Skip to main content

​
About Postman

Postman exposes team and workspace data over APIs authenticated with X-API-Key. Iru reads workspaces, collections, API definitions, membership, and audit logs where your plan allows.

​
How It Works

X-API-Key: YOUR_API_KEY
DetailValue
CategoryAPI design / collaboration
AuthenticationAPI key (X-API-Key)
Keys inherit the creator’s workspace access - use a dedicated user when you want tighter blast radius. Official references: Managing API keys, Postman public workspace docs for API surface.

​
Prerequisites

  • Permission to generate API keys (org policy may restrict this).

​
Connect Postman to Iru

Complete this tab before you connect the source in Compliance.
1

Sign in to Postman

Open postman.com and sign in with a user who can manage API keys for your team or personal account, per where Iru should authenticate.
2

Open your avatar menu

Select your Avatar in the upper-right to open the account menu.
3

Open Account Settings

Choose Account Settings (or Settings → Account on some layouts).
4

Open API Keys

Select API Keys to view existing keys and the control to generate a new one.
5

Generate a new API key

Select Generate API Key. Name it (for example Iru Compliance) and set expiration if your org requires it.
6

Copy the key once

Copy the key value when Postman shows it. Postman may auto-revoke keys found in public repos, so store it in a secrets manager until you paste it in Iru Compliance.
Continue on the Iru Compliance tab.

​
Troubleshooting

Check pop-up blocker settings for the Iru site and try again.
Full key; not expired or revoked.
Org admin must allow API keys for your role.
Issue a new key; store in a secrets manager.

Sources Management

Browse and manage every Compliance source.

Getting Started With Compliance

Frameworks, actions, and Artifacts.

Iru Overview

How Endpoint, Compliance, and Identity fit together.

Artifacts Management

Upload, review, and organize evidence from sources and actions.