We’re sharing this release early because we need your feedback about making API requests using the web, managing your API operations in the cloud, and everything else that you need to do with Postman on the web. Please jump into the beta and push it, poke it, and give it your best shot.
Then, go ahead and leave your feedback below so we can help answer your questions, listen to your ideas, and route any bugs or other issues to right channels.
Your feedback will help push forward everything we’re doing with this effort, and will help set the stage for Postman web agents and other features we have planned on the roadmap for you.
I can see a local server exposed in port 10533 running with Postman agent.
Isn’t running a local server exposed via http a security risk? Not sure if there are any severe vulnerabilities as of now with the agent but can lead to in the future.
The server exposed by Postman agent can be accessed from any website. Looks like CORs is allowed for all domains.
Got the following header in GET http://localhost:10533/knockknock Access-Control-Allow-Origin:*
Due to browser limitations only HTTP based communication is possible for the locally installed agent from our web platform.
For that reason we rely on a remote servers based trust mechanism to verify both the web platform and the agent, and only after successful verification does the agent actually work.
With this method of verification CORS based blocking is not required and enable the agent to be more versatile.
Have a hack at it! Your feedbacks are most welcome.
I have installed the Agent and it’s running but in the Web app, I see the message, Make sure the agent is installed and check the toolbar to see if it’s running.
@krishnakumar.tce did you click on the use / switch Postman Agent Link you get in the message “Error: Browser does not support cross-origin request | Use Postman Desktop agent.”? <–if you switch it on there it will run.
And you confirmed Agent is running? I’d also look at your processes to make sure you have Postman Agent process in motion for it to pick up and work with.
could it be anything to do with the proxy that my company uses for external communication.
My desktop postman app works fine and it uses the system proxy in the Postman settings.