www.postman.com

Report from 9/17/2026, 10:15:04 AM https://www.postman.com
Latest run · lab, cold cache
58
9/17/2026
28-day score · p75 · the standard
5/7 runs — building history (nightly)

Scored by v3 · source-of-truth hashes: score db860d6ac94e · thresholds e94f8b33e500 — verifiable against the canonical scorer.

The 28-day score is the p75 of nightly runs — the stable number to cite. Deterministic metrics (CRR/SSD/TC) show their latest value (they move only when the site changes); timing (TTFUT) and answer-fidelity (AF) are smoothed by 28-day p75 — the same lab-vs-field split Core Web Vitals uses. Synthetic daily measurement, not real-user field data.

Core Agent Vitals badge  Embed this badge

Show your agent-readiness score anywhere — it links back to this report.

[![Core Agent Vitals](https://agentvitals.dev/badge/postman.com.svg)](https://agentvitals.dev/results?url=https%3A%2F%2Fwww.postman.com)
<a href="https://agentvitals.dev/results?url=https%3A%2F%2Fwww.postman.com"><img src="https://agentvitals.dev/badge/postman.com.svg" alt="Core Agent Vitals" height="20"></a>
What AI tells your customers about youAgent confidence: MEDIUM
Business namePostman
CategoryOrganization
Pricenot found
Location1 Market St, Steuart Tower, Suite 0800, San Francisco, CA, 94105, US
Hoursnot found
Productsnot found
DescriptionPostman is a collaboration platform for API development. Postman's features simplify each step of building an API and streamline collaboration so you can create better APIs—faster.

An agent gets the basics but will guess on the gaps. 4/7 applicable facts come from machine-readable structured data.

58
Overall score
weighted CAV (0–100)
FAIL
0–4950–8990–100

Metrics

16%
CRR Content Recovery Poor
0.80
SSD Semantic Signal Density Good
571 tok
TC Token Cost Good
273 ms
TTFUT Time to First Useful Token N/A

Token Cost breakdown

Where the page's tokens go (≈5,560 across regions). 60% is non-content — chrome and boilerplate an agent pays for. Add landmark roles (main/nav/header/footer) so agents can skip it.

Content
40.6% · 2,255
Chrome (nav / header / footer)
58% · 3,223
Boilerplate (cookie / ad)
0% · 0
Other
1.5% · 82

Final screenshot

Final screenshot of https://www.postman.com

Diagnostics

high CRR Content is hidden behind JavaScript

pre-JS raw HTML

Evidence84% of content requires JS
ImpactA non-rendering agent never sees the JS-injected content.
Effort1–4 h

Fix: Server-render or statically generate the main content so a non-JS agent still receives it; make client rendering a progressive enhancement, not the source of truth.

medium TC 59.4% of tokens are non-content (boilerplate/chrome)

agent representation — token decomposition

EvidenceToken decomposition: content 40.6%, chrome 58%, boilerplate 0%, other 1.5%. Only 40.6% of the agent's tokens are real content.
ImpactAn agent pays for boilerplate on every request and has less context left for the real content.
Effort30–90 min

Fix: Strip repeated nav/header/footer/cookie chrome from the agent-visible output; wrap content in <main>/<article> so the extractor keeps signal and drops boilerplate.

Rendered profile: headless

Agent Discoverability 88/100 · Agent Ready

Access & discovery checks — separate from the gated CAV metrics above. Click an issue for business impact, what we measured, and how to fix. · Take the Agent Readiness course →

Agent files & endpoints

llms.txt Found at /llms.txt Learn →
robots.txt (AI bots) Blocks: * (all) Learn →
sitemap.xml Found at /sitemap.xml Learn →
JSON-LD structured data Types: Organization, ItemList Learn →
agents.json Found at /agents.json Learn →
WebMCP endpoint Found at /webmcp.json Learn →
OpenAPI / API docs Found at /openapi.json Learn →

Issues (1)

robots.txt allows AI bots high impact Blocks: * (all)

Business impact If robots.txt blocks AI crawlers you are invisible to ChatGPT, Claude and Perplexity — they skip you and recommend a competitor instead.

What we measured We read /robots.txt and test it against 16 AI user-agents (GPTBot, ClaudeBot, PerplexityBot, …) for a Disallow that blocks them.

How to fix Allow major AI bots to public content; restrict only private paths (/admin, /api).

