
+        .optional(),
+    header: z
+        .union([
+        z.string().nullable(),
+        z
+            .array(z
+            .object({
+            key: z
+                .string()
+                .describe("The header's key, such as `Content-Type` or `X-Custom-Header`."),
+            value: z.string().describe("The header key's value."),
+            description: z.string().nullable().describe("The header's description.").optional(),
+        })
+            .describe('Information about the header.'))
+            .describe("A list of the response's headers."),
+    ])
+        .optional(),
+    cookie: z
+        .array(z
+        .object({
+        name: z.string().describe("The cookie's name.").optional(),
+        value: z.string().describe("The cookie's value.").optional(),
+    })
+        .catchall(z.unknown()))
+        .describe('A list of cookies included in the response.')
+        .optional(),
+    body: z.string().nullable().describe('The raw text of the response body.').optional(),
+    status: z.string().describe("The response's HTTP status.").optional(),
+    code: z.number().int().describe("The response's HTTP status code.").optional(),
 });
 export const annotations = {
     title: 'Creates a request response in a collection. For a complete list of request body properties, refer to the **Response** entry in the [Postman Collection Format documentation](https://schema.postman.com/collection/json/v2.1.0/draft-07/docs/index.html).',
@@ -21,12 +416,28 @@ export async function handler(args, extra) {
     try {
         const endpoint = `/collections/${args.collectionId}/responses`;
         const query = new URLSearchParams();
-        if (args.requestId !== undefined)
-            query.set('requestId', String(args.requestId));
+        if (args.request !== undefined)
+            query.set('request', String(args.request));
         const url = query.toString() ? `${endpoint}?${query.toString()}` : endpoint;
         const bodyPayload = {};
         if (args.name !== undefined)
             bodyPayload.name = args.name;
+        if (args.originalRequest !== undefined)
+            bodyPayload.originalRequest = args.originalRequest;
+        if (args.responseTime !== undefined)
+            bodyPayload.responseTime = args.responseTime;
+        if (args.timings !== undefined)
+            bodyPayload.timings = args.timings;
+        if (args.header !== undefined)
+            bodyPayload.header = args.header;
+        if (args.cookie !== undefined)
+            bodyPayload.cookie = args.cookie;
+        if (args.body !== undefined)
+            bodyPayload.body = args.body;
+        if (args.status !== undefined)
+            bodyPayload.status = args.status;
+        if (args.code !== undefined)
+            bodyPayload.code = args.code;
         const options = {
             body: JSON.stringify(bodyPayload),
             contentType: ContentType.Json,

