What we know

Multiple users have reported that Postman, an API development platform, auto-installed an AI plugin and enabled it by default without explicit consent. These reports suggest that the plugin may share API data automatically, raising concerns about data privacy. Discussions on GitHub and Hacker News highlight user worries about how Postman handles data with its AI features, but no official confirmation or detailed technical analysis has been provided.

Why it matters

If Postman is indeed installing AI plugins and sharing API data without clear user permission, it could expose sensitive information and undermine trust among developers who rely on the tool for secure API testing and development. The situation has sparked debate about transparency and data privacy practices in widely used developer tools.

What is still unknown

No independent verification of the AI plugin’s behavior or data sharing practices has been published. Details about which languages the AI supports, the scope of data collected, and any official release timeline for these features remain unclear. No independent tests of accuracy or privacy impact are available.