Postman Backlash Over Silent AI Plugin Installation and Data Sharing
Developers discovered that Postman silently auto-installs AI plugins and attempts to share API data, triggering a major controversy. This behavior has driven many users to switch to open-source alternatives like Bruno. This incident raises severe security and privacy concerns for developers handling sensitive API keys and endpoints. It highlights a growing industry backlash against forced cloud synchronization and unwanted AI integrations in developer tools. Users on GitHub and community forums reported that these features were enabled without transparent consent, leading to compliance failures in strict environments like healthcare. Competitors like Bruno gained massive traction due to their local-first, Git-native approach.
## BACKGROUND
Postman is a widely used API client that allows developers to test, build, and document APIs. Recently, it evolved into a heavy cloud-based platform, which has alienated users who prefer lightweight, offline-capable tools.