package/dist/src/tools/createSpec.js

@@ -2,24 +2,36 @@ import { z } from 'zod';
 import { ContentType } from '../clients/postman.js';
 import { asMcpError, McpError } from './utils/toolHelpers.js';
 export const method = 'createSpec';
-export const description = "Creates an API specification in Postman's [Spec Hub](https://learning.postman.com/docs/design-apis/specifications/overview/). Specifications can be single or multi-file.\n\n**Note:**\n- Postman supports OpenAPI 2.0, OpenAPI 3.0, OpenAPI 3.1, and AsyncAPI 2.0 specifications.\n- If the file path contains a \\`/\\` (forward slash) character, then a folder is created. For example, if the path is the \\`components/schemas.json\\` value, then a \\`components\\` folder is created with the \\`schemas.json\\` file inside.\n- Multi-file specifications can only have one root file.\n- Files cannot exceed a maximum of 10 MB in size.\n";
+export const description = "Creates an API specification in Postman's [Spec Hub](https://learning.postman.com/docs/design-apis/specifications/overview/). Specifications can be single or multi-file.\n\n**Note:**\n- Postman supports OpenAPI 2.0, OpenAPI 3.0, OpenAPI 3.1, AsyncAPI 2.0, protobuf 2 and 3, and GraphQL specifications.\n- If the file path contains a \\`/\\` (forward slash) character, then a folder is created. For example, if the path is the \\`components/schemas.json\\` value, then a \\`components\\` folder is created with the \\`schemas.json\\` file inside.\n- Multi-file specifications can only have one root file.\n- Files cannot exceed a maximum of 10 MB in size.\n";
 export const parameters = z.object({
     workspaceId: z.string().describe("The workspace's ID."),
     name: z.string().describe("The specification's name."),
     type: z
-        .enum(['OPENAPI:2.0', 'OPENAPI:3.0', 'OPENAPI:3.1', 'ASYNCAPI:2.0'])
+        .enum([
+        'OPENAPI:2.0',
+        'OPENAPI:3.0',
+        'OPENAPI:3.1',
+        'ASYNCAPI:2.0',
+        'PROTOBUF:2',
+        'PROTOBUF:3',
+        'GRAPHQL',
+    ])
         .describe("The specification's type."),
     files: z
         .array(z.union([
         z.object({
-            path: z.string().describe("The file's path. Accepts JSON or YAML files."),
+            path: z
+                .string()
+                .describe("The file's path. Accepts .json, .yaml, .proto and .graphql file types."),
             content: z.string().describe("The file's stringified contents."),
             type: z
                 .enum(['DEFAULT', 'ROOT'])
                 .describe('The type of file. This property is required when creating multi-file specifications:\n- `ROOT` — The file containing the full OpenAPI structure. This serves as the entry point for the API spec and references other (`DEFAULT`) spec files. Multi-file specs can only have one root file.\n- `DEFAULT` — A file referenced by the `ROOT` file.\n'),
         }),
         z.object({
-            path: z.string().describe("The file's path. Accepts JSON or YAML files."),
+            path: z
+                .string()
+                .describe("The file's path. Accepts .json, .yaml, .proto and .graphql file types."),
             content: z.string().describe("The file's stringified contents."),
         }),
     ]))

package/dist/src/tools/createWorkspace.js

@@ -2,7 +2,7 @@ import { z } from 'zod';
 import { ContentType } from '../clients/postman.js';
 import { asMcpError, McpError } from './utils/toolHelpers.js';
 export const method = 'createWorkspace';
-export const description = 'Creates a new [workspace](https://learning.postman.com/docs/collaborating-in-postman/using-workspaces/creating-workspaces/).\n\n**Note:**\n\n- This endpoint returns a 403 \\`Forbidden\\` response if the user does not have permission to create workspaces. [Admins and Super Admins](https://learning.postman.com/docs/collaborating-in-postman/roles-and-permissions/#team-roles) can configure workspace permissions to restrict users and/or user groups from creating workspaces or require approvals for the creation of team workspaces.\n- There are rate limits when publishing public workspaces.\n- Public team workspace names must be unique.\n\n### Important\n\nWe deprecated linking collections or environments between workspaces. We do not recommend that you do this.\n\nIf you have a linked collection or environment, note the following:\n- The endpoint does not create a clone of a collection or environment.\n- Any changes you make to a linked collection or environment changes them in all workspaces.\n- If you delete a collection or environment linked between workspaces, the system deletes it in all the workspaces.\n';
+export const description = 'Creates a new [workspace](https://learning.postman.com/docs/collaborating-in-postman/using-workspaces/creating-workspaces/).\n\n**Note:**\n\n- This endpoint returns a 403 \\`Forbidden\\` response if the user does not have permission to create workspaces. [Admins and Super Admins](https://learning.postman.com/docs/collaborating-in-postman/roles-and-permissions/#team-roles) can configure workspace permissions to restrict users and/or user groups from creating workspaces or require approvals for the creation of team workspaces.\n- There are rate limits when publishing public workspaces.\n- Public team workspace names must be unique.\n- The \\`teamId\\` property must be passed in the request body if [Postman Organizations](https://learning.postman.com/docs/administration/onboarding-checklist) is enabled.\n';
 export const parameters = z.object({
     workspace: z
         .object({
@@ -12,6 +12,10 @@ export const parameters = z.object({
             .describe('The type of workspace:\n- `personal`\n- `private` — Private workspaces are available on Postman [**Professional** and **Enterprise** plans](https://www.postman.com/pricing).\n- `public`\n- `team`\n- `partner` — [Partner Workspaces](https://learning.postman.com/docs/collaborating-in-postman/using-workspaces/partner-workspaces/) are available on Postman [**Professional** and **Enterprise** plans](https://www.postman.com/pricing)).\n'),
         description: z.string().describe("The workspace's description.").optional(),
         about: z.string().describe('A brief summary about the workspace.').optional(),
+        teamId: z
+            .string()
+            .describe('The team ID to assign to the workspace. This property is required if Postman [Organizations](https://learning.postman.com/docs/administration/managing-your-team/overview) is enabled.')
+            .optional(),
     })
         .describe('Information about the workspace.')
         .optional(),

