{
  "id": 17995860,
  "title": "Postman silently auto-installs AI plugins and attempts to share all API data",
  "url": "https://urgent.news/2026/11/03/postman-silently-auto-installs-ai-plugins-and-attempts-to-share-all",
  "topic": "ai",
  "section": "AI",
  "published": "2026-11-03T17:22:37.000Z",
  "source": {
    "name": "Hacker News",
    "slug": "hacker-news",
    "url": "https://github.com/postmanlabs/postman-app-support/issues/14370"
  },
  "original_language": "en",
  "account": "Postman silently installs AI plugins on Mac, attempting to control API data flow\n\nThe report details an unexpected change to a user's coding environment after opening Postman on a Mac. The user observed recurring MCP authentication warnings and the unexpected routing of API work through Postman's own tools. Investigation led to the discovery of a user-wide Postman plugin, a startup instruction hook, a remote MCP connection, a Claude Code plugin, and the Postman Command Line Interface (CLI). The user expressed concern over the automatic modification of unrelated coding agents and the attempt to approve the installation of these tools, arguing that an API client should not attempt to become the default workflow in other tools without explicit user consent. The report provides detailed logs and configuration changes made by the installation process, indicating that Postman silently installed AI plugins and altered user settings without clear user approval.",
  "summary": null,
  "key_points": [
    "Postman silently installs AI plugins on Mac",
    "Attempts to control API data flow without consent",
    "Detailed logs show configuration changes made by installation"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}