About Postman
Postman exposes team and workspace data over APIs authenticated withX-API-Key. Iru reads workspaces, collections, API definitions, membership, and audit logs where your plan allows.
How It Works
Keys inherit the creator’s workspace access - use a dedicated user when you want tighter blast radius.
Official references: Managing API keys, Postman public workspace docs for API surface.
Prerequisites
- Permission to generate API keys (org policy may restrict this).
Connect Postman to Iru
- Postman
- Iru Compliance
Complete this tab before you connect the source in Compliance.
1
Sign in to Postman
Open postman.com and sign in with a user who can manage API keys for your team or personal account, per where Iru should authenticate.
2
Open your avatar menu
Select your Avatar in the upper-right to open the account menu.
3
Open Account Settings
Choose Account Settings (or Settings → Account on some layouts).
4
Open API Keys
Select API Keys to view existing keys and the control to generate a new one.
5
Generate a new API key
Select Generate API Key. Name it (for example Iru Compliance) and set expiration if your org requires it.
6
Copy the key once
Copy the key value when Postman shows it. Postman may auto-revoke keys found in public repos, so store it in a secrets manager until you paste it in Iru Compliance.
Continue on the Iru Compliance tab.
Troubleshooting
Nothing opens when you turn the source on
Nothing opens when you turn the source on
Check pop-up blocker settings for the Iru site and try again.
Creation blocked
Creation blocked
Org admin must allow API keys for your role.
Auto-revoked
Auto-revoked
Issue a new key; store in a secrets manager.
Related Articles
Sources Management
Browse and manage every Compliance source.
Getting Started With Compliance
Frameworks, actions, and Artifacts.
Iru Overview
How Endpoint, Compliance, and Identity fit together.
Artifacts Management
Upload, review, and organize evidence from sources and actions.