Learn how to implement →

User-agent: GPTBot
Allow: /
Disallow: /admin/

Spec: https://platform.openai.com/docs/gptbot

Passed audits (11)

✓ No CAPTCHA wall✓ No content-blocking cookie wall✓ Machine-readable prices✓ llms.txt present + valid✓ No login wall on public content✓ Structured data (JSON-LD)✓ XML sitemap present + fresh✓ Server response (TTFB)✓ agents.json discovery✓ WebMCP endpoint✓ API documentation

Transport & Trust (SEC 1.0.0)

HTTPS, HSTS, CSP, sniffing, referrer and CORS posture. Diagnostic only — this does not affect the CAV score. A security header does not make a page more legible to an agent, so scoring it would reward a CDN toggle that changes nothing an agent can recover. We measure it and say so.

80Transport posture (0–100, unscored)
5pass
0warn
1fail
Per-header findings (6)
HeaderEvidence
✅ HTTPSserved over HTTPS
✅ HSTSmax-age=31536000; includeSubDomains; preload
❌ Content-Security-Policyno content-security-policy header
✅ X-Content-Type-Optionsnosniff
✅ Referrer-Policystrict-origin-when-cross-origin
✅ CORS exposureaccess-control-allow-origin: *
Full profile — how to improve · unused JS · network · timing

How to improve

highSplit the heaviest unused bundlehighest leverage

1h8_8qxkozxno.js — 159 KiB transferred, 94.5% unused

EvidenceCDP JS coverage: 150 KiB of this bundle is never executed on load.
Impact~-150 KiB transfer; lower Token Cost + faster agent parse.
Effort30–90 min
FixDynamic-import() the below-the-fold parts of 1h8_8qxkozxno.js, or drop unused dependencies.
mediumBreak up long main-thread tasks

longest task 103 ms (1 total)

EvidenceMain thread blocked 103 ms by the longest task.
ImpactFaster interactivity + content settling.
Effort1–4 h
FixSplit heavy work, defer third-party scripts, move compute off the main thread.
mediumCut total transfer weight

2.6 MB total

Evidence2.6 MB transferred.
ImpactCheaper, faster fetch on slow links.
Effort1–3 h
FixEnable Brotli, serve WebP/AVIF images, defer non-critical resources.

Third-party impact

12 third-party requests · 278 KiB (10.4% of transfer) — code an agent must also fetch/run before your content settles. Fewer, lazier third-parties = faster, cheaper agent reads.

Third-party domainReqsTransferMain-thread
transcend-cdn.com4161 KiB
google.com2100 KiB
cloudflareinsights.com110 KiB
marketo.net27 KiB
sentry.io30 KiB

Wasted JavaScript (by bundle)

Transfer-accurate — each bundle's transfer size × its unused %, ranked by wasted bytes (the biggest code-splitting wins). Unused JS also inflates Token Cost (TC).

BundleTransferUnusedWasted
https://www.postman.com/_mk-www-next/_next/static/chunks/1h8_8qxkozxno.js159 KiB94.5%150 KiB
https://www.postman.com/_mk-www-next/_next/static/chunks/20k-uhgxuvkfn.js185 KiB55%102 KiB
https://accounts.google.com/gsi/client 3P99 KiB80.8%80 KiB
https://transcend-cdn.com/cm/1f0cf102-c592-4eb4-834f-e07f2fe68ef1/ui.js 3P99 KiB42.3%42 KiB
https://www.postman.com/_mk-www-next/_next/static/chunks/0gd7surghw1xn.js31 KiB97.3%30 KiB
https://evs.cdp.postman.com/6C88CYC9Neo3CfCCSD2BHa/xae7HN2EeK3mLEpFypgqAS.min.js30 KiB79.4%24 KiB
https://www.postman.com/_mk-www-next/_next/static/chunks/18gxox8ob3-hw.js45 KiB49.9%23 KiB
https://www.postman.com/_mk-www-next/_next/static/chunks/1uinv8s-retzm.js23 KiB99.1%23 KiB
https://transcend-cdn.com/cm/1f0cf102-c592-4eb4-834f-e07f2fe68ef1/airgap.js 3P56 KiB38.7%22 KiB
https://www.postman.com/_mk-www-next/_next/static/chunks/2yufwd_5g1wdo.js14 KiB99.1%14 KiB
https://www.postman.com/_mk-www-next/_next/static/chunks/0gtrzc5s122bp.js14 KiB99%14 KiB
https://www.postman.com/_mk-www-next/_next/static/chunks/20k35nj4lcw07.js22 KiB59.7%13 KiB
https://www.postman.com/_mk-www-next/_next/static/chunks/2jfevzkdo84rf.js12 KiB99.1%12 KiB
https://www.postman.com/_mk-www-next/_next/static/chunks/1dru2af_ymnqt.js12 KiB98.9%12 KiB
https://www.postman.com/_mk-www-next/_next/static/chunks/32dxc1u_z9jt4.js12 KiB99%12 KiB

