Permissions Chrome extensions
Every permission observed on Chrome, read from each listing's manifest, with a plain-English description and how many live extensions request it.
| Permission | What it lets an extension do | Sensitive | Chrome extensions |
|---|---|---|---|
storage
|
Save its own settings and data locally | 208,461 | |
activeTab
|
See the page you're currently viewing, only when you click the extension | 105,178 | |
scripting
|
Run scripts on web pages you visit | 87,941 | |
tabs
|
See your open tabs and the pages you're on | 73,992 | |
alarms
|
Schedule its code to run at a later time | 42,178 | |
contextMenus
|
Add items to your right-click menu | 34,732 | |
sidePanel
|
Show its own panel at the side of your browser | 29,432 | |
notifications
|
Show you desktop notifications | 27,766 | |
downloads
|
Start downloads and see your download history | 19,382 | |
unlimitedStorage
|
Save an unlimited amount of its own data locally | 18,303 | |
identity
|
Get your basic account/profile information for sign-in | 18,139 | |
cookies
|
Read and change your cookies, which can include login sessions | ⚠ yes | 14,799 |
offscreen
|
Run a hidden page to do background work, such as playing audio or reading documents | 14,264 | |
clipboardWrite
|
Write to your clipboard | 13,906 | |
webNavigation
|
See what pages you navigate to and when | 10,460 | |
declarativeNetRequest
|
Block or modify web requests using a predefined rule set | 10,306 | |
webRequest
|
See the web requests your browser makes, including URLs you visit | ⚠ yes | 9,296 |
search
|
Run searches with your default search engine | 4,957 | |
bookmarks
|
Read and change your bookmarks | 4,592 | |
declarativeNetRequestWithHostAccess
|
Block or modify web requests, with access to the content of matched sites | 4,269 | |
clipboardRead
|
Read the contents of your clipboard | ⚠ yes | 4,216 |
windows
|
Open, close and arrange your browser windows | 3,822 | |
debugger
|
Attach to your tabs' debugger, giving it deep access to page content and network traffic | ⚠ yes | 3,817 |
tabGroups
|
Organise your tabs into groups | 3,801 | |
tabCapture
|
Record the picture and sound of your browser tabs | ⚠ yes | 3,487 |
nativeMessaging
|
Exchange messages with a program installed on your computer | ⚠ yes | 3,426 |
favicon
|
Show the icons of websites | 2,914 | |
history
|
Read and change your browsing history | ⚠ yes | 2,519 |
idle
|
Detect when your computer is idle or locked | 2,436 | |
system.display
|
Read details of your displays | 2,377 | |
webview
|
Show web pages inside its own windows | 2,163 | |
identity.email
|
See the email address of your browser account | 2,126 | |
geolocation
|
See your physical location | 2,067 | |
proxy
|
Control how your browser connects to the internet, including routing traffic through other servers | ⚠ yes | 2,040 |
background
|
Keep running in the background, even when no windows are open | 1,992 | |
management
|
View, enable, or disable your other installed extensions | ⚠ yes | 1,769 |
power
|
Stop your computer or screen from going to sleep | 1,557 | |
browsingData
|
Delete your browsing data, such as history, cookies and downloads | ⚠ yes | 1,498 |
topSites
|
See the sites you visit most often | 1,329 | |
declarativeNetRequestFeedback
|
See which of your web requests its blocking rules matched | 1,255 | |
accessibilityFeatures.read
|
Read your accessibility settings | 1,251 | |
videoCapture
|
Use your camera | ⚠ yes | 1,174 |
webRequestAuthProvider
|
Answer login prompts from websites and proxies on your behalf | ⚠ yes | 1,133 |
commands
|
Respond to keyboard shortcuts | 1,009 | |
desktopCapture
|
Capture your screen, a window or a tab | ⚠ yes | 967 |
pointerLock
|
Hide and capture your mouse pointer inside its window | 909 | |
tts
|
Read text aloud | 858 | |
accessibilityFeatures.modify
|
Change your accessibility settings | 845 | |
declarativeContent
|
Act on pages based on their content, without reading it | 829 | |
sessions
|
See recently closed tabs and tabs open on your other devices | 789 | |
privacy
|
