Start free trial

TRUE, BUTHeadline Over Filing

Install logged, data claim unproven

The GitHub report it summarises documents a silent plugin install and says it does not establish data exfiltration.

“Postman silently auto-installs AI plugins and attempts to share all API data.”

Headline on daily.dev (November 2026), summarising GitHub issue #14370

Recorded 4 November 2026. Our ruling means: literally true, materially misleading.

Read the story →

Receipts pack

The evidence file for this verdict

17 receipts: 6 support the claim, 2 contradict it, 9 add context. 3 figures on the record, 0 traced to a quoted receipt.

The receipts

Each source, the line we quote from it, its date and which way it cuts. Free to read and to cite.

  1. 1Supports the claimdaily.dev ↗

    Postman silently auto-installs AI plugins and attempts to share all API data

    Look up an archived copy ↗

  2. 2Contradicts the claimgithub.com ↗

    This report establishes unwanted integration and instruction changes; it does not claim to establish data exfiltration.

    Look up an archived copy ↗

  3. 3Supports the claimgithub.com ↗

    Postman's own log explicitly records automatic installation

    Look up an archived copy ↗

  4. 4Contextgithub.com ↗

    Postman desktop: 12.33.4. Codex Postman plugin: 1.1.0.

    Look up an archived copy ↗

  5. 5Supports the claimthenewstack.io ↗

    show an installation event on October 24 marked auto-existing-upgrade, with results indicating that plugins for both coding agents had been installed.

    Look up an archived copy ↗

  6. 6Supports the claimgithub.com ↗

    The hook tells the agent to route broad API work into Postman

    Look up an archived copy ↗

  7. 7Contextgithub.com ↗

    Open an existing Postman desktop installation after not using it for a while.

    Look up an archived copy ↗

  8. 8Supports the claimgithub.com ↗

    The source establishes the approval attempt.

    Look up an archived copy ↗

  9. 9Contextgithub.com ↗

    The trust record alone does not prove who created that specific record

    Look up an archived copy ↗

  10. 10Contextgithub.com ↗

    Observed sequence (not yet reproduced on a clean Mac):

    Look up an archived copy ↗

  11. 11Contextgithub.com ↗

    A Postman executable and its lib directory were present in ~/.local/bin

    Look up an archived copy ↗

  12. 12Contextthenewstack.io ↗

    The developer, known as “indicava” on GitHub, reported the issue on October 25

    Look up an archived copy ↗

  13. 13Contradicts the claimgithub.com ↗

    The remote MCP was enabled without a working authenticated connection

    Look up an archived copy ↗

  14. 14Contextthenewstack.io ↗

    The report documents one macOS installation, and the behavior has not been independently reproduced across other systems.

    Look up an archived copy ↗

  15. 15Supports the claimthenewstack.io ↗

    According to Postman’s own documentation, its installer can automatically approve a session-start hook on the user’s behalf.

    Look up an archived copy ↗

  16. 16Contextaiweekly.co ↗

    Did any token-bearing traffic reach mcp.postman.com before the reporter's logged auth failure, and if so from which client?

    Look up an archived copy ↗

  17. 17Contextlearning.postman.com ↗

    You can install into every detected agent on your machine with a single command

    Look up an archived copy ↗

Members' extras

What each receipt proves, and what would change our mind.

  • What each receipt above proves, in our words
  • The figures table, each number traced to the receipt that states it
  • The trick behind the claim, explained, with the guide to spotting it
  • What would change our verdict
  • Our call on the record, with its due date

The verdict, the opening and every receipt above stay free. Membership adds our analysis to the evidence file for every checked story.

See Membership →Already a member? Sign in →

First membership: 30 days free, then A$89 a year. One introductory trial per customer. Card required; renews annually until cancelled. Cancel before the trial ends to avoid the first charge.