Using API Clients
Use the REST API with popular API clients like Postman, Insomnia, and Yaak
This guide shows you how to configure popular API clients to work with the REST API using OAuth 2.0 authentication.
Download the Postman collection to import all endpoints with OAuth2 auth pre-configured. Compatible with Postman, Yaak, Insomnia, and other clients that support the Postman Collection v2.1 format.
Postman
Postman is a popular API client with testing, collaboration, and automation features for working with REST APIs.
Prerequisites
Before you begin, make sure you have:
1. Create an OAuth2 Application
Register an OAuth2 application in Prisma Console so Postman can request tokens on your behalf:
- Navigate to Prisma Console and log in
- Click the 🧩 Integrations tab in the left sidebar
- Under the "Published Applications" section, click New Application
- Fill in your application details:
- Name: Postman API Client
- Description: Brief description of your application (Optional)
- Redirect URI:
https://oauth.pstmn.io/v1/callback
- Click Continue
- Important: Copy your Client ID and Client Secret immediately and store them securely
The redirect URI https://oauth.pstmn.io/v1/callback is Postman's default callback URL when using the "Authorize using browser" option.
2. Configure OAuth 2.0 in Postman
Configure Postman to request a token from Prisma Auth:
- Open Postman and create a new HTTP request
- Set the request method to POST
- Set the URL to
https://api.prisma.io/v1/projects - Navigate to the Authorization tab
- Set Auth Type to OAuth 2.0
- Under Configure New Token, enter the following values:
| Parameter | Value |
|---|---|
| Token Name | REST API Token |
| Grant Type | Authorization Code |
| Callback URL | https://oauth.pstmn.io/v1/callback |
| Authorize in Browser | true (checked) |
| Auth URL | https://auth.prisma.io/authorize |
| Access Token URL | https://auth.prisma.io/token |
| Client ID | your-client-id |
| Client Secret | your-client-secret |
| Scope | workspace:admin |
- Click Get New Access Token
- A browser window opens for you to complete the authorization flow
- Return to Postman and click Use Token to attach it to your request
- Verify that your new token appears under Current Token at the top of the Authorization tab
3. Make your first request
With authentication configured, you can now create a project:
- In the request body, select raw and JSON format
- Add the following JSON payload:
{
"name": "My Postman Database",
"region": "us-east-1"
}- Click Send
A successful response contains the new project's details.
Insomnia
Insomnia is an open-source API client with a clean interface for testing and debugging HTTP requests.
Prerequisites
Before you begin, make sure you have:
1. Create an OAuth2 Application
Register an OAuth2 application in Prisma Console so Insomnia can request tokens on your behalf:
- Navigate to Prisma Console and log in
- Click the 🧩 Integrations tab in the left sidebar
- Under the "Published Applications" section, click New Application
- Fill in your application details:
- Name: Insomnia API Client
- Description: Brief description of your application (Optional)
- Redirect URI:
https://app.insomnia.rest/oauth/redirect
- Click Continue
- Important: Copy your Client ID and Client Secret immediately and store them securely
Insomnia uses https://app.insomnia.rest/oauth/redirect as the default OAuth callback URL for local authentication flows.
2. Configure OAuth 2.0 in Insomnia
Configure Insomnia to request a token from Prisma Auth:
- Open Insomnia and create a new HTTP request
- Set the request method to POST
- Set the URL to
https://api.prisma.io/v1/projects - Navigate to the Auth tab
- Set the authentication type to OAuth 2.0
- Under Configuration, enter the following values:
| Parameter | Value |
|---|---|
| Grant Type | Authorization Code |
| Authorization URL | https://auth.prisma.io/authorize |
| Access Token URL | https://auth.prisma.io/token |
| Client ID | your-client-id |
| Client Secret | your-client-secret |
| Redirect URL | https://app.insomnia.rest/oauth/redirect |
| Scope (Under Advanced Options) | workspace:admin |
- Click Fetch Tokens
- A browser window opens for you to complete the authorization flow
- Return to Insomnia and verify that the access token has been retrieved
- The token will be automatically attached to your requests
3. Make your first request
With authentication configured, you can now create a project:
- Navigate to the Body tab and select JSON format
- Add the following JSON payload:
{
"name": "My Insomnia Database",
"region": "us-east-1"
}- Click Send
A successful response contains the new project's details.
Yaak
Yaak is a lightweight, open-source, and offline API client that works with Git.
Prerequisites
Before you begin, make sure you have:
1. Create an OAuth2 Application
Register an OAuth2 application in Prisma Console so Yaak can request tokens on your behalf:
- Navigate to Prisma Console and log in
- Click the 🧩 Integrations tab in the left sidebar
- Under the "Published Applications" section, click New Application
- Fill in your application details:
- Name: Yaak API Client
- Description: Brief description of your application (Optional)
- Redirect URI:
https://devnull.yaak.app/callback
- Click Continue
- Important: Copy your Client ID and Client Secret immediately and store them securely
The redirect URI can be any valid URL. Yaak intercepts the OAuth callback regardless of the redirect URI, as long as it matches what's registered with the provider.
2. Configure OAuth 2.0 in Yaak
Configure Yaak to request a token from Prisma Auth:
- Open Yaak and create a new HTTP request
- Set the request method to POST
- Set the URL to
https://api.prisma.io/v1/projects - Navigate to the Auth tab
- Set the authentication type to OAuth 2.0
- Enter the following values:
| Parameter | Value |
|---|---|
| Grant Type | Authorization Code |
| Authorization URL | https://auth.prisma.io/authorize |
| Token URL | https://auth.prisma.io/token |
| Client ID | your-client-id |
| Client Secret | your-client-secret |
| Redirect URL | https://devnull.yaak.app/callback |
| Scope | workspace:admin |
- Click Get Token
- A browser window opens for you to complete the authorization flow
- Return to Yaak and verify that the access token has been retrieved
- The token will be automatically attached to your requests
3. Make your first request
With authentication configured, you can now create a project:
- Navigate to the Body tab and select JSON format
- Add the following JSON payload:
{
"name": "My Yaak Database",
"region": "us-east-1"
}- Click Send
A successful response contains the new project's details.
