NestDaddy

Crx Permission Risk

one.zovo/crx-permission-risk · v1.0.0

Score the privilege a Chrome MV3 extension takes from its manifest, and diff permission sets.

Connect Remote server

Terminal
claude mcp add --transport http crx-permission-risk https://crx-permission-risk-mcp.lipmichal.workers.dev/mcp
~/.cursor/mcp.json
{
  "mcpServers": {
    "crx-permission-risk": {
      "url": "https://crx-permission-risk-mcp.lipmichal.workers.dev/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "crx-permission-risk": {
      "type": "http",
      "url": "https://crx-permission-risk-mcp.lipmichal.workers.dev/mcp"
    }
  }
}
Claude Desktop
Settings > Connectors > Add custom connector
URL: https://crx-permission-risk-mcp.lipmichal.workers.dev/mcp

Tools 3 found in our last check

  • analyze_manifest

    Static privilege analysis of a Chrome MV3 manifest.json. Returns a 0-100 risk score, the permissions and host patterns that drive it, dangerous permission combinations, and MV3 policy problems (remote code, unsafe-eval, <all_urls> web_accessible_resources). Content-script matche…

  • explain_permission

    Returns the privilege weight (0-10) for a single Chrome extension permission or host pattern, what it actually grants, whether it triggers an install-time warning, and the narrower alternative if one exists.

  • compare_permission_sets

    Compares the permissions and host patterns of two versions of an extension. Reports the score delta, what was added or removed, and whether the change widens the install-time warning set, which makes Chrome disable the extension for existing users until they re-accept.

Details

Endpointhttps://crx-permission-risk-mcp.lipmichal.workers.dev/mcp (Streamable HTTP)
First published9 Aug 2026
Last updated9 Aug 2026
Registry nameone.zovo/crx-permission-risk

More browser automation servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.