View and change your browser's privacy and security settings | ⚠ yes | 667 |
fullscreen
|
Make its window fill your screen | 630 | |
system.memory
|
Read how much memory your computer has | 512 | |
audioCapture
|
Use your microphone | ⚠ yes | 445 |
contentSettings
|
Change which websites may use your camera, microphone, location, cookies and more | ⚠ yes | 408 |
gcm
|
Receive push messages from its developer | 382 | |
system.cpu
|
Read details of your processor | 373 | |
userScripts
|
Run user scripts - code that did not ship with the extension - on the pages you visit | ⚠ yes | 370 |
downloads.open
|
Open files you have downloaded | ⚠ yes | 350 |
serial
|
Connect to devices on your computer's serial ports | ⚠ yes | 336 |
alwaysOnTopWindows
|
Keep its windows above all others | 292 | |
system.network
|
Read details of your network adapters | 263 | |
fileSystem
|
Open files and folders you choose on your computer | 226 | |
overrideEscFullscreen
|
Stop the Esc key from leaving full screen in its window | 197 | |
pageCapture
|
Save complete copies of the pages you visit | 196 | |
browser
|
Open new tabs in your browser | 188 | |
webRequestBlocking
|
See and block or modify web requests before they complete | ⚠ yes | 179 |
enterprise.deviceAttributes
|
Read your device's serial number and asset tags on managed devices | 175 | |
usb
|
Connect to USB devices plugged into your computer | ⚠ yes | 167 |
fontSettings
|
Change your browser's font settings | 150 | |
system.storage
|
Read details of your storage devices | 149 | |
downloads.ui
|
Change how the downloads bar looks | 148 | |
downloads.shelf
|
Show or hide the downloads bar | 130 | |
readingList
|
Read and change your reading list | 116 | |
hid
|
Connect to keyboards, game controllers and other input devices | ⚠ yes | 113 |
app.window.fullscreen
|
Make its window fill your screen | 92 | |
microphone
|
Use your microphone | ⚠ yes | 88 |
printerProvider
|
Offer printers to your browser's print dialog | 86 | |
app.window.fullscreen.overrideEsc
|
Stop the Esc key from leaving full screen in its window | 82 | |
permissions
|
Ask you for more permissions while it runs | 76 | |
syncFileSystem
|
Store its own files in your cloud storage | 75 | |
action
|
Nothing - this is a manifest setting, not a permission | 73 | |
omnibox
|
Add a keyword to your address bar | 57 | |
runtime
|
Nothing - this is not a real permission, so listing it grants no access | 57 | |
unlimited_storage
|
Requests the "unlimited_storage" capability. | 57 | |
fileSystem.write
|
Write to files and folders you choose on your computer | 52 | |
app.window
|
Requests the "app.window" capability. | 49 | |
audio
|
Requests the "audio" capability. | 48 | |
input
|
Requests the "input" capability. | 38 | |
app.window.alwaysOnTop
|
Requests the "app.window.alwaysOnTop" capability. | 36 | |
ttsEngine
|
Provide a voice for reading text aloud | 33 | |
enterprise.networkingAttributes
|
Requests the "enterprise.networkingAttributes" capability. | 31 | |
webAuthenticationProxy
|
Requests the "webAuthenticationProxy" capability. | 28 | |
wallpaper
|
Requests the "wallpaper" capability. | 27 | |
mdns
|
Requests the "mdns" capability. | 25 | |
processes
|
Requests the "processes" capability. | 25 | |
enterprise.platformKeys
|
Requests the "enterprise.platformKeys" capability. | 24 | |
pushMessaging
|
Requests the "pushMessaging" capability. | 24 | |
fileSystem.retainEntries
|
Requests the "fileSystem.retainEntries" capability. | 23 | |
enterprise.hardwarePlatform
|
Requests the "enterprise.hardwarePlatform" capability. | 22 | |
fileSystemProvider
|
Requests the "fileSystemProvider" capability. | 21 | |
clipboard
|
Requests the "clipboard" capability. | 20 | |
camera
|
Requests the "camera" capability. | 17 | |
aiLanguageModelOriginTrial
|
Requests the "aiLanguageModelOriginTrial" capability. | 15 | |
i18n
|
Requests the "i18n" capability. | 14 | |
printing
|
Requests the "printing" capability. | 14 | |
theme
|
Requests the "theme" capability. | 14 | |
host_permissions
|
