> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.usepassport.ai/api-reference/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.usepassport.ai/_mcp/server.

# API Reference

> Passport from Postman is a secure API access system that lets your team call authenticated APIs without distributing or exposing real secrets.


## API Docs

- API Reference > Namespaces [List namespaces](https://docs.usepassport.ai/api-reference/namespaces/list-namespaces.md)
- API Reference > Namespaces [Create a namespace](https://docs.usepassport.ai/api-reference/namespaces/create-namespace.md)
- API Reference > Namespaces [Get a namespace](https://docs.usepassport.ai/api-reference/namespaces/get-namespace.md)
- API Reference > Namespaces [Delete a namespace](https://docs.usepassport.ai/api-reference/namespaces/delete-namespace.md)
- API Reference > Namespaces [Update a namespace](https://docs.usepassport.ai/api-reference/namespaces/update-namespace.md)
- API Reference > Resource Groups [List resource groups in a namespace](https://docs.usepassport.ai/api-reference/resource-groups/list-resource-groups.md)
- API Reference > Resource Groups [Create a resource group](https://docs.usepassport.ai/api-reference/resource-groups/create-resource-group.md)
- API Reference > Resource Groups [Get a resource group](https://docs.usepassport.ai/api-reference/resource-groups/get-resource-group.md)
- API Reference > Resource Groups [Delete a resource group](https://docs.usepassport.ai/api-reference/resource-groups/delete-resource-group.md)
- API Reference > Resource Groups [Update a resource group](https://docs.usepassport.ai/api-reference/resource-groups/update-resource-group.md)
- API Reference > Secret References [List secret references in a namespace](https://docs.usepassport.ai/api-reference/secret-references/list-secret-references.md)
- API Reference > Secret References [Create a secret reference](https://docs.usepassport.ai/api-reference/secret-references/create-secret-reference.md)
- API Reference > Secret References [Get a secret reference](https://docs.usepassport.ai/api-reference/secret-references/get-secret-reference.md)
- API Reference > Secret References [Delete a secret reference](https://docs.usepassport.ai/api-reference/secret-references/delete-secret-reference.md)
- API Reference > Secret References [Update a secret reference](https://docs.usepassport.ai/api-reference/secret-references/update-secret-reference.md)
- API Reference > Endpoints [List endpoints in a namespace](https://docs.usepassport.ai/api-reference/endpoints/list-endpoints.md)
- API Reference > Endpoints [Create an endpoint](https://docs.usepassport.ai/api-reference/endpoints/create-endpoint.md)
- API Reference > Endpoints [Get an endpoint](https://docs.usepassport.ai/api-reference/endpoints/get-endpoint.md)
- API Reference > Endpoints [Delete an endpoint](https://docs.usepassport.ai/api-reference/endpoints/delete-endpoint.md)
- API Reference > Secret Bindings [List an endpoint's secret bindings](https://docs.usepassport.ai/api-reference/secret-bindings/list-secret-bindings.md)
- API Reference > Secret Bindings [Replace an endpoint's secret bindings](https://docs.usepassport.ai/api-reference/secret-bindings/replace-secret-bindings.md)
- API Reference > Access Requests [List access requests](https://docs.usepassport.ai/api-reference/access-requests/list-access-requests.md)
- API Reference > Access Requests [Create an access request](https://docs.usepassport.ai/api-reference/access-requests/create-access-request.md)
- API Reference > Access Requests [Get an access request](https://docs.usepassport.ai/api-reference/access-requests/get-access-request.md)
- API Reference > Access Requests [Cancel a pending access request](https://docs.usepassport.ai/api-reference/access-requests/cancel-access-request.md)
- API Reference > Access Requests [Approve a pending access request](https://docs.usepassport.ai/api-reference/access-requests/approve-access-request.md)
- API Reference > Access Requests [Reject a pending access request](https://docs.usepassport.ai/api-reference/access-requests/reject-access-request.md)
- API Reference > Access Grants [List access grants](https://docs.usepassport.ai/api-reference/access-grants/list-access-grants.md)
- API Reference > Access Grants [Get an access grant](https://docs.usepassport.ai/api-reference/access-grants/get-access-grant.md)
- API Reference > Access Grants [Revoke an access grant](https://docs.usepassport.ai/api-reference/access-grants/revoke-access-grant.md)

## OpenAPI Specification

The raw OpenAPI 3.1 specification for this API is available at:
- [OpenAPI JSON](https://docs.usepassport.ai/openapi.json)
- [OpenAPI YAML](https://docs.usepassport.ai/openapi.yaml)


> **Note:** This page contains both a page directory (above) and the landing page content (below). The page directory is generated for agent use and does not appear on the landing page.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.usepassport.ai/api-reference/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.usepassport.ai/_mcp/server.

# Passport API Reference Overview

The Passport API lets you manage your Passport setup programmatically, instead of through the Passport app. Use it to provision namespaces, register endpoints, and control who can access them.

Namespaces group your team's APIs, and each one holds resource groups, secret references, and endpoints. A secret reference points to a credential in your secret store without exposing it, and a secret binding maps that reference to a specific endpoint so the Passport Proxy can resolve it at request time. Endpoints are the individual APIs your team calls through the proxy.

You can also use the API to submit and manage requests for access to a resource group or endpoint. When an access request is approved, Passport mints an access grant that you can list, inspect, or revoke.

For example, you might create a namespace for your payments service, add a `stripe-secret-key` secret reference, register the `POST /v1/charges` endpoint, and bind that reference to its `Authorization` header.

Every request must include an API key as a bearer token in the `Authorization` header.

Rate limits apply to every request.