Network

204Requests
2675 KiBTransferred
42Scripts
10.4%3rd-party
1Long tasks
Script (42)
1120 KiB
Image (52)
492 KiB
Fetch (83)
479 KiB
Font (7)
332 KiB
Stylesheet (13)
117 KiB
Manifest (2)
75 KiB
Document (1)
55 KiB
Other (1)
6 KiB
XHR (1)
0 KiB
Media (2)
0 KiB
Heaviest requests (30)
URLTypeStatusTransfer
https://voyager.postman.com/logo/external/black-and-white/mercedez-benz-company-logo-black-and-white.svgImage200226 KiB
https://www.postman.com/_mk-www-next/_next/static/chunks/20k-uhgxuvkfn.jsScript200185 KiB
https://www.postman.com/_mk-www-next/_next/static/chunks/1h8_8qxkozxno.jsScript200159 KiB
https://voyager.postman.com/logo/external/black-and-white/hubspot-company-logo-black-and-white.svgImage200113 KiB
https://www.postman.com/_mk-www-next/_next/static/media/Inter_SemiBold-s.p.0b2q24wpfrjer.woff2Font200110 KiB
https://www.postman.com/_mk-www-next/_next/static/media/Inter_Regular-s.p.24hso1u1mrn1u.woff2Font200100 KiB
https://accounts.google.com/gsi/clientScript20099 KiB
https://transcend-cdn.com/cm/1f0cf102-c592-4eb4-834f-e07f2fe68ef1/ui.jsScript20099 KiB
https://transcend-cdn.com/cm/1f0cf102-c592-4eb4-834f-e07f2fe68ef1/airgap.jsScript20056 KiB
https://www.postman.com/Document20055 KiB
https://www.postman.com/_mk-www-next/_next/static/chunks/18gxox8ob3-hw.jsScript20045 KiB
https://www.postman.com/_mk-www-next/_next/static/media/Degular_Display_Semibold-s.p.0nsigqtqnbsbi.woff2Font20041 KiB
https://www.postman.com/_mk-www-next/_next/static/chunks/0dka-48wye5z0.jsScript20040 KiB
https://www.postman.com/_mk-www-next/_next/static/media/DegularDisplay_Bold-s.p.3dlsqzrtqv-q6.woff2Font20038 KiB
https://www.postman.com/manifest.webmanifestManifest20037 KiB
https://www.postman.com/manifest.webmanifestManifest20037 KiB
https://www.postman.com/explore/__next._tree.txt?_rsc=5CB68i4pnAekjehfFetch20037 KiB
https://www.postman.com/explore/mcp-servers/__next._tree.txt?_rsc=5CB68i4pnAekjehfFetch20037 KiB
https://www.postman.com/_mk-www-next/_next/static/chunks/1_ywwgc0t6lk4.cssStylesheet20033 KiB
https://voyager.postman.com/logo/external/black-and-white/intuit-company-logo-black-and-white.svgImage20032 KiB
https://www.postman.com/_mk-www-next/_next/static/chunks/0gd7surghw1xn.jsScript20031 KiB
https://evs.cdp.postman.com/6C88CYC9Neo3CfCCSD2BHa/xae7HN2EeK3mLEpFypgqAS.min.jsScript20030 KiB
https://www.postman.com/_mk-www-next/_next/static/chunks/1uinv8s-retzm.jsScript20023 KiB
https://www.postman.com/_mk-www-next/_next/static/chunks/2g0d8d0d4kr0i.jsScript20023 KiB
https://www.postman.com/_mk-www-next/_next/static/chunks/20k35nj4lcw07.jsScript20022 KiB
https://voyager.postman.com/logo/external/black-and-white/cover-genius-company-logo-black-and-white.svgImage20022 KiB
https://www.postman.com/_mk-www-next/_next/static/chunks/06grdt1usfka9.cssStylesheet20022 KiB
https://www.postman.com/_mk-www-next/_next/static/chunks/0-odm49xi8ge-.jsScript20022 KiB
https://www.postman.com/_mk-www-next/_next/static/chunks/23r3_v0rtz7-m.cssStylesheet20020 KiB
https://www.postman.com/new-postman/__next._index.txt?_rsc=yIp22O3xgPPxC28XFetch20019 KiB

Long tasks (>50 ms)

StartDuration
551 ms103 ms
Analyzing…
running mobile + desktop · ~30s