package/dist/src/tools/generateCollection.js

@@ -18,8 +18,8 @@ export const parameters = z.object({
             .describe('The option for setting the indentation character type.')
             .default('Space'),
         parametersResolution: z
-            .enum(['Schema', 'Example'])
-            .describe("Whether to generate the request and response parameters based on the specification or the specification's examples.")
+            .string()
+            .describe('Generated collections use examples for parameter generation by default. Any existing collections generated using the schema parameter generation will continue to sync using their existing strategy.')
             .default('Schema'),
         folderStrategy: z
             .enum(['Paths', 'Tags'])

package/dist/src/tools/getCodeGenerationInstructions.js

@@ -46,13 +46,19 @@ First, locate the collection the user wants to work with. Determine whether the
 
 ### For Public APIs
 
-Use \`searchPostmanElements\` to find public API collections:
+Use \`searchPostmanElementsInPublicNetwork\` to find public API collections:
 
-- \`searchPostmanElements(q, entityType: collections)\` - Search for public collections. E.g. if the user says "find the Stripe API and build a demo" then call this tool with the query "stripe" and entityType "collections". Review the collection(s) returned and select the best match. If multiple collections look viable, ask the user which one to use.
+- \`searchPostmanElementsInPublicNetwork(q, entityType: collections)\` - Search for public collections. E.g. if the user says "find the Stripe API and build a demo" then call this tool with the query "stripe" and entityType "collections". Review the collection(s) returned and select the best match. If multiple collections look viable, ask the user which one to use.
 
-### For Internal APIs
+### For Private APIs in the user's organization
 
-Use \`getWorkspaces\` and \`getWorkspace\` to find internal API collections:
+Use \`searchPostmanElementsInPrivateNetwork\` to find API collections in the Private API Network which is a central repository of trusted Workspaces within the organisation meant for discovery and reuse :
+
+- \`searchPostmanElementsInPrivateNetwork(q, entityType: collections)\` - Search for API collections in the Private API Network. E.g. if the user says "find the notification API and integrate it" then call this tool with the query "notification" and entityType "collections". Review the collection(s) returned and select the best match. If multiple API requests look viable, ask the user which one to use.
+
+### For user owned APIs
+
+Use \`getWorkspaces\` and \`getWorkspace\` to find user's internal API collections:
 
 - \`getWorkspaces()\` - Fetch all workspaces the user has access to. Look for a workspace with a name that matches what the user is looking for.
 
@@ -64,7 +70,7 @@ Once you've identified the target collection (from either path above):
 
 - \`getCollection(collectionId)\` - Fetch the collection details by passing its uid. IMPORTANT: Do NOT pass model=minimal or model=full, omit the model parameter entirely. The response will include collection-level documentation and a recursive itemRefs array with the names and uids of all folders and requests.
 
-**IMPORTANT:** Once you have established the collection, do NOT call searchPostmanElements or getWorkspaces again to find requests. Use getCollectionRequest to explore individual requests within the collection.
+**IMPORTANT:** Once you have established the collection, do NOT call searchPostmanElementsInPublicNetwork or searchPostmanElementsInPrivateNetwork or getWorkspaces again to find requests. Use getCollectionRequest to explore individual requests within the collection.
 
