Postman silently auto-installs AI plugins and attempts to share all API data (github.com)
1109 points by sidgarimella 11 hours ago
pants2 11 hours ago
It's a shame what happened to Postman. It started as an excellent little developer tool for testing APIs. Then for some reason they raised over $400M in funding and hired 1,500+ employees, for what should have been a tiny OSS/passion project like curl or little snitch. Instead they now have to justify their valuation by forcing logins, collecting data, monthly subscriptions, AI features, etc.
I still don't know how they're valued at $5B+ when I don't know a single developer who actually uses it anymore
swatcoder 10 hours ago
> for some reason they raised over $400M in funding and hired 1,500+ employees
You know the reason. A bunch of people were able to take home a lot of money because of that growth and now have the option to FIRE themselves whenever they want to shake off the stress.
That's the founder mentality that Y Combinator exists to leverage or encourage and it's ubiquity is what separates the prevailing 21st century technology movement from the nerdy, academic, UNIX-y movement that gave us GNU, linux, curl, ffmpeg, redis, etc
We got to watch innovative products get pumped full of helium until they explode with bloat and rent-seeking instead of accumulating a growing foundation of sturdy technical building blocks as we could have had on the other path.
AI now leads us into some new movement, the worst version of which a few model vendors protected by regulations absorb almost all technical accomplishment and lease it back out to everybody else, and the best version of which democratizes technical construction so widely that individuals can naively spin up effective solutions for the most idiosyncratic needs.
We'll see how it goes.
mifydev 9 hours ago
I miss the UNIX-y movement so much :(
antod 7 hours ago
ThrowawayR2 6 hours ago
zaik 9 hours ago
cnity 9 hours ago
You are good at writing. Thanks for this.
oytmeal 6 hours ago
godelmachine 9 hours ago
krazydad 3 hours ago
Very well written reply that voices something I knew but couldn’t quite articulate.
agorabinary 8 hours ago
Articulate and well spoken - I hope that through threads like these that especially tech newcomers discover that there are alternatives to the YC founder mentality of "growth at all costs". A more gradual approach that respects users is also better for founders. You may not retire at 35 with some big exit or raise, but why is that the goal anyway? Build something that respects your users and you can see yourself working on for 30 years, living comfortably and in moderation.
A minor tweak to The Parable of the Mexican Fisherman[1]:
The venture capitalist laughed and said, “That’s the best part. When the time was right, you would announce an IPO, and sell your company stock to the public and become very rich. You would make millions!”
“Millions – then what?”
[1] https://aliabdaal.com/newsletter/the-parable-of-the-mexican-...
johnnyanmac 7 hours ago
terribleperson 10 hours ago
I'm already enjoying the second version. I just hope we get to keep it.
guitarlimeo 10 hours ago
Well put, hopefully it's the latter version.
cluckindan 10 hours ago
Enshittification and private equity are synonymous. Strange that people are still surprised by this.
abirch 9 hours ago
rafram 8 hours ago
Vaushite 3 hours ago
vrganj 10 hours ago
Hoarders can get piles of money,
That is true, hackers, that is true.
But they cannot help their neighbors;
That's not good, hackers, that's not good.
Join us now and share the software;
You'll be free, hackers, you'll be free.
-- The Free Software Song, as written and sung by rms
netik 9 hours ago
mschuster91 10 hours ago
> AI now leads us into some new movement, the worst version of which a few model vendors protected by regulations absorb almost all technical accomplishment and lease it back out to everybody else, and the best version of which democratizes technical construction so widely that individuals can naively spin up effective solutions for the most idiosyncratic needs.
Yeah and the issues from these vibecoded one-off programs will be felt for generations.
I got out of IT partially because I could see the writing on the wall. The "load bearing Excel sheet" is one thing, manageable if you could catch the person who wrote it in time before they depart or die and know your way around Excel - there's only so many ways to achieve a desired goal (unless the author used VBA, at which point all bets are off, and I member encountering a spreadsheet that macro-called in a DLL shipped together with the sheet).
But vibe coded AI bullshit? That is supposed to be hosted by someone and kept secure (i.e. isn't hackable in a few seconds by anyone who manages to compromise some dingus's laptop? Oh hell no. I'm outta there, I'm too old for this crap.
robotnikman 9 hours ago
fock 9 hours ago
pessimizer 9 hours ago
tonymet 9 hours ago
trying to make money off an invention is perfectly reasonable.
andyroid 9 hours ago
jodrellblank 9 hours ago
kentm 8 hours ago
Ambolia 9 hours ago
MiroslavPokorny 2 hours ago
theturtletalks 10 hours ago
It’s definitely the best version. I’m seeing so many amazing open source projects since people who once had the vision, but not the coding chops, can now build what they imagine. I myself am building a personal OS that connects to everything and it’s way more fun to build things and use them yourself vs just paying for some other software. Especially when that software can be enshittified or start to squeeze its users like you mentioned.
caned 9 hours ago
surgical_fire 9 hours ago
aliasxneo 11 hours ago
> I still don't know how they're valued at $5B+ when I don't know a single developer who actually uses it anymore
B2B maybe? Usually these businesses thrive solely on flirting with the CTO and getting them to sign a lucrative contract and then mandate internal usage. I'm speaking from experience.
spoiler 9 hours ago
I worked at a company where postman was (incorrectly) set up, used by everyone in the company, including non-devs and the ops team to make API requests instead of letting us develop tooling... Everyone hated it, but the company kept paying for it.
Hell, our CI test suite ran Postman, but because that was badly set up if a test suite failed, it required manually editing some state, otherwise the Postman state got fucked and everything would fail.
