Postman installer silently adds Codex/Claude Code plugins and tries to self-approve its hook

Future_AGI · reddit · 2026-11-04

Users found that merely opening Postman's desktop app added plugins to their Codex and Claude Code setups without explicit opt-in. The author verified GitHub issue #14370 (open since Oct 25, 300+ thumbs-up) and the installer source:

Postman 12.33.4 logged auto-existing-upgrade with claude-code:installed and codex:installed; reproduced by another user on the 12.31.3→12.35.1 update
What it wrote: a Postman marketplace and enabled plugin in /.codex/config.toml, an enabled plugin in /.claude/settings.json, a remote MCP server at mcp.postman.com, and a Postman CLI in /.local/bin
The plugin ships a SessionStart hook wrapped in <EXTREMELYIMPORTANT> tags instructing the agent to load postman:api-engineer before any non-trivial API task
Key finding: Codex requires per-hook human approval stored as a trustedhash, but Postman's installer contains an approvePostmanHook() function that attempts to write that hash via Codex's own config API — still on main branch (though one commenter found no hash present)
Claude Code has no per-hook review; it asks once per folder

Postman responded Nov 3 that it will make opt-in clearer and review the hook approval flow. The post includes grep commands to check your machine and asks whether agents should re-prompt when a trust record wasn't written by the agent itself.

Original post →

Postman installer silently adds Codex/Claude Code plugins and tries to self-approve its hook

More from coding & agent