merge_environment_fork

What merge_environment_fork does on Postman

AI agents use merge_environment_fork to create or update resources in Postman, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Postman environment.

Why merge_environment_fork is rated Medium

Merging a forked environment modifies the parent environment by incorporating changes from the fork. This is a reversible data modification (Write category). Severity is medium because it affects shared configuration/environment state that could impact API testing workflows, but the change is intentional, contextual, and can be manually corrected or reverted through version control or re-forking.

From the tool's definition Tool name 'merge_environment_fork' and description 'Merge a forked environment back into its parent' indicate a modification operation that combines environment state from a fork into a parent, which is a write/update action.

The rule that runs merge_environment_fork safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Postman, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For merge_environment_fork, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "merge_environment_fork": {
      "limits": [
        {
          "counter": "merge_environment_fork_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about merge_environment_fork