Did we still continue paying for it, you might wonder? Yes, of course we did.
drdexebtjl 7 hours ago
Probably. They’ve been sending a lot of emails with creepy hyper-personalized AI-generated marketing material, trying to get us on an Enterprise contract. Things like slideshows that have the names and profile pictures of my colleagues who use Postman. Very weird.
aliasxneo 6 hours ago
cute_boi 10 hours ago
corruption at finest. There is no reason to use postman when hoppscotch or bruno is available.
radicalbyte 10 hours ago
Oh THAT'S what they're trying. Doesn't work on me %)
alfanick 10 hours ago
I cannot imagine 1500+ employees "working" on this. Wtf, it's a single person project.
aldanor 10 hours ago
1 developer, 10 managers, 20 C-suite, 1468 sales, 1 barista
All adds up pretty well
dalmo3 10 hours ago
baobabKoodaa 10 hours ago
MisterMunchkin 6 hours ago
MiroslavPokorny 2 hours ago
dominotw 10 hours ago
Philip-J-Fry 10 hours ago
To be fair Postman is a lot more than just a fancy curl client. It's a whole saas platform now.
bartread 10 hours ago
boomlinde 9 hours ago
Keyframe 10 hours ago
ex-aws-dude 8 hours ago
kklisura 10 hours ago
Wait till you hear Docusign has 7k employees...
ayush--s 10 hours ago
I logged in to postman today after 3 years to use some public API, and god, it was so damn unusable. It took me navigating through "workspace", "environments", etc etc before I could hit the simplest of http endpoints.
tisdadd 7 hours ago
I switched to Bruno when payment started requiring login, love having the ability to just check it into git.
01CPMD3174 3 hours ago
01CPMD3174 3 hours ago
Exactly. Back in 2015 when I was still coding professionally Postman was our go-to tool for API testing.
Earlier this year I reached for Postman when kicking off a side project. I was appalled by how convoluted it has become. It really is a Frankenstein product. And they can’t seem to figure out what their offer really is.
No thanks. RIP to the OG Postman. The new Postman is dead to me.
vanschelven 10 hours ago
Someone should vibe-code a VC death clock for developer tools. Enter a company, and it will deduce from its last funding round and headcount the moment it all goes to shit.
In an utlimate twist of irony such a tool could itself pivot to investors because the moment it gets really bad is also the moment to invest in the competition.
I'm not saying that's my strategy with Bugsink, but I'm not saying it isn't either.
peanut-walrus 9 hours ago
It exists: https://saasocalypse.com/scan
xpct 9 hours ago
jasomill 4 hours ago
vanschelven 9 hours ago
DrewADesign 6 hours ago
> I still don't know how they're valued at $5B+
Because, current valuations are completely detached from any operational or market realities that affect a company. The metric has become the goal, and the metric is controlled by nontechnical people that have no intuitive understanding of how technical products are used. Even worse, they’ve all gone though a vibe coding tutorial and now either believe they have real technical depth, or believe that it doesn’t matter.
cowlevel 3 hours ago
Technical is subordinate to business and always has been (apart from a bunch of last century hackers with university tenure). If business no longer thinks it can make money with human developers, they'll be laid off. It doesn't matter whether the product is better or worse.
DrewADesign 3 hours ago
autoexec 10 hours ago
> Instead they now have to justify their valuation by forcing logins, collecting data, monthly subscriptions, AI features, etc.
All those people who gave them millions in funding are expecting to make a return on that investment and that means prioritizing turning it into something that will make money by selling out users. The valuation is just a guess at how successful it will be at screwing users over. Greed ruins everything.
mikestew 9 hours ago
I used to use Postman daily almost ten years ago. Then as my last hurrah before retirement, I took an embedded job that didn't involve me beating on a web API, so I didn't use Postman anymore.
So imagine that I hear about this "Postman" product that involves subscriptions, and AI, and "valued at $X billion" and all this crap, and you can see how I seriously thought that there was another product called "Postman" that wasn't the product I used to use. Turns out...
ozim 6 hours ago
You don’t know any developer yes.
I do know business analysts, testers, non-technical people asking me for postman collections.
Postman became de-facto standard for businesses. Even though devs have ditched it.
pavlov 8 hours ago
I haven’t met anyone using MongoDB in what feels like 12 years, but it’s a $26B company.
There’s apparently a surprisingly profitable enterprise afterlife to developer tools that manage to become popular in the right moment, even if the moment is fairly short.
pants2 5 hours ago
Databases are extremely sticky because migrating can be a nightmare. Postman seems like it would be much less sticky, you can just import your Postman collection to Bruno and it's pretty much a drop-in replacement.
thepra 8 hours ago
I feel called, mongodb user here ( • ▽ • ; )
cowlevel 3 hours ago
orochimaaru 5 hours ago
I’ve never understood the allure of postman. Curl has been my thing for a while. I don’t see that changing.
jasomill 4 hours ago
If history has taught us anything, it's that there's at least a limited-time market for inferior GUI alternatives to nearly anything you can easily do from a command-line. Though to be fair, there's plenty of room for value-add over curl for web requests in terms of presentation where GUIs can work well: asset viewers, syntax highlighting, pretty printing, code folding, etc., especially if combined with interactive tools for decoding and deobfuscation that feed back into the viewer.
The obvious AI integration is reverse engineering tools, assuming the trend towards locking such things down doesn't continue.
And honestly, I worry less about people paying $29 for a GUI file renaming tool than I do about the same people copy/pasting LLM-generated shell snippets, given that LLMs will inevitably have trained on the existing corpus of shell scripts, many if not most of which contain potentially dangerous bugs, especially when used outside their intended context of known-trustworthy input.
writtenone 11 hours ago
wrote about this phenomenon: https://nonograph.com/write-some-software-give-it-away-for-f...
pjmlp 10 hours ago
Yeah, they managed to land on the IT blacklist for several of our customers.
Nowadays Portman is forbidden for project delivery, unless the customer development team also uses it.
xnx 7 hours ago
> I still don't know how they're valued at $5B+
Like statistics, 90% of valuations are totally made-up.
jfyi 10 hours ago
A surprising number of developers I work with don't actually know how to use curl. Postman is ubiquitous among that crowd.
colejohnson66 10 hours ago
That's just GUIs being easier to use than CLIs for most people. After all, that's why Postman got popular - it's a GUI to do curl without the CLI! Or Handbrake to avoid using ffmpeg. Or various "paint" applications to rotate images instead of using imagemagik.
