M
MCP Directory CURATED DIRECTORY
911 MCP servers indexed
中文
← Back to directory
COMPARE UP TO 4 SERVERS

Compare MCP servers

Compare scores, permissions, risks, and fit in one decision-focused table.

DimensionPostman MCP ServerConnect AI agents directly to the Postman API.NPM Sentinel MCP ServerAI-powered NPM package analysis MCP server
FMRS55 / 100 · C79 / 100 · B
Reliability9 / 2012 / 20
Security and permissions9 / 2016 / 20
Maintenance11 / 2018 / 20
Documentation13 / 2018 / 20
Setup experience13 / 2015 / 20
Best for
  • Development teams managing API assets in Postman
  • Users who need collection, specification, and environment context in coding assistants
  • Developers who need generated API client code
  • Developers auditing NPM dependencies within AI workflows
  • Teams performing supply chain security assessments
  • Users of Claude Desktop, Cursor, or VS Code
Not for
  • Users who need a remote server to access APIs on their local workstation
  • Users who do not use Postman workspaces, collections, specifications, or environments
  • Deployments unable to provide OAuth authorization or a valid Postman API key
  • Projects outside the NPM ecosystem (e.g., pure Python/Go)
  • Environments without network access to deps.dev, OSV.dev, and the npm registry
  • Scenarios requiring maintenance by an official upstream vendor
Required permissions
  • The remote OAuth flow requires OAuth authorization
  • The EU remote server and local server require a valid Postman API key
  • The local process receives the API key through the POSTMAN_API_KEY environment variable
  • Network access to the NPM registry and external services (deps.dev, OSV.dev, OpenSSF, npms.io, GitHub)
  • Read access to workspace lockfiles (pnpm-lock.yaml, package-lock., yarn.lock) for cache invalidation
Risks and side effects
  • The server can perform management operations on collections, workspaces, and environments, which may modify Postman resources
  • API keys and Authorization Bearer credentials are sensitive authentication data and should not be exposed
  • The remote server cannot access APIs on the user's workstation
  • Third-party READMEs and changelogs are untrusted external content; they are wrapped in tags with _meta flags but should still be handled cautiously
  • Depends on availability and accuracy of external services
  • Batch requests are capped at 25 packages to prevent registry enumeration; larger sets require batching
  • Third-party open source project, not officially maintained by NPM or Anthropic
Supported clientsClaude Code, Claude Desktop, Cursor, VS Code, Codex, Antigravity CLI, GitHub Copilot CLI, Kiro, Gemini CLIClaude Desktop, VS Code, Cursor
Tools019