Collaborative Postman Platform Engineering Blueprint
Complete technical specification for Workspaces, RBAC permissions, real-time collaboration, and PostgreSQL/MySQL Prisma models.
High-Level Decoupled Architecture
The platform is engineered with a modern decoupled full-stack architecture. Client instances communicate with a Node.js / PHP backend for workspace data management, authorization checks, and real-time WebSocket syncing for presence and live multi-user editing.
React / Vue Single-Page App with offline-first IndexedDB and local state synchronization.
Handles JWT Auth, RBAC policy enforcement, and CORS proxy routing to external endpoints.
WebSockets & SSE broker collection changes and presence status across team members.
Relational PostgreSQL / MySQL with Prisma ORM and JSONB fields for headers, params, and auth configs.
Production MySQL / PostgreSQL Schema DDL
Complete relational schema with indexes, foreign keys, and JSON support.
-- 1. Users Table
CREATE TABLE cp_users (
id VARCHAR(64) PRIMARY KEY,
email VARCHAR(255) NOT NULL UNIQUE,
name VARCHAR(150) NOT NULL,
password_hash VARCHAR(255),
avatar_url TEXT,
created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
-- 2. Workspaces
CREATE TABLE cp_workspaces (
id VARCHAR(64) PRIMARY KEY,
name VARCHAR(200) NOT NULL,
description TEXT,
type ENUM('PERSONAL', 'TEAM') DEFAULT 'PERSONAL',
owner_id VARCHAR(64) NOT NULL,
created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
INDEX idx_owner (owner_id)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
-- 3. Collections & Requests
CREATE TABLE cp_collections (
id VARCHAR(64) PRIMARY KEY,
workspace_id VARCHAR(64) NOT NULL,
name VARCHAR(200) NOT NULL,
description TEXT,
auth_config JSON,
created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
INDEX idx_ws (workspace_id)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
CREATE TABLE cp_requests (
id VARCHAR(64) PRIMARY KEY,
collection_id VARCHAR(64) NOT NULL,
name VARCHAR(200) NOT NULL,
method VARCHAR(16) NOT NULL DEFAULT 'GET',
url TEXT NOT NULL,
headers JSON,
params JSON,
body_type VARCHAR(32) DEFAULT 'NONE',
body_raw MEDIUMTEXT,
auth_config JSON,
tests_script TEXT,
created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
INDEX idx_col (collection_id)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;Role-Based Access Control (RBAC) Matrix
| Permission / Capability | Admin | Editor | Viewer |
|---|---|---|---|
| Execute Requests & View Responses | ✓ Full | ✓ Full | ✓ Full |
| Create / Edit Collections & Requests | ✓ Full | ✓ Full | ✗ Read Only |
| Manage Environment Secrets & Keys | ✓ Full | ✓ Full | ✗ Masked |
| Invite Team Members & Assign Roles | ✓ Full | ✗ Denied | ✗ Denied |
Core REST API Endpoint Contracts
| Customer & Organization | Plan & Status | MRR | Monthly Quota & Usage | Infra Cost / Margin | Health | Actions |
|---|---|---|---|---|---|---|
|
{{ c.name }}
{{ c.companyName }} • {{ c.role }}
{{ c.email }}
|
{{ c.plan }} | ${{ c.monthlyFee.toFixed(2) }}/mo |
{{ (c.usage.totalRequests / 1000000).toFixed(2) }}M reqs
{{ ((c.usage.totalRequests / c.usage.monthlyQuota) * 100).toFixed(0) }}%
|
+${{ c.netMargin.toFixed(2) }} ({{ c.netMarginPercent }}%)
Cost: ${{ c.costs.totalCost.toFixed(2) }}
|
{{ c.healthScore }}/100
|
SaaS Revenue & Cost Intelligence Report
Executive ReadyAudited financial breakdown, infrastructure margins, ARPU, LTV, and cohort economics across all SaaS tiers.