The problem is that Postman decided to want to be a business and took VC money.
bloaf 2 hours ago
I wrote a lot of python. Whenever I was working with an API, I'd just spin up a jupyter notebook and write out the calls I wanted to try out in a python notebook, once I had everything working, it was just a copy paste job into the codebase.
Using some kind of dedicated tool like postman always felt like a literal step backwards.
Ekaros 8 hours ago
I know lot of bits with curl. But I find it always a pain to use. Fine for when you do scripting but I find command line pretty painful overall. So I understand want to use some other tool with better ergonomics.
threetonesun 9 hours ago
10 years ago I totally get that but these days there's plugins built into every IDE that can smooth over the annoyances of testing an API via curl without having to invoke paying for Postman and dealing with all of its nonsense.
Of course now that I said that today I'd probably just have Claude hit the API for me, or build a dashboard to test it, I really don't know how Postman continues to exist.
chrisweekly 3 hours ago
Yeah, Insomnia replaced Postman everywhere I've been.
skrebbel 9 hours ago
> Then for some reason they raised over $400M in funding and hired 1,500+ employees
Wtf!! how
coldtea 8 hours ago
>It's a shame what happened to Postman. It started as an excellent little developer tool for testing APIs. Then for some reason they raised over $400M in funding and hired 1,500+ employees, for what should have been a tiny OSS/passion project like curl or little snitch. Instead they now have to justify their valuation by forcing logins, collecting data, monthly subscriptions, AI features, etc.
The good thing is that now takes about 2 days to replicate with an agent the parts that matter from their whole offering and tell them to go f themselves.
richin13 10 hours ago
For some reason, it is very popular in my country (Costa Rica). Every freelancer I’ve worked with only knows about postman It’s like it was very popular back in the day and people never got the memo there’s better options out there
baud147258 8 hours ago
We're using Postman at work (I think we have a subscription for 10 or 20 users), mostly when doing REST development and to share the API calls between people. Though I rarely have to use it so each time I'm so confused of between the collections, environment, vaults, variables...
Also if you have an alternative that's easier to use, I'm interested
quchen 7 hours ago
We switched to Bruno 2 years ago. Haven't used it much lately but it was a really good replacement at the time.
bonestamp2 10 hours ago
> I don't know a single developer who actually uses it anymore
I have no need for it, but there's one company I work with and all of their developers still use it. What do you do/recommend instead?
lillesvin 10 hours ago
Not the person you asked, but Bruno <https://www.usebruno.com/> is a good alternative (so far).
ambicapter 8 hours ago
ninju 10 hours ago
https://insomnia.rest/features/api-debugging
or any of these
https://apisyouwonthate.com/blog/http-clients-alternatives-t...
jamie_ca 10 hours ago
irreverentmike 10 hours ago
jordanbeiber 10 hours ago
taco_emoji 9 hours ago
I used to use it but then we added Swagger UI to our APIs so now there's no need.
anonreplier 10 hours ago
There are loads of alternatives now, I use yaak, but you could just ask an agent to create one for you in 20 minutes
losvedir 3 hours ago
Claude.
efilife 9 hours ago
I use Yaak
jrks11o 4 hours ago
They chased B2B revenue too hard, my work built internal alt in a few days that fits more appropriately with our orgs usecases earlier this year, Sad lol
justincormack 9 hours ago
They were valued at $5.6bn in 2021, in the ZIRP boom, and havent raised since. Unlikely they can raise at anything like that now.
davesque 4 hours ago
I always felt like Postman was just a waste of time next to simple bash helper scripts wrapping curl commands.
oliyoung 6 hours ago
> I don't know a single developer who actually uses it anymore
Its endemic in enterprise engineering/QA, for all the reasons we mourn its loss its big, and big is trusted in these circles
andy81 5 hours ago
That's momentum, not utility.
Any non-programmer can now copy-paste http requests from Dev Tools or a free-tier LLM for a better service than Postman.
New companies have no good reason to use Postman. Old ones can slowly migrate away.
agrippanux 7 hours ago
Doesn't help that the core product is one of the easiest vibe-code prompts ever.
enbugger 10 hours ago
It seems like cursed(blessed) niche? In search of alternatives couple of years ago, I'm stumbled upon Mockoon which looked really like a single person project. Now, judging by their webpage, I see they are going the same way
krmmalik 9 hours ago
>>>I still don't know how they're valued at $5B+ when I don't know a single developer who actually uses it anymore.
Just out of curiosity, what are developers using these days?
wiether 8 hours ago
At work we use JetBrain's HTTP client: https://www.jetbrains.com/help/idea/http-client-in-product-c...
My IDE has always been for a lot more than coding, so even though most of the coding is now done in a terminal by an AI agent, I still spend many hours everyday in my IDE.
dspillett 4 hours ago
There are a couple of open source alternatives (though at least some of those have tried to go the way of Postman to some extent), just using curl directly, or we've rolled our own wrappers (personally, or team- or company-wide) for our specific use cases.
stock_toaster 8 hours ago
rest-client[1] or httpyac[2].
1: https://marketplace.visualstudio.com/items?itemName=humao.re...
2: https://marketplace.visualstudio.com/items?itemName=anweber....
aenis 8 hours ago
Claude, here are the api specs, see if they are up to date, build a client, make no mistakes. Unironically.
Chris2048 9 hours ago
liendolucas 11 hours ago
Postman valued at 5 billon? WTF? I mean the IT industry lives in a fart cloud honestly. I really really think everything is just a little bit overvalued, isn't it?
