@postman/postman-mcp-server 2.7.1 → 2.8.0

package/dist/package.json

@@ -1,20 +1,22 @@
 {
     "name": "@postman/postman-mcp-server",
-    "version": "2.7.1",
+    "version": "2.8.0",
     "description": "A simple MCP server to operate on the Postman API",
     "mcpName": "com.postman/postman-mcp-server",
     "main": "dist/src/index.js",
     "type": "module",
+    "packageManager": "pnpm@10.6.2",
     "scripts": {
+        "preinstall": "npx only-allow pnpm",
         "start:stdio": "node dist/src/index.js",
         "build": "eslint --fix ./src && prettier --write \"src/**/*.ts\" && tsc",
-        "prepack": "npm run build",
+        "prepack": "pnpm run build",
         "test": "vitest",
         "lint": "eslint",
         "lint:fix": "eslint --fix",
-        "preversion": "npm run build",
+        "preversion": "pnpm run build",
         "version": "git add dist/",
-        "release": "npm version",
+        "release": "pnpm version",
         "release-custom": "node scripts/release.js"
     },
     "bin": "dist/src/index.js",

package/dist/src/clients/postman.js

@@ -94,10 +94,12 @@ export class PostmanAPIClient {
             case 403:
                 throw new McpError(ErrorCode.InvalidParams, `API request failed: ${response.status} ${errorText}`, {
                     cause: errorText,
+                    httpStatus: response.status,
                 });
             default:
                 throw new McpError(ErrorCode.InternalError, `API request failed: ${response.status}`, {
                     cause: errorText,
+                    httpStatus: response.status,
                 });
         }
     }

package/dist/src/enabledResources.js

@@ -92,11 +92,11 @@ const full = [
     'updateWorkspaceGlobalVariables',
     'getWorkspaceTags',
     'updateWorkspaceTags',
-    'getAllElementsAndFolders',
-    'getAllPanAddElementRequests',
-    'deletePanElementOrFolder',
-    'postPanElementOrFolder',
-    'updatePanElementOrFolder',
+    'listPrivateNetworkWorkspaces',
+    'listPrivateNetworkAddRequests',
+    'removeWorkspaceFromPrivateNetwork',
+    'addWorkspaceToPrivateNetwork',
+    'respondPrivateNetworkAddRequest',
     'publishDocumentation',
     'unpublishDocumentation',
     'getAsyncSpecTaskStatus',
@@ -114,6 +114,8 @@ const full = [
     'getEnabledTools',
     'searchPostmanElementsInPublicNetwork',
     'searchPostmanElementsInPrivateNetwork',
+    'getAnalyticsData',
+    'getAnalyticsMetadata',
 ];
 const minimal = [
     'createCollection',

package/dist/src/index.js

@@ -11,6 +11,7 @@ import { PostmanAPIClient } from './clients/postman.js';
 import { SERVER_NAME, APP_VERSION } from './constants.js';
 import { env } from './env.js';
 import { createTemplateRenderer } from './tools/utils/templateRenderer.js';
+import { createErrorTemplateRenderer } from './tools/utils/errorTemplateRenderer.js';
 const SUPPORTED_REGIONS = {
     us: 'https://api.postman.com',
     eu: 'https://api.eu.postman.com',
@@ -148,6 +149,8 @@ async function run() {
     const __dirname = dirname(__filename);
     const viewsDir = join(__dirname, './views');
     const renderTemplate = createTemplateRenderer(viewsDir);
+    const errorsDir = join(__dirname, './views/errors');
+    const renderErrorTemplate = createErrorTemplateRenderer(errorsDir);
     const client = new PostmanAPIClient(apiKey, undefined, serverContext);
     log('info', 'Registering tools with McpServer');
     for (const tool of tools) {
@@ -184,8 +187,33 @@ async function run() {
             catch (error) {
                 const errMsg = String(error?.message || error);
                 logBoth(server, 'error', `Tool invocation failed: ${toolName}: ${errMsg}`, { toolName });
-                if (error instanceof McpError)
+                if (error instanceof McpError) {
+                    const httpStatus = error.data?.httpStatus;
+                    if (typeof httpStatus === 'number') {
+                        const rawBody = String(error.data?.cause ?? '');
+                        let parsedBody = null;
+                        try {
+                            parsedBody = JSON.parse(rawBody);
+                        }
+                        catch {
+                        }
+                        const errorObj = parsedBody?.error && typeof parsedBody.error === 'object'
+                            ? parsedBody.error
+                            : parsedBody;
+                        const rendered = renderErrorTemplate(toolName, httpStatus, {
+                            toolName,
+                            statusCode: httpStatus,
+                            args,
+                            errorMessage: error.message,
+                            errorBody: rawBody,
+                            error: errorObj,
+                        });
+                        if (rendered) {
+                            throw new McpError(error.code, rendered, error.data);
+                        }
+                    }
                     throw error;
+                }
                 throw new McpError(ErrorCode.InternalError, `API error: ${error.message}`);
             }
         });

