Connect Postman to Elastic Security

Both apps 41Postman 31Elastic Security 10

• Trigger
  New Collection

  Triggered when a new collection is created.

• Trigger
  New Environment

  Triggers when you need to list environments. Optionally filter by workspace.

• Trigger
  New Mock Server

  Triggers when you need to list mock servers. Optionally filter by workspace.

• Trigger
  New Monitor

  Triggered when a new monitor is created in Postman.

• Trigger
  New Workspace

  Triggered when a new workspace is created.

• Action
  Create Collection

  Creates a new Postman collection.

• Action
  Create Environment

  Creates a new Postman environment with optional variables.

• Action
  Create Folder

  Creates a folder inside a collection.

• Action
  Create Mock Server

  Creates a new mock server from a collection.

• Action
  Create Monitor

  Creates a new Postman monitor for a collection.

• Action
  Create Request

  Creates a new request in a Postman collection.

• Action
  Create Workspace

  Creates a new Postman workspace.

• Action
  Delete Collection

  Delete a collection by ID.

• Action
  Delete Environment

  Delete an environment by ID.

• Action
  Delete Mock Server

  Delete a mock server by ID.

• Action
  Delete Monitor

  Delete a monitor by ID.

• Action
  Delete Workspace

  Delete a workspace by ID.

• Action
  Find Collection by ID

  Returns a single collection by ID.

• Action
  Find Environment by ID

  Returns a single environment by ID.

• Action
  Find Mock Server by ID

  Returns a single mock server by ID.

• Action
  Find Monitor by ID

  Returns a single monitor by ID.

• Action
  Find Workspace by ID

  Returns a single workspace by ID.

• Action
  List Collections

  List all collections accessible to the API key, optionally filtered by workspace.

• Action
  List Environments

  List all environments accessible to the API key, optionally filtered by workspace.

• Action
  List Workspaces

  List all workspaces accessible to the API key.

• Action
  Run Monitor

  Runs a Postman monitor and returns the run results.

• Action
  Update Collection

  Replaces an existing collection with the name, requests and settings you supply.

• Action
  Update Environment

  Updates an existing environment.

• Action
  Update Mock Server

  Update a mock server's config.

• Action
  Update Monitor

  Updates an existing monitor.

• Action
  Update Workspace

  Updates an existing workspace.

• Action
  Add case comment

  Adds a user comment, or attaches an alert, to an existing Elastic Security case and returns the updated case.

• Action
  Add detection rule

  Creates a detection rule in Elastic Security (custom query, EQL, ES|QL, threshold, indicator match, new terms, saved query or machine learning).

• Action
  Add exception list item

  Creates an exception item in an existing Elastic Security exception list, so matching events stop producing detection alerts.

• Action
  Delete detection rule

  Deletes a detection rule, identified by its internal id or its stable rule ID, and returns the deleted rule.

• Action
  Find cases

  Searches cases by text in their title or description, optionally narrowed by status, severity, tags, owner, assignee, reporter, category or creation date.

• Action
  Find detection rules

  Finds detection rules in Elastic Security matching a filter, such as by name, tag or enabled state.

• Action
  Get detection rule

  Returns a detection rule's full details, looked up by its internal id or its stable rule_id.

• Action
  Get exception list item

  Returns one exception list item, looked up by its id or its human-readable item ID.

• Action
  Update case

  Updates an existing case's title, description, status, severity, tags, assignees and other fields.

• Action
  Update detection rule

  Updates selected settings of an existing detection rule, leaving any setting you leave blank unchanged. Returns the updated rule.

No trigger or action matches that. Ask your agent to add it: it reads the API documentation and builds what you describe.