Postman has launched Passport by Postman as a standalone API security product, giving organizations secretless access to approved APIs for both human users and AI agents. The platform keeps real API credentials inside customer environments while providing granular control, full attribution, and fast revocation to reduce exposure from leaked secrets. #Postman #PassportbyPostman #AbhinavAsthana
Keypoints
- Passport by Postman is now generally available as a standalone API security product.
- It keeps real API credentials inside customer environments instead of exposing them to users or agents.
- Security teams get full attribution, granular access control, and rapid revocation.
- AI agents and developers can call approved APIs without ever holding the real secret.
- Sub-agents receive task-scoped identities and inherit only limited permissions from their parent.
Read More: https://www.helpnetsecurity.com/2026/09/15/postman-passport/