> ## Documentation Index
> Fetch the complete documentation index at: https://developer.vanta.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Postman setup

> Import the Vanta Postman collections and start testing requests in minutes.

The Vanta Postman collections cover every public API endpoint, paired with a shared environment for authentication and base URLs. Each API ships as its own collection, so you can download only what you need.

## Downloads

Download a collection for each API you plan to use.

<a href="/files/vanta.postman_environment.json" download>
  <Card title="Vanta environment" icon="gear">
    Shared variables for authentication and base URLs. Used by every collection below.
  </Card>
</a>

<CardGroup cols={3}>
  <a href="/files/manage-vanta.postman_collection.json" download>
    <Card title="Manage Vanta" icon="sliders">
      Manage your Vanta tenant: tests, controls, vendors, people, and more.
    </Card>
  </a>

  <a href="/files/build-integrations.postman_collection.json" download>
    <Card title="Build Integrations" icon="plug">
      Push resources from your platform into Vanta.
    </Card>
  </a>

  <a href="/files/auditor-api.postman_collection.json" download>
    <Card title="Auditor API" icon="clipboard-check">
      Run an audit programmatically using the Conduct an Audit endpoints.
    </Card>
  </a>
</CardGroup>

## Setup

<Steps>
  <Step title="Install Postman">
    Download Postman from the [official site](https://www.postman.com/downloads/) if you don't have it already.
  </Step>

  <Step title="Import the environment and your collections">
    1. Open Postman and click **Import** in the upper-left corner.
    2. Drag in (or select) the environment file and at least one collection from the downloads above.
    3. Click **Import** to add them to your workspace.

    You can import additional collections later — they'll all share the same environment.
  </Step>

  <Step title="Configure environment variables">
    Go to **Environments** in the left nav and select **Vanta Environment**. The following variables are available:

    | Variable       | Description                                                                                                                                                                                                                           |
    | -------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
    | `baseUrl`      | Preset to `https://api.vanta.com/v1` — the Vanta base URL (`https://api.vanta.com`) with the `/v1` path pre-prefixed so endpoints can be dropped in directly. Vanta Gov tenants should change this to `https://api.vanta-gov.com/v1`. |
    | `authUrl`      | Preset to `https://api.vanta.com/oauth/token` — used to fetch an access token.                                                                                                                                                        |
    | `clientId`     | Your application's client ID.                                                                                                                                                                                                         |
    | `clientSecret` | Your application's client secret.                                                                                                                                                                                                     |
    | `bearerToken`  | Set automatically after running **Create Token** — no manual entry needed.                                                                                                                                                            |

    <Info>
      Don't have a `clientId` or `clientSecret` yet? Follow the [Manage Vanta quickstart](/docs/quickstart/manage-vanta) to create an application.
    </Info>
  </Step>

  <Step title="Authenticate">
    Run the **Create Token** request from any imported collection. A post-response script stores the token in `bearerToken`, so subsequent requests across every collection are authenticated for you.

    <img src="https://mintcdn.com/vanta/WstAJ2TKBLS7hAXq/images/6d18b27-Screenshot_2024-07-31_at_8.15.48_PM.png?fit=max&auto=format&n=WstAJ2TKBLS7hAXq&q=85&s=3697d125be0d367a75ab821486b1a7b6" alt="Create Token request" width="1258" height="374" data-path="images/6d18b27-Screenshot_2024-07-31_at_8.15.48_PM.png" />
  </Step>
</Steps>

## Build Integrations variables

If you imported the **Build Integrations** collection, the environment includes additional variables for resource IDs. Populate these using the [resource creation](/docs/concepts/resources) flow.

<img src="https://mintcdn.com/vanta/WstAJ2TKBLS7hAXq/images/33f06c0-Screenshot_2024-07-31_at_8.18.09_PM.png?fit=max&auto=format&n=WstAJ2TKBLS7hAXq&q=85&s=7f5e6976f52ce939a0e75e0aef11b9e4" alt="Build Integrations variables" width="488" height="208" data-path="images/33f06c0-Screenshot_2024-07-31_at_8.18.09_PM.png" />

## Next steps

<CardGroup cols={2}>
  <Card title="Authenticate to the API" href="/docs/concepts/authentication">
    Full walkthrough of OAuth authentication.
  </Card>

  <Card title="Browse the API reference" href="/api-reference/integrations/list-connected-integrations">
    Try every endpoint directly from the docs.
  </Card>
</CardGroup>