package/dist/src/tools/addWorkspaceToPrivateNetwork.js

@@ -0,0 +1,47 @@
+import { z } from 'zod';
+import { ContentType } from '../clients/postman.js';
+import { asMcpError, McpError } from './utils/toolHelpers.js';
+export const method = 'addWorkspaceToPrivateNetwork';
+export const description = "Publishes a workspace to your team's Private API Network.\n\nWARNING: This tool is for Private API Network management, not for general workspace operations. For workspace management use: getWorkspaces, getWorkspace, createWorkspace, updateWorkspace, deleteWorkspace.\n";
+export const parameters = z.object({
+    workspace: z.object({
+        id: z.string().describe("The workspace's ID."),
+        parentFolderId: z.number().int().describe('The `0` value.').default(0),
+    }),
+});
+export const annotations = {
+    title: "Publishes a workspace to your team's Private API Network.",
+    readOnlyHint: false,
+    destructiveHint: false,
+    idempotentHint: false,
+};
+export async function handler(args, extra) {
+    try {
+        const endpoint = `/network/private`;
+        const query = new URLSearchParams();
+        const url = query.toString() ? `${endpoint}?${query.toString()}` : endpoint;
+        const bodyPayload = {};
+        if (args.workspace !== undefined)
+            bodyPayload.workspace = args.workspace;
+        const options = {
+            body: JSON.stringify(bodyPayload),
+            contentType: ContentType.Json,
+            headers: extra.headers,
+        };
+        const result = await extra.client.post(url, options);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `${typeof result === 'string' ? result : JSON.stringify(result, null, 2)}`,
+                },
+            ],
+        };
+    }
+    catch (e) {
+        if (e instanceof McpError) {
+            throw e;
+        }
+        throw asMcpError(e);
+    }
+}

package/dist/src/tools/createCollectionRequest.js

@@ -9,7 +9,10 @@ export const parameters = z.object({
         .string()
         .describe('The folder ID in which to create the request. By default, the system will create the request at the collection level.')
         .optional(),
-    name: z.string().describe('Name of the request').optional(),
+    name: z
+        .string()
+        .describe("The request's name. It is recommended that you pass the `name` property in the request body. If you do not, the system uses a null value. As a result, this creates a request with a blank name.")
+        .optional(),
     description: z.string().nullable().describe("The request's description.").optional(),
     method: z
         .enum([
@@ -29,7 +32,6 @@ export const parameters = z.object({
         'PROPFIND',
         'VIEW',
     ])
-        .nullable()
         .describe("The request's HTTP method.")
         .optional(),
     url: z.string().nullable().describe("The request's URL.").optional(),
@@ -37,7 +39,7 @@ export const parameters = z.object({
         .array(z.object({
         key: z.string().describe("The header's key.").optional(),
         value: z.string().describe("The header's value.").optional(),
-        description: z.string().nullable().describe("The header's description.").optional(),
+        description: z.string().describe("The header's description.").optional(),
     }))
         .describe("The request's headers.")
         .optional(),
@@ -45,25 +47,20 @@ export const parameters = z.object({
         .array(z.object({
         key: z.string().describe("The query parameter's key.").optional(),
         value: z.string().describe("The query parameter's value.").optional(),
-        description: z
-            .string()
-            .nullable()
-            .describe("The query parameter's description.")
-            .optional(),
+        description: z.string().describe("The query parameter's description.").optional(),
         enabled: z.boolean().describe('If true, the query parameter is enabled.').optional(),
     }))
         .describe("The request's query parameters.")
         .optional(),
     dataMode: z
         .enum(['raw', 'urlencoded', 'formdata', 'binary', 'graphql'])
-        .nullable()
         .describe("The request body's data mode.")
         .optional(),
     data: z
         .array(z.object({
         key: z.string().describe("The form data's key.").optional(),
         value: z.string().describe("The form data's value.").optional(),
-        description: z.string().nullable().describe("The form data's description.").optional(),
+        description: z.string().describe("The form data's description.").optional(),
         enabled: z.boolean().describe('If true, the form data entry is enabled.').optional(),
         type: z.enum(['text', 'file']).describe("The form data's type.").optional(),
         uuid: z.string().describe("The form data entry's unique identifier.").optional(),
@@ -84,7 +81,6 @@ export const parameters = z.object({
         .object({
         raw: z
             .object({ language: z.string().describe("The raw mode data's language type.").optional() })
-            .catchall(z.unknown())
             .describe('Options for the `raw` data mode.')
             .optional(),
         urlencoded: z
@@ -324,7 +320,7 @@ export const parameters = z.object({
         .optional(),
     events: z
         .array(z.object({
-        listen: z.enum(['test', 'prerequest']).describe('The event type.'),
+        listen: z.enum(['test', 'prerequest']).describe('The event type.').optional(),
         script: z
             .object({
             id: z.string().describe("The script's ID.").optional(),
@@ -340,6 +336,7 @@ export const parameters = z.object({
             .describe('Information about the Javascript code that can be used to to perform setup or teardown operations in a response.')
             .optional(),
     }))
+        .nullable()
         .describe('A list of scripts configured to run when specific events occur.')
         .optional(),
 });