Top
Best
New

Posted by sidgarimella 1 day ago

Postman silently auto-installs AI plugins and attempts to share all API data(github.com)
1485 points | 479 commentspage 3
wackget 1 day ago|
I use RESTer, a Firefox extension, to test APIs: https://addons.mozilla.org/en-US/firefox/addon/rester/

It's an in-browser equivalent of Postman.

I much prefer the approach of being able to use the browser for things like this. It feels much more lightweight than installing a piece of desktop software.

chamomeal 16 hours ago||
Yep I’m finally switching off of postman today. I’ve wanted to for a while, but my team at work uses it, and all of our shared stuff is in there.

I’ve been thinking of replacing postman with a clojure project, where you just send stuff to the REPL to call it. You could even set up a little dependency map, so your calls would have built-in behavior like “if the token is expired, grab a new one with user/pass”. And it would be trivial to script endpoint calls together.

If anybody has done something similar, I’d love some tips or ideas

novia 6 hours ago||
The second they required you to make an account and have your saved api calls on the cloud was when it was over.
xlayn 1 day ago||
When they started uploading things to the server and requiring you to have an account to access the things that they STOLE from your machine without authorization in first place, I uninstall it...

What can go wrong by uploading your things, if you had any passwords or users there that "pinky promise" will not be uploaded, then running AI and maybe oops have a leak and now someone is hitting your production servers?

fergie 1 day ago||
It was never, ever clear to me why you needed to use Postman instead of Curl
AdmiralAsshat 1 day ago||
Been some years since I had to use it (and I think my company jettisoned it shortly thereafter), but at its peak, I remember it doing some things really well that were a PITA to setup locally in a terminal with cURL.

The biggest "Oh my god, this is so much easier" moment was just setting up a tiny JS script onto the login API to stash the bearer token from the return response into a variable, and then propagate it into the header of all subsequent calls. Trying to script THAT in Bash (parsing the bearer token from the return response) was also a headache and never worked 100% for me.

Although that was me trying to do it manually. I'm sure a vibe-coded solution would probably work well enough these days.

Mashimo 16 hours ago|||
Makes it easy to not so technical testers to .. test the API. Share the collection, just point at their own test server and off they go. No command line knowhow needed.
lexoj 1 day ago|||
I think because editing in terminals text was not a good development experience, navigating the curdor, and pressing Enter would issue the command.

Personally I use a wrapper cli I built myself over curl which automatically gets api docs of my product and easily get the token so its great for agents

to11mtm 1 day ago||
At least for me, the appeal was always minimal.

As a .NET developer I had been using LinqPad for years, and just kept a set of template scripts for the various rote web-call scripts I might need to do e.x. XML or JSON, Auth handling, etc.

(For the non .NET folks, LinqPad is a simple application that lets you write small script-esque bits of C#/F#/VB.NET and has a wonderful little `.Dump()` method that can pretty-print just about any object to it's output window, and even export that output window to Excel/HTML which is nice for some tasks.)

Tubelord 1 day ago|||
I was on a team where work was often presented and demo'd to semi technical managers and stakeholders. For the backend guys, this was the best we had.

Nice to see the leaner alternatives people are suggesting here.

globular-toast 18 hours ago||
I would look into one of the many frameworks that generate an OpenAPI/Swagger spec and use SwaggerUI to display and use it.
polotics 1 day ago||
nah, a python script that wraps what needs wrapping has been my go-to since that day Postman said I had to log in
eddieroger 1 day ago||
Many, many years ago, I used Postman for the first time, way back when it was a Chrome plugin. As an iOS dev, it was amazing to be able to validate the requests I needed to make outside the context of my code to validate things worked. Until, one day, I wasn't seeing something iterate in the responses I was getting as I expected to. Many cmd+R presses later, I talked to the API team to check logs, and we found that Postman was caching what should have been independent requests. Easily blamed on Chrome at the time, but it was an undocumented and unexpected behavior by Postman, who really should have better handled making each request unique.

I didn't need another reason not to use Postman, but I'll take it. Shame on them for moving in shadows.

skeletal88 15 hours ago||
Postman used to be a simple tool to make http requests.

Now it is some kind of incomprehensible thing that requires me to log in and create a 'collection' or whatever it was when I just wanted to make a simple call to some api to see what it does.

Like.. wtf. Why did they need to turn it into some monstrosity?

1024612u1 10 hours ago||
Relying on heavily managed, LLM-driven developer platforms introduces severe data exfiltration risks. These complex environments mostly preferred by newer generations of programmers represent critical supply chain exploitation risks that simply never existed in traditional local setups. The consequences are incidents like recent Binance hack.
theseamusjames 1 day ago||
If there's ever been a perfect app to vibecode your own replacement, it's postman. Claude can knock out a completely usable competitor in under an hour, I'm sure of it. A day of tweaking and you'll have everything you need.
silverjaw 21 hours ago||
Already built. Check out Sannr. I'm a former Postmanaut and built it as an open source solution.

Sannr is an API platform built for coding agents that builds API context over time.

crisnoble 1 day ago||
Free name idea: GETBoy
int32max 14 hours ago|
postman is dying a software company as agents rapidly can write good cli, you can test your backend api points easier with a llm then when postman.

silently installing ai plugins and recording data is really not cool

More comments...