 ## 1.2 Explore Requests and Plan
 
@@ -90,7 +96,7 @@ Once you know which requests need code generated, gather all remaining context t
 
 - \`getCollectionResponse(responseId, collectionId, uid: true, populate: false)\` - Call this for response example uids returned from getCollectionRequest. Use the information for: creating response types in typed languages, adding response schema comments in untyped languages, and understanding both success and error cases.
 
-- \`getEnvironments(workspaceId)\` - Fetch all environments for the workspace that the collection belongs to (the workspaceId was returned from searchPostmanElements). ALWAYS pass a workspaceId. If you do not have a workspaceId, do NOT call this tool.
+- \`getEnvironments(workspaceId)\` - Fetch all environments for the workspace that the collection belongs to (the workspaceId was returned from searchPostmanElementsInPublicNetwork or searchPostmanElementsInPrivateNetwork). ALWAYS pass a workspaceId. If you do not have a workspaceId, do NOT call this tool.
 
 - \`getEnvironment(environmentId)\` - For each environment, fetch the full details to see what variables have been defined and retrieve their values.
 

package/dist/src/tools/getCollection/getCollectionMap.js

@@ -2,8 +2,8 @@ import { z } from 'zod';
 import { asMcpError, McpError } from '../utils/toolHelpers.js';
 export const method = 'getCollectionMap';
 export const description = `Get a Postman collection map with metadata and a complete recursive index of all folders and requests. Response includes collection metadata and description. Response includes itemRefs property (name and id only) instead of the full item array. After calling, present the collection summary and ask the user where they\'d like to explore next, calling getCollectionFolder and/or getCollectionRequest tools in parallel to get more data quickly.
-  Once you've called this tool, DO NOT call searchPostmanElements to find items in or related to this collection. Instead, use the map in itemRefs.
-  Only use searchPostmanElements to find the collection where a request may be. Then, stay in the collection and don't use the search.
+  Once you've called this tool, DO NOT call searchPostmanElementsInPublicNetwork to find items in or related to this collection. Instead, use the map in itemRefs.
+  Only use searchPostmanElementsInPublicNetwork to find the collection where a request may be. Then, stay in the collection and don't use the search.
   When using the getCollectionRequest tool to look up request data, omit the populate parameter to avoid getting all response examples
   back at once (can be very large). Instead, use the response ids from the return value and call getCollectionResponse for each one.
   Prepend the collection's ownerId to the front of each response id when passing it to getCollectionResponse. This is the first part of the collection uid.

package/dist/src/tools/pullCollectionChanges.js

@@ -2,7 +2,9 @@ import { z } from 'zod';
 import { asMcpError, McpError } from './utils/toolHelpers.js';
 export const method = 'pullCollectionChanges';
 export const description = "Pulls the changes from a parent (source) collection into the forked collection. In the endpoint's response:\n\n- The \\`destinationId\\` is the ID of the forked collection.\n- The \\`sourceId\\` is the ID of the source collection.\n";
-export const parameters = z.object({ collectionId: z.string().describe("The collection's ID.") });
+export const parameters = z.object({
+    collectionId: z.string().describe("The forked collection's ID."),
+});
 export const annotations = {
     title: "Pulls the changes from a parent (source) collection into the forked collection. In the endpoint's response:",
     readOnlyHint: false,

package/dist/src/tools/putCollection.js

@@ -545,6 +545,16 @@ export const parameters = z.object({
             })
                 .describe('The [settings](https://learning.postman.com/docs/sending-requests/create-requests/request-settings/) used to alter the [Protocol Profile Behavior](https://github.com/postmanlabs/postman-runtime/blob/develop/docs/protocol-profile-behavior.md) of sending a request.')
                 .optional(),
+            createdAt: z
+                .string()
+                .datetime({ offset: true })
+                .describe('The date and time at which the collection item was created.')
+                .optional(),
+            updatedAt: z
+                .string()
+                .datetime({ offset: true })
+                .describe('The date and time at which the collection item was updated.')
+                .optional(),
             uid: z.string().describe("The collection item's unique ID.").optional(),
         })
             .describe('Information about the collection request or folder.')),