People should be using curl + bash. It's a universal combination available almost everywhere.
rdtsc 8 hours ago
I know right? I would think even $5M would be excessive. It’s interesting that with AI now anyone can throw something together like that within a few days. Investors are probably squeezing them pretty hard to get their returns back before anyone and their uncle can create their own postman.
mschuster91 10 hours ago
> People should be using curl + bash. It's a universal combination available almost everywhere.
They should but Bash escaping/encoding is nasty and most terminals have a hard time using the mouse to reliably edit a cURL command, especially if the last command didn't do a final "\n" output. And it gets oh so tiring when the "copy cURL" command includes about 1000 bytes worth of Cookie headers full of analytics garbage.
That's why Postman became a thing in the first place.
dspillett 4 hours ago
liendolucas 9 hours ago
surgical_fire 9 hours ago
Personally, I replaced Postman years ago with IntelliJ's HTTP client. It is pretty good.
vlyan 6 hours ago
SoftTalker 5 hours ago
curl and jq is all I've ever needed for working with http APIs and JSON responses.
100111011111 5 hours ago
You're stating this on your combinator forums of all places. Do you know who owns and runs that company and their economic principles?
MOARDONGZPLZ 6 hours ago
Sales called me a couple weeks ago. I told them Postman had a bad reputation among developers and I wouldn’t be using it. The salesperson was just absolutely incredulous that anyone could feel this way. It was pretty funny. Maybe they’re drinking their own Kool Aid.
agilek 10 hours ago
1500+ ppl? :-O
asdff 10 hours ago
I feel the same way about docker. This things just running containers and yet its a billion dollar company.
phendrenad2 8 hours ago
When was the last time you heard about a VC-backed company going out of business? They either go unicorn or they get frozen until another VC-funded company is large enough to absorb them and quietly absorb their lack of value. Postman is a big morsel but I guarantee some company is being lined up just perfectly to consume them.
Grimeton 9 hours ago
Yeah. Curl the little side project:
darepublic 10 hours ago
Yes a prime example of enshittification. You attract attention making something humble in scope but good.. but then it is compelled to become something much more. Same story with Coursera imo
theturtletalks 10 hours ago
Everything will be enshittified, it’s not a question of if but when. The incentives are simple, the stock ticker must go up.
_doctor_love 10 hours ago
> a tiny OSS/passion project like curl
Um.
saghm 9 hours ago
I was looking to see if someone had posted a reaction to this part, because if no one had, I was going to! I don't disagree with the parent comment at all, but if curl is an example of a tiny project, I'm not sure what could possibly be considered large. It's literally the first example I'd give if asked for an example of an open source utility getting deployed on like, everything in the world.
_doctor_love 7 hours ago
embedding-shape 11 hours ago
> I still don't know how they're valued at $5B+ when I don't know a single developer who actually uses it anymore
I think most people here on HN is within or close by the "Innovators" part of the "Technology adoption life cycle" (https://en.wikipedia.org/wiki/Technology_adoption_life_cycle). When Postman hit mainstream, it was already bloated and ruined, and "Innovators" had already moved on to something else, but for Postman that's just the beginning, as they're in the "Early Majority" part, and still have a tail to ride, so investors and everyone else can extract all the value from the remaining s̶u̶c̶k̶e̶r̶s̶ users.
sneak 11 hours ago
This is why the right to fork exists in open source licenses. It’s easier than ever now, too, thanks to LLMs. You might even be able to oneshot forking and removing the malware and rebranding and rebuilding f/oss crapware these days.
I’ve been considering setting up a nonprofit solely to do this and to republish things like Mattermost, Stats, Bitwarden, etc with the corporate antifeatures ripped out.
FuriouslyAdrift 10 hours ago
Bruno. Open source base, runs locally, data remains on your infrastructure.
pull_my_finger 9 hours ago
pixl97 10 hours ago
pxc 10 hours ago
Postman has always been proprietary software, hasn't it?
sneak 9 hours ago
mschuster91 10 hours ago
> Then for some reason they raised over $400M in funding and hired 1,500+ employees
... what the fuck. Certainly explains things
> I still don't know how they're valued at $5B+ when I don't know a single developer who actually uses it anymore
Yep, one of them. I loved Postman but gone back to plain cURL and the dogshit that is IntelliJ's built-in HTTP request tool.
As for the question... easy. Markets can stay irrational for a very long time...
postmannotlover 10 hours ago
EDIT: sorry, I was cranky. I just really don't like Postman/its UI/BS. To each his/her own.
bfbf 10 hours ago
Weird take. Just because you can use curl it doesn’t mean you can’t value a GUI to be able to store and manipulate requests quickly and view a formatted response body.
I use postman all the time to explore apis. Sure I could do it from the command line, but this is quicker and it saves my request payloads.
(Though now I’m obviously open to suggestions for better tools)
tempestrose 10 hours ago
thisIsFiner 9 hours ago
Shorel 7 hours ago
primitivesuave 7 hours ago
Postman logs detailed information on every single API request you make through its tool, including query parameters. If you use the templating syntax `{{some_secret}}` to fill in a query parameter, it sends the actual secret content of `some_secret` to Postman's servers. If you disable outgoing network traffic to this logging endpoint, the entire app will stop working properly.
I discovered this when investigating whether Postman is HIPAA-compliant (it is not).
MiroslavPokorny an hour ago
I am still dumbfounded what value Postman can make in capturing all the publics usage. Sure they could mine the data, but they cant exactly use it in any legal way so why bother ?
wackget 6 hours ago
That sounds all sorts of illegal, and all sorts of immoral.
Did you flag it / create an issue?
primitivesuave 6 hours ago
Yes - I wrote some public posts, and a Medium article which I forgot about until just now: https://anonymousdata.medium.com/postman-is-logging-all-your...
My main point was that I wouldn't want my secrets to ever be sent to Postman under any circumstance (or alternately, stop calling them "secret"). A lot of the online responses were some variation of "why are you sending secrets in query parameters in the first place?" (I'm not). When I posted on Reddit, it escalated to targeted harassment by people who were obviously current/former employees at Postman.
