A user says Postman installed AI plugins in other coding tools

A user reports that Postman desktop version 12.33.4 changed other coding agents on a Mac after the app opened on 24 October 2026. The user found a Postman plugin for Codex, a plugin for Claude Code, a remote connection and a command line tool. The user did not select them and says this is a problem of consent and trust.

What the user found

The user says an automatic upgrade added the plugins and an MCP connection, which lets agents use external tools. A startup hook is a command that operates when a session starts. It says that Codex must use Postman skills for API work. The installer code also tries to mark the hook as trusted.

The proof

The user gives records, files that set up the tools and code links for the installed version. The user did not do the steps again on a clean Mac.

Not yet known

The user says the report does not show data theft. The user also says the trust record does not show who made it. This is the report of one person, who wants the company to look at it first.

Insight: Vendors and models now compete to be the default agent tool

Postman and AWS wrote on 9 October that the Postman agent must get approval before it changes an app. Glow Labs found that in 98% of sessions the agent selected a package name from model memory. This reads as a race to be the default tool in the agent, won by the installer or the model, not by you. Leaders must own the list of tools.