SaaS Unit Economics & Cloud Infrastructure Efficiency
API gateway proxy + SSL overhead
Cloudflare & Fastly CDN routed
MySQL multi-region replicated
Schema parser & test suite auto-gen
30-Day Customer API Activity Heatmap
30-Day Cohort FrequencyHigh-resolution request volume and compute intensity per customer tenant.
Tier Performance & Margin Matrix
Broken down by subscription categoryMonthly Revenue & Infrastructure Cost Ledger
| Report Period | Gross Revenue | Infrastructure Cost | Net Profit | Margin % | API Requests Metered | Active Users |
|---|---|---|---|---|---|---|
| {{ p.period }} | ${{ p.revenue.toFixed(2) }} | ${{ p.infraCost.toFixed(2) }} | ${{ p.netProfit.toFixed(2) }} | {{ p.margin }} | {{ p.requests }} | {{ p.active }} |
Create SaaS Developer Account
Join teams collaborating and executing APIs with zero-latency synchronization.
Collection Test Runner & Automation Suite Postman Compatible
Run sequential or batched API test iterations with real-time assertions verification and performance telemetry.
Detailed Execution Log
{{ runnerExecutionLog.length }} records logged{{ item.responseBody || '(empty body)' }}
System Diagnostics & Environment Health Live Scanner
Validate server readiness, PHP version, MySQL PDO driver, cURL proxy, and shared hosting compatibility.
Strictly typed, zero deprecated syntax, compatible with LiteSpeed, Apache, Nginx, and PHP-FPM.
Transparently proxies external HTTP/HTTPS requests to bypass browser CORS restrictions.
Dual-engine storage: automatic seamless fallback to JSON files if MySQL credentials are not configured.
Live MySQL Database Connection Tester
Test database credentials directly without editing config.php manually.
Auto-Provisioned Multi-Tenant Schema
9 Core TablesWebSocket Real-Time Tester CONNECTED CONNECTING... ERROR DISCONNECTED
Bidirectional persistent socket streaming, message logging, latency timing, and payload inspector.
No frames recorded yet.
Click “Connect” above to establish a WebSocket channel.
Mock Server Engine & Virtual APIs Active Engine
Simulate endpoints, customize latency injection, configure error states, and mock payloads with zero backend.
{{ selectedMockEndpoint.name }}
{{ typeof mockTestResult.data === 'object' ? JSON.stringify(mockTestResult.data, null, 2) : mockTestResult.data }}
GraphQL Explorer & Schema Inspector GraphQL 16+
Execute structured queries, inspect schemas, pass variables, and debug GraphQL APIs.
$variableName in your query:No GraphQL response yet.
Click “Execute Query” above to query the GraphQL server.
{{ JSON.stringify(graphqlResponse, null, 2) }}
Collection Monitors & Uptime SLA Continuous Health
Automated periodic synthetic testing, endpoint uptime tracking, and regression alerts across all environments.
Configured Monitors
{{ activeMonitor.name }}
Target: {{ activeMonitor.collectionName }} • Schedule: Every {{ activeMonitor.schedule }}
?key=value to the URL.
Inject OAuth2, OpenAI, Claude, X-API-Key, or Query Key presets
Automatically appends Authorization: Bearer <token> to request headers.
Generates base64 encoded Authorization: Basic <base64> header.
Automated token retrieval flow for client credentials, password, and refresh tokens.
Supports variable syntax e.g. {{tokenUrl}} or internal relative path api.php?action=oauth2_token.
Authorization: Bearer <token>
{{ JSON.stringify(activeRequest.auth.oauth2RawResponse, null, 2) }}
Sending API Request...
Evaluating parameters, auth headers, and running postman test assertions
Response Pane Ready
Click "Send" or press Ctrl+Enter to execute this API request and inspect responses here.
{{ prettyFormattedResponse || 'Empty Response Body' }}
Non-JSON Response Payload
The visual graph diagram visualizes hierarchical JSON structures. This response is plain text or HTML.
{{ rawResponseBody }}
pm.response.to.have.status(200).
{{ test.error }}