Postman accused of auto-installing AI plugins and sending API data to its servers

github.com · ⭐️ 8/10 · 2026-11-03

A GitHub issue filed against postmanlabs/postman-app-support (#14370) alleges that Postman silently installs AI plugins and transmits API request data to its own servers, including the resolved values of templated variables such as `{{some_secret}}` used in query parameters. Commenters in the associated Hacker News thread (roughly 993 points and 329 comments) report that blocking traffic to the logging endpoint breaks the application, and that the tool does not meet HIPAA requirements. The claims come from the issue and community discussion and were not independently verified in the supplied material, and Postman has not responded in the available evidence. Some developers say they have already moved to the Git-friendly alternative Bruno as a result.

References

→ Read original