Postman Acceptable Use Policy

Postmanaut standing in front of scales of justice. Illustration.

Effective Date: July 16, 2025

This Acceptable Use Policy (the "AUP") governs and applies to your (whether an individual or an organization) use, and use by any individual that uses the Postman Services under your Postman account (each and collectively, a "User"), on all versions of the software and services offered by Postman, Inc. and its affiliates ("We" or "Postman"), including a Postman subscription, the Postman API, Postman AI features, public Postman API Network, Postman's community forum(s), Free Trial Services and Beta Previews, and all related Postman products and services (collectively, "Postman Services" or "Services"), as well as on the Postman website at http://www.postman.com/ ("Postman Site" or "Site").

If referenced by the parties in their Agreement (defined below), this AUP operates as an incorporated attachment to such Agreement. By accessing and/or using the Postman Site, a User agrees to the latest version of this AUP. Unless separately defined in this AUP, all capitalized terms in this AUP have the meanings given in the applicable Agreement.

This is intended to be an illustrative, and not exhaustive, list of inappropriate actions and prohibited material. Actions (whether intentional or inadvertent) or material that Postman considers inappropriate or in violation of this AUP shall be, at Postman's reasonable but sole discretion, grounds for (i) restriction of access to the Postman Site, Postman Services, Postman Materials, Third-Party Content, and/or any Customer Content; (ii) removal of offending material; (iii) suspension and/or termination of a User's Postman Account in accordance with the terms of the applicable Agreement; and/or (iv) any other rights or remedies available to Postman in accordance with the Agreement and under applicable law. A User's violation of this AUP may be considered a material breach of the applicable agreement governing that User's use of the Services, whether the Postman Terms of Service or a negotiated master agreement entered into by Postman and an organization, or the Postman Website Terms of Use, as applicable (each and collectively, the "Agreement").

Prohibited Conduct

Users may not:

  1. make any content on the Services public without the lawful and authorized rights to do so;
  2. scrape, data mine, extract, duplicate, or copy any features, functions, or user interfaces of the Postman Services, Software, Site, and/or Postman Materials and any content therein, for the purposes of creating products, applications, data sets, or bots, without the written authorization of Postman and/or the owner of the workspace in which the content is hosted;
  3. engage in activities that degrade, overburden, interfere with and/or restrict the use, security, and/or operation of the Postman Services and/or Postman Site, including by sending, triggering, or receiving excessive data transfers or requests, scraping, or engaging in steps to overwhelm Postman's infrastructure (e.g. denial of service attacks or similar activities);
  4. introduce any malicious code, virus, malware, or any other material that disrupts, slows down, or causes the Postman Services to malfunction;
  5. disassemble, decompile, unlock, reverse engineer, or decode the Postman Services (or Software);
  6. tamper with or circumvent any security or authentication measures or attempt to gain unauthorized access to Postman's systems;
  7. claim that any content generated by Postman's AI features was generated by a human;
  8. grant any rights provided to a User (or the User's organization) to any third party and/or resell, or lease, time-share, lend, or rent the Postman Services (or Software);
  9. perform significant load testing or security testing of the Postman Services and/or Postman Site without first obtaining an authorized Postman Security Team representative's written consent; or
  10. use the Postman Services to perform significant load testing or security testing on any recipients without first receiving their prior express and informed authorization.

Except as may be (i) explicitly permitted under applicable, mandatory law or (ii) explicitly authorized in advance, in writing, by an authorized representative of Postman, Users may not use the Postman Services, Postman Site, Postman Materials, Third-Party Content, Customer Content, or any other content associated with the Postman Services:

  1. for any illegal purpose;
  2. for the purposes of cookie tracking, sending unsolicited communications, transmitting spam, and/or selling personal information;
  3. for a use that goes beyond the User's organization's internal business purpose as provided in the Agreement with Postman, as applicable, or otherwise commercially exploit the Postman Services or Software;
  4. to create or distribute content that violates contractual restrictions or other third party rights, including without limitation intellectual property rights or privacy-related rights of any person or entity;
  5. to make automated decisions that may affect an individual's rights;
  6. to support operation of any weapon, military equipment, or critical infrastructure;
  7. to seek to intentionally use Postman's Services in a manner that violates this AUP;
  8. to seek or provide advice that would generally be provided by a licensed professional; or
  9. to engage in erotic, romantic, or sexually explicit chat with Postman's AI features.

Content Restrictions

Users may not upload, store, post, generate, display, or transmit any content that:

  • violates applicable laws or regulations;
  • involves, promotes, incites, supports, facilitates, or threatens violence, terrorism, sexual exploitation, abuse, or other serious harm, whether online or offline;
  • is harassing, threatening, harmful, tortious, defamatory, deceptive, libelous, abusive, violent, obscene, vulgar, infringing of another's rights or invasive of another's privacy, hateful, or discriminatory and/or advocating discrimination against individuals or groups;
  • advocates, promotes, facilitates, incites, or advances criminal hacking, cracking, or phishing, or any other criminal or illegal activity; or
  • has been previously removed for violating this AUP.

Others. Users will not permit, facilitate, allow, or encourage others (including automated systems or bots) to commit any of the actions above.

Postman may monitor compliance with this AUP and investigate any potential violations. Postman may report any activity that we suspect violates any law or regulation to law enforcement officials, regulators or other appropriate third parties, and cooperate with them to investigate and prosecute illegal conduct. Postman's reporting may include disclosing information related to the violation of this AUP.

Your AI strategy is only as strong as your APIs.

Postman helps teams collaboratively build APIs that power workflows and intelligent agents. With support for the Model Context Protocol (MCP), your APIs are integration ready. Learn how top teams avoid pitfalls and rescue APIs from chaos.

Learn more