I did send out an email blast to a bunch of CIOs/CSOs in my network which went a bit "email viral" through forwarding, and this ended up triggering a substantial amount of enterprise cancellations.
lelandfe 23 minutes ago
xlayn 4 hours ago
github.com/alainnothere/mailBoy
news.ycombinator.com/item?id=50359814
senfiaj 10 hours ago
Who still uses Postman? In my experience it became insanely slow and bloated. Switched to Bruno. IMO, Postman is like uTorrent, everybody heard about it and many install because of inertia.
karthikeyankc 8 hours ago
Mostly enterprise teams and intermediate devs from my experience. I lead the API platform for a popular e-signature company, and a postman collection is the first thing devs ask for. Even when we point them to our docs, they'd rather just import a collection and start hitting endpoints immediately.
Haven't heard of Bruno until now. Looks like a solid offline-first tool. I don't see a public collection or web runner, and it looks like it supports GitHub-based sharing. Postman on the other hand, their public API network (or whatever they call it) along with the web runner reduce a lot of friction for API vendors like us and for dev teams who just want to quickly play with the API in the browser, especially during their evaluation stage.
zamalek 5 hours ago
You commit your collection to git if you want to share it.
DuncanCoffee 8 hours ago
Switched from Bruno to Voiden, it's more of a postman + notebook. Bruno started adding premium and stuff and I didn't want to wait to migrate again...
giancarlostoro 9 hours ago
It was really good until... idk 3 or so years back? Whenever they started forcing you to login to use it.
jvzv 8 hours ago
bruno is really great used it for a while but the 5 API syncs a month on the free tier is a pain, had to switch to Apidog never been so happy with unlimited syncs
andy81 5 hours ago
Bruno is no better in the way that matters - curl/requests/httpclient etc. are now easier to write and understand than any external templating tool.
shimman 5 hours ago
Use to work at one org in a bloated financial company that was paying Postman nearly $40,000 a month for a license provided to every person in the org. Regardless if they were a dev or not. I suspect the sales pitch pushes for unnecessary licenses because out of around 500 employees in the org, only 80 were developers and out of those 80 only one single team used postman. So this one org was overpaying by nearly >95%, doubt this org is truly unique regarding this.
I suspect that nearly every single public corporation are likely overpaying for software products, it's a waste of capital and extremely inefficient. All it shows is that corporations are too loose with their money and can probably deserve to get their tax obligations increased by a good 20-40% if they're this okay with wasting it.
_fat_santa 8 hours ago
I use hopscotch and highly recommend it. Very similar UI to postman and it just works.
ex-aws-dude 8 hours ago
I'm not really a vibe-coder but it seems like the easiest possible tool to vibe-code
Or just give your agent JSON and tell it to use curl
snapetom 9 hours ago
It's one of those things that have become "enterprise." There's always been better competitors out there, but it was so big, it's the easy choice for companies that are too lazy to do proper/fast vetting.
bottombutton 10 hours ago
Working in healthcare, and Postman got decertified by our Cyber team for this. We all switched to Bruno overnight. Their sales team is pinging us like gangbusters though.
happytoexplain 10 hours ago
A lot of GxP environments had already ditched Postman because it auto-syncs your API schemas to their cloud, as well as values and secrets.
tonfreed 10 hours ago
Bruno is fantastic. Switched a while ago and haven't even thought about going back
rvz 8 hours ago
Bruno is VC backed [0] and will (eventually) do the exact same thing for the sake of growth.
This is even after they said they would never raise money, but again the users were not going to pay for Bruno nor donate even.
[0] https://blog.usebruno.com/the-funding-announcement-we-never-...
happytoexplain 6 hours ago
dham 11 hours ago
We went to bruno years ago and has been good. Nice to be able to store the request definitions in git. But to be honest, don't really need any of these tools anymore.
reddalo 10 hours ago
+1 for Bruno, it's simple and great.
They offer a paid version though, so I'm always afraid it's going to enshittify in the future, just like Postman and then Insomnia did.
CommonGuy 10 hours ago
I have been building Kreya [1] for over 6 years now as a Postman alternative. It's offline-first and privacy focused with a storage format made for git.
In all our years, Kreya "just worked" for our users without any drama or unwanted changes, unlike most of our competitors...
FridgeSeal an hour ago
Mad respect. Kreya is my go-to for playing GRPC endpoints. Basically every other tool has some whacky behaviour, got rapidly abandoned, or had janky ux.
georgel 11 hours ago
Postman went from a great lightweight tool to a bloated up-selling mess.
wolttam 11 hours ago
As do all great things once VC sinks its teeth in.
999900000999 10 hours ago
I know I’d also take 400 million in VC funding in hopes of eventually becoming a billionaire.
Vs making tools for donations and no one appreciating it!
bluefirebrand 8 hours ago
ivanjermakov 5 hours ago
I remember it being annoying to use even in 2019.
silverjaw an hour ago
It's so hard to see this happen. I worked for postman for 4 years, and it was a great place to work for a long time. I've also seen how the industry has changed.
As agents start to write all the code, API platforms need to adapt to the new user. That means a complete rethink about how to approach API development.
It's why I'm building Sannr, an API platform built for coding agents.
When API calls go through our client, we capture it and turn it into API context that lives right next to the API code in the repo. Future coding agents have access to the API context and don't have to relearn API lessons again.
The API client is lightweight, lives on your machine, not in someone else's cloud.
Sannr is also open source, so you can see the code.
dvtkrlbs 9 hours ago
I've been using Yaak [1] for a while. It is a breath of fresh air.
dvtkrlbs 8 hours ago
One nice thing about it is only the builds are licensed. If you build from source it is MIT.
gregrobson 7 hours ago
+1 for Yaak, I've used it for over a year for work and personal projects. It is stable and fast (also the dev behind it has the first name as me, so I'm a bit biased towards other Gregs!).
unkn0wn_root 10 hours ago
If anyone is interested in a Postman alternative but likes TUIs and leans more toward using .http files, check out resterm[0].
btw - I'm the author.
ediamondscience 11 hours ago
I don't understand how postman became the tool that it is today. The best version of it was just a logger and a formatter on top of an http client. The proto import was nice for gRPC. Who thought that relatively simple tool needed accounts and MCPs and whatever else they've thrown into it?
