An API client your coding agent can use over MCP
Claude Code, Codex and Cursor can call Gostman through MCP in place of improvised curl commands. They use the collection you already have, so requests, variables and environments are the ones your team reviewed.
gostman mcpHow secrets are handled
- Requests use {{name}} placeholders; values are filled in inside Gostman
- In everything the agent reads, variable values and credentials are replaced with their names
- Agents can reach localhost, hosts your collection already uses and hosts you allow explicitly
- Responses are capped and can be narrowed to the fields that matter
Limits
This guards against accidental leaks. It does not protect against a server that echoes a secret back in a transformed form.