Postman silently auto-installs AI plugins and attempts to share all API data (github.com)

Article summary

Postman, a popular API client, has been found to auto-install AI plugins and attempt to share all API data without user consent. This has raised concerns about the company's handling of user data and trust boundaries. The issue was reported on GitHub, where the user provided evidence of the unauthorized installation and changes to their coding agents. The user is requesting that Postman stop automatic agent-plugin installation and remove installer-side self-approval of hooks.

Main themes

• Postman auto-installation
• AI plugin integration
• User consent and trust
• API client alternatives
• Enshittification of software

What commenters say

• Postman's actions are a clear violation of user trust and consent, and the company should be held accountable.
• The auto-installation of AI plugins is a result of Postman's attempts to monetize its user base and justify its valuation.
• Alternative API clients, such as Bruno and Insomnia, are available and do not require user accounts or collect data.
• The enshittification of Postman is a prime example of how venture capital funding can lead to the degradation of software quality and user experience.
• Some users have switched to other API clients due to Postman's aggressive account pushing and data collection.
• The use of AI plugins and accounts is unnecessary for a simple API client, and a return to a more minimalist approach is desired.
• The valuation of Postman at $5 billion is seen as overvalued and a result of the company's attempts to prioritize profit over user experience.