Havoc 10 hours ago
> I don't understand how postman became the tool that it is today.
You can’t have a unicorn valuation built on a simple offline client.
This is basically standard SV play book - first step is „fix“ it to have a cloud component/account. Then store some of the data in cloud only - say for example for team sharing or a „workspace“. Then make some features paid only. Then ramp up the enshitification till metrics show it’s saturated and users will bear no more
firefoxd 8 hours ago
Postman was my curl with a gui. Used it everywhere, recommended it everywhere. But one day out of the blue it asks me to login, and it all went downhill from there. Imagine you had to login to use curl?
Anyway, I'm sure somewhere in some terms and conditions I agreed to, it says "we own the glass".
tormeh 4 hours ago
If you're a backend dev writing an API you should be writing automated tests. Clicking around in a GUI app is not the correct way to do things.
If you're exploring someone else's API there are lots of other clients you can use. Resonance seems pretty solid to me. Don't get what's the point of all the extra faff in Postman.
If you want to get real basic there's always ol' reliable curl.
schleck8 8 hours ago
Wow this is bad
Circumvention of the trust model of the agent harnesses (the hash), prompt injection and silently registering an outbound remote MCP endpoint
rurp 10 hours ago
Lots of discussion about less terrible alternatives to postman. For those already using a Jetbrains IDE there's a builtin rest client that works well. I haven't used it for anything too complicated, but for routine stuff where you need to hit an endpoint and fiddle with the payload and headers it's great.
isityettime 9 hours ago
> [for every] Jetbrains IDE there's a builtin rest client that works well
There's also one available as a major mode for Emacs: https://melpa.org/#/restclient
If the command line is acceptable but you want more of a focus on usability than curl has, there's httpie (https://httpie.io/) and its clone xh (https://github.com/ducaale/xh).
rhdunn 10 hours ago
The JetBrains IDE, Visual Studio, and VS Code all support http files as well, which can be checked into an application.
kubelsmieci 9 hours ago
The REST Client for VS Code is pretty good; I’ve been using it for a few years now.
wackget 6 hours ago
I use RESTer, a Firefox extension, to test APIs: https://addons.mozilla.org/en-US/firefox/addon/rester/
It's an in-browser equivalent of Postman.
I much prefer the approach of being able to use the browser for things like this. It feels much more lightweight than installing a piece of desktop software.
toddmorey 11 hours ago
Why do all these tools require a paid account? Bruno specifically says it’s platform-free and stores everything in git.
saikatsg 10 hours ago
Bruno has some premium features: https://www.usebruno.com/pricing
Waterluvian 11 hours ago
I replaced that garbage with Insomnia years back. I’m just waiting until I hear that Insomnia is also a problem and where to go next.
mzajc 11 hours ago
Insomnia 8.0 and above requires an account on their servers to use. The stated reason was that this makes it easier to advertise to you. No thanks.
Older versions are fine, though.
tastyfreeze 10 hours ago
Bruno is a serviceable replacement that is local first.
skinfaxi 8 hours ago
reddalo 10 hours ago
Insomnia _has_ a problem, since it forces you to create a cloud account with them.
Bruno [1] is the current better alternative to Insomnia.
Keyframe 10 hours ago
My path was: Postman -> Turns into shit -> Insomnia -> Turns into shit -> Bruno.. let's hope Bruno doesn't turn into shit.
walthamstow 9 hours ago
reddalo 8 hours ago
amflare 10 hours ago
I've been using Insomnia whenever I can since before Covid. Its been nice, but ever since they started pushing accounts so aggressively, I've switched to Yaak to get back to that feel of a simple API client that prompted me to switch to Insomia in the first place. 100% recommend. https://yaak.app/
Waterluvian 10 hours ago
That looks appealing but the existence of a Pricing page tells me it's just a matter of time.
I have a sense that a dumb Web API testing UI application is really not that hard to get AI to implement. These apps all look about the same for a reason. So maybe there will be a prevailing FOSS option that isn't trying to monetize.
gschier 10 hours ago
pamcake 6 hours ago
Why not do your own (yes) diligence instead of relying on hearsay? It doesn't take a lot of digging to see it in this case.
georgel 11 hours ago
Just installed it, it's funny their landing page is littered with every AI buzzword too. But I am going to give Insomnia a try, I've heard people talk about it and a few others on HN over the years. I just need a glorified cURL GUI at the end of the day.
silverjaw an hour ago
Give Sannr a try. It's an open source API client built for coding agents.
It's built by a former Postmanaut, me!
jmuguy 11 hours ago
Yeah it got bought by Kong a while back, and they're definitely not a great company, but the application itself still seems pretty OK.
I really like that you can paste a curl in to setup a new request.
This is definitely the type of app that some AI agent could cobble together pretty quickly, so I don't know why Postman etc thinks they have enough of a moat to keep enshittifying their product.
debo_ 11 hours ago
I use Bruno. I forget what Insomnia did that irritated me, but Bruno is the closest I've found to a dumb client that doesn't pester me for an account.
xlayn 9 hours ago
When they started uploading things to the server and requiring you to have an account to access the things that they STOLE from your machine without authorization in first place, I uninstall it...
What can go wrong by uploading your things, if you had any passwords or users there that "pinky promise" will not be uploaded, then running AI and maybe oops have a leak and now someone is hitting your production servers?
simpaticoder 5 hours ago
Yes, this is very bad. I've alerted my team and we'll be deprecating its use immediately. Hopefully procurement can get refunds on the licenses we purchased not that long ago. Something tells me Postman is going to regret violating people's trust - the moat isn't so large that people must endure unethical, if not illegal, behavior like this.
neya 10 hours ago
Wow, the timing is perfect, I was going to post about this. I also found out last night that they actually proxy your requests without your permission. I have setup an exclusion within my firewall for certain request parameters, but it kept getting blocked despite all my settings a though it was going through their server. That really pissed me off since these requests actually contain sensitive data they did not have permission to intercept.
