Postman
NewCoding agents

Handling a leaked credential with the Postman plugin

Our short summary of Postman’s engineering write-up. The full story, with all the detail, is on their blog.

Read the full write-up on blog.postman.com (opens in a new tab)

Problem

A leaked API token was discovered while the engineer was away from a computer.

Solution

They created a coding agent with the Postman plugin that uses the CLI or MCP server to locate the leak, identify the source, and record an audit trail, all from a mobile app.

Want the architecture, code and numbers? They’re in the original post.

Read the full write-up on blog.postman.com (opens in a new tab)

More from Coding agents

All Coding agents write-ups