Warnings in API requests

Postman applies security rules configured for your API requests when you send requests to any API using either the Postman web app or the Postman desktop app. A security warning doesn't mean that your API is broken. Instead, it indicates that there are potential security risks that your API might be vulnerable to. Postman highlights these security warnings and helps you understand their implications and possible ways to patch the warnings.

Rule customization. Enterprise teams can also customize the rules that Postman applies to API requests. For more information, see Configuring API Security rules.

Viewing security warnings for API requests

When you send an API request, Postman scans it for potential security risks. If it finds any, Postman adds the number of warnings to the Security tab in the response.

To learn about API security warnings and how to hide warnings that aren't relevant to your team, see Viewing security warnings.

For the list of all the security warnings that Postman might show for API requests, see Security warnings.