Postman also removed the ability to export individual requests and grouped them into "Share" which means now you have to get a subscription to get your data out, and most export options are gone completely, except for collections itself - which they ask you questions why before you can get your data out. Fuck Postman. I moved to Insomnia as of last night (open source).
eddieroger 8 hours ago
Many, many years ago, I used Postman for the first time, way back when it was a Chrome plugin. As an iOS dev, it was amazing to be able to validate the requests I needed to make outside the context of my code to validate things worked. Until, one day, I wasn't seeing something iterate in the responses I was getting as I expected to. Many cmd+R presses later, I talked to the API team to check logs, and we found that Postman was caching what should have been independent requests. Easily blamed on Chrome at the time, but it was an undocumented and unexpected behavior by Postman, who really should have better handled making each request unique.
I didn't need another reason not to use Postman, but I'll take it. Shame on them for moving in shadows.
stemlord 3 hours ago
I never enjoyed using postman even a decade ago. Always felt bloated and confusing ui for something that seems like it could be a command line tool
theseamusjames 10 hours ago
If there's ever been a perfect app to vibecode your own replacement, it's postman. Claude can knock out a completely usable competitor in under an hour, I'm sure of it. A day of tweaking and you'll have everything you need.
silverjaw an hour ago
Already built. Check out Sannr. I'm a former Postmanaut and built it as an open source solution.
Sannr is an API platform built for coding agents that builds API context over time.
crisnoble 6 hours ago
Free name idea: GETBoy
fergie 9 hours ago
It was never, ever clear to me why you needed to use Postman instead of Curl
AdmiralAsshat 7 hours ago
Been some years since I had to use it (and I think my company jettisoned it shortly thereafter), but at its peak, I remember it doing some things really well that were a PITA to setup locally in a terminal with cURL.
The biggest "Oh my god, this is so much easier" moment was just setting up a tiny JS script onto the login API to stash the bearer token from the return response into a variable, and then propagate it into the header of all subsequent calls. Trying to script THAT in Bash (parsing the bearer token from the return response) was also a headache and never worked 100% for me.
Although that was me trying to do it manually. I'm sure a vibe-coded solution would probably work well enough these days.
Tubelord 4 hours ago
I was on a team where work was often presented and demo'd to semi technical managers and stakeholders. For the backend guys, this was the best we had.
Nice to see the leaner alternatives people are suggesting here.
lexoj 8 hours ago
I think because editing in terminals text was not a good development experience, navigating the curdor, and pressing Enter would issue the command.
Personally I use a wrapper cli I built myself over curl which automatically gets api docs of my product and easily get the token so its great for agents
to11mtm 5 hours ago
At least for me, the appeal was always minimal.
As a .NET developer I had been using LinqPad for years, and just kept a set of template scripts for the various rote web-call scripts I might need to do e.x. XML or JSON, Auth handling, etc.
(For the non .NET folks, LinqPad is a simple application that lets you write small script-esque bits of C#/F#/VB.NET and has a wonderful little `.Dump()` method that can pretty-print just about any object to it's output window, and even export that output window to Excel/HTML which is nice for some tasks.)
polotics 8 hours ago
nah, a python script that wraps what needs wrapping has been my go-to since that day Postman said I had to log in
Neikius 6 hours ago
Switched to intellij http scratches ages ago. Then go curl. I remember a bunch of people using postman from a decade to a few years ago. It's been a while since I've seen anyone. Probably people who do it rarely but haven't taken the time to change tools.
sitzkrieg 8 hours ago
postman has been malware since the day they added accounts many years ago. luckily only low skill cli fearing developers mostly gravitated to it, esp anytime in the past decade
OhMeadhbh 8 hours ago
I think if you're using Postman, you don't care about sharing your data with random other people/companies on the intarwebs.
JoeDohn 7 hours ago
Postman management is something else. I remember a few years ago, once they had that VC money, they made it so you had to log/pushed you to. funny, considering it's basically a GUI for curl and then they spent a ton of money on some party with famous singers or something.
A bit sad, but I guess that’s the new normal.
throw03172019 10 hours ago
Postman was amazing 6-8 years ago. What a downfall it’s been.
rienbdj 10 hours ago
Postman feels pointless when I have an agent plus curl.
taosx 9 hours ago
"When someone shows you who they are, believe them the first time.".
I dropped them when they first started forcing you to have an account and from them only used it when work made it mandatory, in some cases we even dropped them for other alternatives (http with source in git, scripts..etc)
random3 7 hours ago
What do you think will happen next to every SaaS that was pumped and hasn't exited?
Good to wonder what will happen to every SaaS or every company that has many users it can't monetize any longer.
bitbasher 10 hours ago
Would you be willing to pay for a local only postman alternative if it was built by hand and native (no electron)?
stronglikedan 9 hours ago
People are paying for Bruno, and probably wishing it would load near instantly (no electron), so there's like a market.
closetheloopdev 9 hours ago
With AI agents at our disposal, can we not just have them code up something we need to use instead of using such sketchy apps like Postman?
It'd be a personal dev app where only features we need are implemented, including features only we (and no one else) need.
xbar 5 hours ago
I loved Postman when I first started with it. I was so happy when I uninstalled it about 4 months ago.
Colegno 11 hours ago
I really don't see the point of Postman. It used to be light and efficient, now it's bloated and inefficient
clickety_clack 10 hours ago
I haven’t used postman for years and I don’t know why anyone would. Are people really paying for it?
stillpointlab 10 hours ago
If there ever was a tool that could be vibe coded, a postman-like is the one.
neoyagami 9 hours ago
Welp, time to vibecode an non cloud version :/
phyzome 5 hours ago
And I'm the weirdo who has always just used curl.
