# No Code, No Fuss - How Mastercard Leverages Postman
source: https://developer.mastercard.com/blog/how-mastercard-leverages-postman/index.md

Authors: Tarric Sookdeo. Mastercard has leaned heavily into cutting edge technologies for over 50 years to build a world class payment network. In fact, Mastercard has been creating APIs since before the internet. In the early days, we invented servers called MIPs (Mastercard Integration Points). These MIPs were physically installed at banks that would issue Mastercard credit and debit cards and would connect these banks to our global network. Today, Mastercard is investing heavily into web API technologies, and we understand the importance of providing developers with a seamless API integration experience. After building and maintaining a global payment network that supports billions of transactions and manages data at scale, we continue to focus on exposing our products and services as APIs to our customers. We do so while applying the same level of rigor and scrutiny to security and performance as we do with our payment network. Mastercard APIs power everything from digital wallets, buy now pay later, open finance, and much more. Our no-code solution is part of our focus on providing developers a self-service, intuitive, and fast way to evaluate our APIs. Mastercard recognizes the need to take a developer-first approach to API development and bring a world class developer experience with our products. Postman helps us deliver a seamless developer experience by enabling developers to get up and running with our APIs in minutes. While Postman is known best for testing APIs via HTTP requests, Postman is filled with hidden gems, built in features, and customization options that make it a powerful tool. Mastercard uses Postman for its built-in features, such as OAuth support and the ability to customize the flow of requests using Postman scripts. This allows developers to start exploring our APIs in minutes, and we can also incorporate our own third-party encryption library into Postman, amongst other benefits. Why No Code is Important for API Integration No-code solutions have become increasingly popular in recent years as developers look for ways to streamline their development processes. No-code tools allow developers to build applications without having to spend hours writing code, which is especially useful for simple and repetitive tasks. Drag and drop website builders are among the most popular no-code solutions, as they enable developers to create applications quickly and easily. Postman knows the value of no-code solutions and have built their platform to enable the creation of powerful and robust no-code environments. Postman Workspaces are a key way Mastercard offers a self-service, intuitive, and fast way to evaluate APIs. By using Postman Workspaces, Mastercard can demonstrate the best ways to use our APIs and provide developers with a seamless experience that has the plumbing already configured. How Mastercard Generates Postman Collections OpenAPI specifications have become the de facto standard for defining an API. With an OpenAPI specification, you can document how to make a request to an API endpoint, the required parameters, and expected responses. Mastercard uses OpenAPI specifications internally as part of our development process. We also expose these specifications to our customers to allow them to generate client libraries and other useful assets. OpenAPI specifications are powerful since they can become a single source of truth for your API specifications. Mastercard carefully reviews each OpenAPI specification using various tools. Some tools are written in house, such as those we use to check the spelling and grammar of the specification. We also use third party tools such as the open source linter Zally. Mastercard enhances and configures Zally to add additional validations on top of our in-house tools. Once all validations and checks have passed and the specification has been approved, the automated workflow is kicked off. During this workflow the OpenAPI spec is published to Mastercard Developers portal and a Postman Collection is generated based on the specification. The generated collection is published to Mastercard's space on Postman's website. Collections are grouped into several workspaces. The Mastercard Developers Workspace contains APIs such as Mastercard's BIN Lookup or Carbon Calculator APIs. Another workspace is the one dedicated to Mastercard's Open Finance APIs. This workspace provides collections that provide comprehensive open finance support, such as the Open Finance API for the USA provided by Finicity, a Mastercard company. Postman Ships with Batteries Included One of the reasons Mastercard uses Postman is the amount of customization and features that Postman ships with out of the box. Fintech APIs such as the ones Mastercard provides must be secured due to the nature of how sensitive the data being passed around is. For this reason, Mastercard uses OAuth for some of our APIs. Postman requires little configuration to use OAuth in the platform. These batteries included features combined with Postman scripts makes it easy to configure any of our APIs, no matter how they are structured. Enhancing the Postman Experience with Encryption Mastercard provides an encryption helper library that can be found on our GitHub page. This helper library make it easy for our customers to use any of our encrypted APIs. The library provide simple to use functions that can be imported and used in your program. However, you cannot simply import these helper functions into Postman. This would make using an encrypted API in Postman impossible if Postman didn't allow customization via Postman scripts. Using Postman scripts, Mastercard can grab the encryption helper library and use the functions in a request. You can learn more about how Mastercard uses this process here. Although Mastercard does not officially support encrypted APIs in our Postman Workspaces yet, we do plan to release official Postman Workspaces with encrypted APIs later this year. Conclusion Postman has become an essential tool for Mastercard's developer experience. With its no-code solutions and customization options, it allows developers to get up and running with our APIs quickly and easily. By using Postman workspaces, Mastercard has been able to demonstrate the best ways to use our APIs and provide developers with a seamless experience. We invite you to explore our API offering on Mastercard Developers. Here you can find a list of our API offerings where we provide APIs for transaction notifications, BIN lookup, buy now pay later solutions, and much more. If you find an API that seems interesting to you, you can check out our Postman Workspace where you can interact with the API if it's available. Mastercard is continuing to develop Postman Collections for our different APIs and will be expanding the selections available. Related Links Mastercard Developers Postman Workspace