Changelog

Passport is now generally available. With Passport, you can give your team access to the authenticated APIs they need without handing out the real secrets behind them. Every request is resolved inside your own cloud.

The Passport Proxy, app, and CLI work together to keep secrets secure. The Proxy resolves secret references before forwarding each request. The app issues those references and manages access. The CLI authenticates your machine and either sends requests directly or routes existing tools like curl through the proxy.

The Passport CLI is now generally available, with full production support. Run passport login to authenticate, then passport setup to connect your machine to the Passport Proxy. Use passport request to forward HTTPS requests through the proxy using secret references instead of real secrets. A local daemon transparently routes requests from external clients like curl, scripts, and SDKs. Run passport whoami at any time to check your identity and API access. You can also use passport logs to get visibility into the activity of the local daemon and the commands you run, which is useful for troubleshooting.

Passport from Postman is now available! Passport is a secure API access system that lets your team call authenticated APIs without distributing or exposing real secrets.

Passport provides the following benefits:

• Secure by design — Secrets are resolved inside your cloud and never leave it. Every request is cryptographically authenticated and every call is audited.

• Granular, revocable access — Access is granted per API, not per team or environment. Passport Admins can approve or revoke access to a specific API at any time.

• No code changes required — External clients like curl, scripts, and SDKs route through a local daemon transparently. Passport works with the tools your developers already use.

• Compliance-friendly — Secrets never pass through an external network, making Passport suitable for teams in regulated industries where third-party secret exposure is a risk.

• Bring your own secret store — Passport connects to HashiCorp Vault, AWS Secrets Manager, and Google Cloud Secret Manager.