IlikeMadison 10 hours ago
Use impostman.el/verb.el/restclient.el in Emacs.
donmb 9 hours ago
We left Postman long time ago and only use Bruno.
leftnode 8 hours ago
Man it really sucks because Postman's scripting, automation, and sharing features are nice.
itsafarqueue 9 hours ago
There are few apps more amenable to one shotting with your ai sub than postman et al
shahbaby 7 hours ago
Postman really should have known better who their customers are.
reamaer 6 hours ago
Golf playing bill paying ceos and ctos
maxdo 10 hours ago
This is their very bad attempt to survive , who need this in the age of agents ?
arttaboi 11 hours ago
Never liked Postman since they started forcing everyone to signup. Sometimes I hate VCs who unnecessarily funds and ruins a perfectly fine product (of course founders are equally guilty).
Sparkyte 9 hours ago
We are in the new era of provider malware. GREEEAAAAT! Thanks AI!
igleria 9 hours ago
The old gray mare, she ain't what she used to be...
p0w3n3d 10 hours ago
Curl Web Interface shouldn't require any payment at all
Havoc 10 hours ago
If even half of that is true then they’re cooked
mococa 9 hours ago
I miss the native macOS app Paw
guessmyname 9 hours ago
Why miss? It still exists, just renamed as RapidAPI → https://paw.cloud
It is still fully native (real native, not fake web-driver native).
sgarman 8 hours ago
I'm a PAW fan but the emails I've gotten from them make it sound like it won't be around much longer.
"No new versions of PAW are currently planned for release. No additional bug fixes, security updates, or feature enhancements are planned."
mococa 8 hours ago
Nice to know!
richwater 11 hours ago
Postman went from a nice tool to an almost virus in just a few years. It's crazy that anyone still uses it.
I'm currently using Bruno (https://www.usebruno.com/)
saikatsg 10 hours ago
They have an open format for API collections: https://www.opencollection.com/
statenjason 10 hours ago
I made the switch to Bruno years ago after getting hounded by Postman’s sales team and Insomnia started requiring an account.
Works well enough without getting in my way.
rs999gti 10 hours ago
Does anyone know if Bruno is not on the same path as Postman?
reddalo 10 hours ago
They have a "Pricing" page, so it's a matter of time before it enshittifies. But it's still nice as of now.
devmor 11 hours ago
Switched to Bruno myself, and moved my team to it last year as well. Vast improvement over late stage Postman.
oxedom 6 hours ago
Dead product
system2 8 hours ago
At this point, with coding agents, it would be stupid to waste time with Postman. I already uninstalled it after using it for over a decade. Build your own simple tools for debugging, my friends. The old archaic era is over.
silverjaw an hour ago
I built an open source alternative called Sannr. It's an API platform built for coding agents.
As I've mentioned in other posts, I'm a former Postmanaut who built it as a response to the lack of options for agents on the market.
vachina 10 hours ago
Thanks, I still use Postman out of muscle memory. Will use Bruno or Insomnia (as recommended here)
plagiarist 11 hours ago
Unsurprising. I loved the tool but it was obviously time to drop it when they began pushing for logins.
O3marchnative 9 hours ago
At least it has never been easier to transition to another tool or to make your own.
languagehacker 11 hours ago
I've always kind of thought that Postman was an enshittification story waiting to happen. I've always felt like they prey on people who just aren't comfortable with the command line, and so there isn't much more stooping lower for them than something like this.
ebtebt 10 hours ago
Thank you for the reminder, I had not deleted Postman yet. Done :D
tty456 10 hours ago
Part of Postman's ongoing enshittification...
orphereus 11 hours ago
Does everything have to go to shit when money is involved?
pizzafeelsright 10 hours ago
No. Postman sells nothing of value.
At this point I do not see why the entirety of their software could not be a one shot prompt for the price of deer nuts.
orphereus 7 hours ago
With that mindset, why do you even need a postman clone? Just have your $LLM test out the software using raw curl commands.
freakynit 39 minutes ago
paulddraper 9 hours ago
> price of deer nuts
Which, in case others didn't know, are under a buck.
rs999gti 10 hours ago
Depends. Is it an investment grant or loan? The former is money to grow with no expectations on growth. The latter has an investor giving money in expectation of a return.
Most of the YC companies are loan backed with investors pushing milestones for the next investment chunk or round.
autoexec 10 hours ago
Pretty much. It's just a question of how fast it happens. The more capable something is of making money without compromising the product or exploiting users the longer it will take, but once people who are sick with pathological greed get involved they'll eventually start to demand enshittifying the product and selling out the userbase to squeeze more and more money into their pockets.
orphereus 7 hours ago
Well, somehow the society has gone for the better over the course of history, even with pathologically greedy and evil people constantly in positions of power, so that counts as something.
Edit: mankind has gone for the better
autoexec 4 hours ago
lenerdenator 11 hours ago
Until we stop relying on SV as the standard-bearer for tech culture? Absolutely.
cglan 9 hours ago
This happened to me. Holy fuck I was pissed
moi2388 11 hours ago
Thank god we moved to Bruno and sometimes just http files in vs code or jetbrains
skilning 10 hours ago
Enshittification wins again. :(
jongjong 6 hours ago
How are people still using Postman? You can vibecode Postman in like 30 minutes.
Do you even need it at all now? You can just ask the AI to write you a test suite in 5 minutes which calls all your endpoints with all the parameters and assertions you could possibly want. It's way more flexible than Postman and it's just a text file/script; you can share with any team member.
ern 2 hours ago
Yep, you can create a pretty HTML harness even for your APIs.
dsschnau 8 hours ago
I'm glad to find out from this comment section that I'm not the only one who has noticed Postman is the poster-child of Enshittification.
Surac 11 hours ago
who the hell needs that. skills are just md files
fifilura 10 hours ago
Or pre-AI it was a python script inside a notebook.