Requests the "host_permissions" capability. | 13 | |
networking.onc
|
Requests the "networking.onc" capability. | 13 | |
clipboard-write
|
Requests the "clipboard-write" capability. | 12 | |
fileBrowserHandler
|
Requests the "fileBrowserHandler" capability. | 12 | |
virtualKeyboard
|
Requests the "virtualKeyboard" capability. | 11 | |
searchProvider
|
Requests the "searchProvider" capability. | 10 | |
externally_connectable
|
Requests the "externally_connectable" capability. | 9 | |
platformKeys
|
Requests the "platformKeys" capability. | 9 | |
certificateProvider
|
Requests the "certificateProvider" capability. | 8 | |
devtools
|
Requests the "devtools" capability. | 8 | |
menus
|
Requests the "menus" capability. | 8 | |
metricsPrivate
|
Requests the "metricsPrivate" capability. | 8 | |
dns
|
Requests the "dns" capability. | 7 | |
documentScan
|
Requests the "documentScan" capability. | 6 | |
fileSystem.directory
|
Requests the "fileSystem.directory" capability. | 6 | |
INTERNAL_SPEAKER
|
Requests the "INTERNAL_SPEAKER" capability. | 5 | |
app.window.shape
|
Requests the "app.window.shape" capability. | 5 | |
bluetooth
|
Requests the "bluetooth" capability. | 5 | |
browserAction
|
Requests the "browserAction" capability. | 5 | |
incognito
|
Requests the "incognito" capability. | 5 | |
languageModel
|
Requests the "languageModel" capability. | 5 | |
loginState
|
Requests the "loginState" capability. | 5 | |
networking
|
Requests the "networking" capability. | 5 | |
networking.config
|
Requests the "networking.config" capability. | 5 | |
publicSuffix
|
Requests the "publicSuffix" capability. | 5 | |
activetab
|
See the page you're currently viewing, only when you click the extension | 4 | |
appview
|
Requests the "appview" capability. | 4 | |
browser_action
|
Requests the "browser_action" capability. | 4 | |
chromeosInfoPrivate
|
Requests the "chromeosInfoPrivate" capability. | 4 | |
enterprise.login
|
Requests the "enterprise.login" capability. | 4 | |
session
|
Requests the "session" capability. | 4 | |
terminalPrivate
|
Requests the "terminalPrivate" capability. | 4 | |
vpnProvider
|
Requests the "vpnProvider" capability. | 4 | |
aiLanguageModel
|
Requests the "aiLanguageModel" capability. | 3 | |
copyText
|
Requests the "copyText" capability. | 3 | |
developerPrivate
|
Requests the "developerPrivate" capability. | 3 | |
documentPictureInPicture
|
Requests the "documentPictureInPicture" capability. | 3 | |
feedbackPrivate
|
Requests the "feedbackPrivate" capability. | 3 | |
imageWriterPrivate
|
Requests the "imageWriterPrivate" capability. | 3 | |
location
|
Requests the "location" capability. | 3 | |
networkingPrivate
|
Requests the "networkingPrivate" capability. | 3 | |
os.diagnostics
|
Requests the "os.diagnostics" capability. | 3 | |
os.events
|
Requests the "os.events" capability. | 3 | |
os.telemetry
|
Requests the "os.telemetry" capability. | 3 | |
os.telemetry.serial_number
|
Requests the "os.telemetry.serial_number" capability. | 3 | |
system
|
Requests the "system" capability. | 3 | |
web_accessible_resources
|
Requests the "web_accessible_resources" capability. | 3 | |
window
|
Requests the "window" capability. | 3 | |
account360
|
Requests the "account360" capability. | 2 | |
activeTabs
|
Requests the "activeTabs" capability. | 2 | |
app.runtime
|
Requests the "app.runtime" capability. | 2 | |
app.window.alpha
|
Requests the "app.window.alpha" capability. | 2 | |
crashReportPrivate
|
Requests the "crashReportPrivate" capability. | 2 | |
crypto
|
Requests the "crypto" capability. | 2 | |
declarativeWebRequest
|
Requests the "declarativeWebRequest" capability. | 2 | |
declarative_net_request
|
Requests the "declarative_net_request" capability. | 2 | |
displayCapture
|
Requests the "displayCapture" capability. | 2 | |
dom
|
Requests the "dom" capability. | 2 | |
eTab
|
Requests the "eTab" capability. | 2 | |
enterprise.remoteApps
|
Requests the "enterprise.remoteApps" capability. | 2 | |
extension
|
Requests the "extension" capability. | 2 | |
eyeDropper
|
Requests the "eyeDropper" capability. | 2 | |
