Postman Cheat Sheet

Updated 2026-04-29

Next Topic: Prettier Code Formatter Cheat Sheet

Postman is an API platform that enables developers to design, test, document, monitor, and collaborate on APIs throughout their lifecycle. It provides a desktop application and web interface supporting HTTP, REST, GraphQL, WebSocket, gRPC, MQTT, SSE, MCP, and SOAP protocols. The 2026 v12 release made Postman AI-native and Git-native: collections are stored as YAML in your Git repository, Agent Mode handles tasks in natural language, and a new API Catalog gives teams a centralized view of every service in their organization. Postman centralizes the full API lifecycle—from design and mocking through testing, monitoring, and collaboration—making it an essential platform for API-first development teams.

What This Cheat Sheet Covers

This topic spans 34 focused tables and 252 indexed concepts. Below is a complete table-by-table outline of this topic, spanning foundational concepts through advanced details.

Table 1: HTTP Request TypesTable 2: CollectionsTable 3: Variables and ScopesTable 4: Dynamic VariablesTable 5: EnvironmentsTable 6: Authorization TypesTable 7: Pre-Request ScriptsTable 8: Post-Response Scripts (Tests)Table 9: Request Workflow ControlTable 10: Data-Driven TestingTable 11: Mock ServersTable 12: MonitorsTable 13: Newman (CLI Runner)Table 14: Postman CLITable 15: Code GenerationTable 16: WorkspacesTable 17: API DocumentationTable 18: Postman FlowsTable 19: Testing Advanced FeaturesTable 20: GraphQL SupportTable 21: WebSocket and SSE TestingTable 22: gRPC SupportTable 23: MQTT TestingTable 24: SOAP API TestingTable 25: Performance TestingTable 26: Interceptor and ProxyTable 27: API Schema and OpenAPITable 28: Debugging and ConsoleTable 29: Certificates and SSLTable 30: Request History and ReplayTable 31: API GovernanceTable 32: API Security TestingTable 33: Collaboration FeaturesTable 34: AI Features, Agent Mode & MCP

Table 1: HTTP Request Types

Method	Example	Description
GET	`GET https://api.example.com/users`	• Retrieve data from a server • idempotent and safe — does not modify resources.
POST	`POST https://api.example.com/users` `Body: {"name": "Alice"}`	• Create new resources on the server • non-idempotent, typically includes a request body.
PUT	`PUT https://api.example.com/users/123` `Body: {"name": "Bob", "age": 30}`	• Replace an entire resource completely • idempotent — requires full resource representation.
PATCH	`PATCH https://api.example.com/users/123` `Body: {"age": 31}`	Partial update — modifies only the provided fields of a resource.

Table 1: HTTP Request Types

Method	Example	Description
GET	`GET https://api.example.com/users`	• Retrieve data from a server • idempotent and safe — does not modify resources.
POST	`POST https://api.example.com/users` `Body: {"name": "Alice"}`	• Create new resources on the server • non-idempotent, typically includes a request body.
PUT	`PUT https://api.example.com/users/123` `Body: {"name": "Bob", "age": 30}`	• Replace an entire resource completely • idempotent — requires full resource representation.
PATCH	`PATCH https://api.example.com/users/123` `Body: {"age": 31}`	Partial update — modifies only the provided fields of a resource.