> ## Documentation Index
> Fetch the complete documentation index at: https://docs.iru.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Postman

> Connect Postman to Iru Compliance with an API key to collect workspace inventory, collection metadata, team membership, and audit-log evidence.

### About Postman

Postman exposes team and workspace data over APIs authenticated with **`X-API-Key`**. Iru reads **workspaces**, **collections**, **API definitions**, **membership**, and **audit** logs where your plan allows.

### How It Works

```http theme={null}
X-API-Key: YOUR_API_KEY
```

| Detail             | Value                      |
| ------------------ | -------------------------- |
| **Category**       | API design / collaboration |
| **Authentication** | API key (`X-API-Key`)      |

Keys inherit the creator’s workspace access - use a **dedicated** user when you want tighter blast radius.

Official references: [Managing API keys](https://learning.postman.com/docs/administration/managing-your-team/managing-api-keys), Postman **public** workspace docs for API surface.

### Prerequisites

* Permission to **generate API keys** (org policy may restrict this).

### Connect Postman to Iru

<Tabs>
  <Tab title="Postman">
    <Note>
      Complete this tab before you connect the source in Compliance.
    </Note>

    <Steps>
      <Step title="Sign in to Postman">
        Open [postman.com](https://www.postman.com) and sign in with a user who can manage **API keys** for your **team** or **personal** account, per where Iru should authenticate.
      </Step>

      <Step title="Open your avatar menu">
        Select your **Avatar** in the upper-right to open the account menu.
      </Step>

      <Step title="Open Account Settings">
        Choose **Account Settings** (or **Settings** → **Account** on some layouts).
      </Step>

      <Step title="Open API Keys">
        Select **API Keys** to view existing keys and the control to generate a new one.
      </Step>

      <Step title="Generate a new API key">
        Select **Generate API Key**. Name it (for example **Iru Compliance**) and set **expiration** if your org requires it.
      </Step>

      <Step title="Copy the key once">
        Copy the key value when Postman shows it. Postman may **auto-revoke** keys found in public repos, so store it in a secrets manager until you paste it in **Iru Compliance**.
      </Step>
    </Steps>

    <Note>
      Continue on the [**Iru Compliance**](#iru-compliance) tab.
    </Note>
  </Tab>

  <Tab title="Iru Compliance">
    <Note>
      Finish the [**Postman**](#postman) tab first.
    </Note>

    <Steps>
      <Step title="Open Sources">
        In Iru Compliance, on the left navigation bar, expand **Compliance** and select **Sources**.

        <Frame>
          <img src="https://mintcdn.com/iru/7HsGH7lnQ8GpVmI0/assets/media/images/iru-navigation-compliance-sources.png?fit=max&auto=format&n=7HsGH7lnQ8GpVmI0&q=85&s=595982441fd777b333b3ecfea24adc24" alt="Left navigation: Compliance expanded, Sources selected" width="424" height="1056" data-path="assets/media/images/iru-navigation-compliance-sources.png" />
        </Frame>
      </Step>

      <Step title="Turn on Postman">
        Find **Postman** (use **Category** or **Search by name or description**). On that card, turn on the **toggle**. A browser tab or window may open for the connector wizard.
      </Step>

      <Step title="Paste the API key">
        Paste the key into the **`X-API-Key`** field.
      </Step>

      <Step title="Finish the connection">
        Click **Submit API Key**. When the connection succeeds, the wizard shows **Connection Configured**.
      </Step>

      <Step title="Confirm the source is Active">
        Close the **Iru is requesting access to external services** browser tab, then return to **Compliance** → **Sources** and confirm the **Postman** card is **Active**.
      </Step>
    </Steps>
  </Tab>
</Tabs>

### Troubleshooting

<AccordionGroup>
  <Accordion title="Nothing opens when you turn the source on">
    Check **pop-up blocker** settings for the Iru site and try again.
  </Accordion>

  <Accordion title="401 Unauthorized">
    Full key; not expired or revoked.
  </Accordion>

  <Accordion title="Creation blocked">
    Org admin must allow API keys for your role.
  </Accordion>

  <Accordion title="Auto-revoked">
    Issue a new key; store in a secrets manager.
  </Accordion>
</AccordionGroup>

### Related Articles

<CardGroup cols={2}>
  <Card title="Sources Management" icon="plug" href="/en/compliance/sources-management">
    Browse and manage every Compliance source.
  </Card>

  <Card title="Getting Started With Compliance" icon="rocket" href="/en/compliance/getting-started-with-compliance">
    Frameworks, actions, and **Artifacts**.
  </Card>

  <Card title="Iru Overview" icon="layer-group" href="/en/iru/platform-overview/iru-overview">
    How Endpoint, Compliance, and Identity fit together.
  </Card>

  <Card title="Artifacts Management" icon="folder-open" href="/en/compliance/artifacts-management">
    Upload, review, and organize evidence from sources and actions.
  </Card>
</CardGroup>