host
|
Requests the "host" capability. | 2 | |
local-fonts
|
Requests the "local-fonts" capability. | 2 | |
login
|
Requests the "login" capability. | 2 | |
network.config
|
Requests the "network.config" capability. | 2 | |
os.attached_device_info
|
Requests the "os.attached_device_info" capability. | 2 | |
os.bluetooth_peripherals_info
|
Requests the "os.bluetooth_peripherals_info" capability. | 2 | |
os.diagnostics.network_info_mlab
|
Requests the "os.diagnostics.network_info_mlab" capability. | 2 | |
printPreview
|
Requests the "printPreview" capability. | 2 | |
sidebarAction
|
Requests the "sidebarAction" capability. | 2 | |
sidepanel
|
Show its own panel at the side of your browser | 2 | |
storage.session
|
Requests the "storage.session" capability. | 2 | |
systemLog
|
Requests the "systemLog" capability. | 2 | |
tab
|
Requests the "tab" capability. | 2 | |
trialML
|
Requests the "trialML" capability. | 2 | |
|
Requests the " " capability. | 1 | |
TrustedHTML
|
Requests the "TrustedHTML" capability. | 1 | |
actions
|
Requests the "actions" capability. | 1 | |
active_tab
|
Requests the "active_tab" capability. | 1 | |
activityLogPrivate
|
Requests the "activityLogPrivate" capability. | 1 | |
ai.summarizer
|
Requests the "ai.summarizer" capability. | 1 | |
all_frames
|
Requests the "all_frames" capability. | 1 | |
app
|
Requests the "app" capability. | 1 | |
audio_capture
|
Requests the "audio_capture" capability. | 1 | |
automation
|
Requests the "automation" capability. | 1 | |
bloomberg.com/quote/
|
Requests the "bloomberg.com/quote/" capability. | 1 | |
caches
|
Requests the "caches" capability. | 1 | |
captureVisibleTab
|
Requests the "captureVisibleTab" capability. | 1 | |
cdn.jsdelivr.net
|
Requests the "cdn.jsdelivr.net" capability. | 1 | |
chrome.storage
|
Requests the "chrome.storage" capability. | 1 | |
clipboard-read
|
Requests the "clipboard-read" capability. | 1 | |
cnbc.com/quotes/
|
Requests the "cnbc.com/quotes/" capability. | 1 | |
contextMenu
|
Requests the "contextMenu" capability. | 1 | |
contextMenus.onShown
|
Requests the "contextMenus.onShown" capability. | 1 | |
contextualIdentities
|
Requests the "contextualIdentities" capability. | 1 | |
cors
|
Requests the "cors" capability. | 1 | |
cross-origin-isolation
|
Requests the "cross-origin-isolation" capability. | 1 | |
currentTab
|
Requests the "currentTab" capability. | 1 | |
data_collection_permissions
|
Requests the "data_collection_permissions" capability. | 1 | |
declarativeNetRequestWithDynamicRules
|
Requests the "declarativeNetRequestWithDynamicRules" capability. | 1 | |
declarativeNetRequestWithHeaders
|
Requests the "declarativeNetRequestWithHeaders" capability. | 1 | |
declartiveContent
|
Requests the "declartiveContent" capability. | 1 | |
dev-ddvchgamoldzunzy.us.auth0.com
|
Requests the "dev-ddvchgamoldzunzy.us.auth0.com" capability. | 1 | |
dev-ioqpwrp1wc5d6fnf.us.auth0.com
|
Requests the "dev-ioqpwrp1wc5d6fnf.us.auth0.com" capability. | 1 | |
devtools_page
|
Requests the "devtools_page" capability. | 1 | |
diagnostics
|
Requests the "diagnostics" capability. | 1 | |
download
|
Requests the "download" capability. | 1 | |
downloadsWithoutFilename
|
Requests the "downloadsWithoutFilename" capability. | 1 | |
enterprise.directory
|
Requests the "enterprise.directory" capability. | 1 | |
enterprise.reportingPrivate
|
Requests the "enterprise.reportingPrivate" capability. | 1 | |
executeScript
|
Requests the "executeScript" capability. | 1 | |
experimental
|
Requests the "experimental" capability. | 1 | |
experimentalAiData
|
Requests the "experimentalAiData" capability. | 1 | |
extraHeaders
|
Requests the "extraHeaders" capability. | 1 | |
fetch
|
Requests the "fetch" capability. | 1 | |
file
|
Requests the "file" capability. | 1 | |
fileBrowserProvider
|
Requests the "fileBrowserProvider" capability. | 1 | |
fileHandling
|
Requests the "fileHandling" capability. | 1 | |
fileManagerPrivate
|
Requests the "fileManagerPrivate" capability. | 1 | |
fileSystem.requestDownloads
|
Requests the "fileSystem.requestDownloads" capability. | 1 | |
filesystem
|
Open files and folders you choose on your computer | 1 | |
finance.yahoo.com
|
Requests the "finance.yahoo.com" capability. | 1 | |
fontAccess
|
Requests the "fontAccess" capability. | 1 | |
gamepad
|
Requests the "gamepad" capability. | 1 | |
gener8Private
|
Requests the "gener8Private" capability. | 1 | |
google.com/finance/
|
Requests the "google.com/finance/" capability. | 1 | |
host-permissions
|
Requests the "host-permissions" capability. | 1 | |
hostPermission
|
Requests the "hostPermission" capability. | 1 | |
identity.id
|
Requests the "identity.id" capability. | 1 | |
identity.profile
|
Requests the "identity.profile" capability. | 1 | |
indexedDB
|
Requests the "indexedDB" capability. | 1 | |
infobars
|
Requests the "infobars" capability. | 1 | |
investing.com/equities/
|
Requests the "investing.com/equities/" capability. | 1 | |
ipAddress
|
Requests the "ipAddress" capability. | 1 | |
island.desktopCapturer
|
Requests the "island.desktopCapturer" capability. | 1 | |
key
|
Requests the "key" capability. | 1 | |
localFonts
|
Requests the "localFonts" capability. | 1 | |
localNetwork
|
Requests the "localNetwork" capability. | 1 | |
localStorage
|
Requests the "localStorage" capability. | 1 | |
logPrivate
|
Requests the "logPrivate" capability. | 1 | |
marketwatch.com/investing/stock/
|
Requests the "marketwatch.com/investing/stock/" capability. | 1 | |
mediaRecorder
|
Requests the "mediaRecorder" capability. | 1 | |
messaging
|
Requests the "messaging" capability. | 1 | |
midi
|
Requests the "midi" capability. | 1 | |
minimal-ui
|
Requests the "minimal-ui" capability. | 1 | |
navigator
|
Requests the "navigator" capability. | 1 | |
network
|
Requests the "network" capability. | 1 | |
newTab
|
Requests the "newTab" capability. | 1 | |
node
|
Requests the "node" capability. | 1 | |
notification
|
Requests the "notification" capability. | 1 | |
notificationProvider
|
Requests the "notificationProvider" capability. | 1 | |
offline_enabled
|
Requests the "offline_enabled" capability. | 1 | |
openPopup
|
Requests the "openPopup" capability. | 1 | |
os.telemetry.network_info
|
Requests the "os.telemetry.network_info" capability. | 1 | |
page_action
|
Requests the "page_action" capability. | 1 | |
platformInfo
|
Requests the "platformInfo" capability. | 1 | |
plugins
|
Requests the "plugins" capability. | 1 | |
popup
|
Requests the "popup" capability. | 1 | |
printingMetrics
|
Requests the "printingMetrics" capability. | 1 | |
privateNetworkAccess
|
Requests the "privateNetworkAccess" capability. | 1 | |
profile
|
Requests the "profile" capability. | 1 | |
recordingCapture
|
Requests the "recordingCapture" capability. | 1 | |
retainEntries
|
Requests the "retainEntries" capability. | 1 | |
reuters.com/markets
|
Requests the "reuters.com/markets" capability. | 1 | |
robinhood.com
|
Requests the "robinhood.com" capability. | 1 | |
safeBrowsingPrivate
|
Requests the "safeBrowsingPrivate" capability. | 1 | |
sideAction
|
Requests the "sideAction" capability. | 1 | |
sidePanel.open
|
Requests the "sidePanel.open" capability. | 1 | |
smartCardProviderPrivate
|
Requests the "smartCardProviderPrivate" capability. | 1 | |
sockets
|
Requests the "sockets" capability. | 1 | |
sockets.tcp
|
Requests the "sockets.tcp" capability. | 1 | |
sockets.udp
|
Requests the "sockets.udp" capability. | 1 | |
storage.managed
|
Requests the "storage.managed" capability. | 1 | |
stripting
|
Requests the "stripting" capability. | 1 | |
system.power
|
Requests the "system.power" capability. | 1 | |
tabs.create
|
Requests the "tabs.create" capability. | 1 | |
tabs.executeScript
|
Requests the "tabs.executeScript" capability. | 1 | |
todo
|
Requests the "todo" capability. | 1 | |
tradingview.com/chart
|
Requests the "tradingview.com/chart" capability. | 1 | |
tradingview.com/symbols
|
Requests the "tradingview.com/symbols" capability. | 1 | |
unlimitedstorage
|
Save an unlimited amount of its own data locally | 1 | |
webRequest.filterResponseData
|
Requests the "webRequest.filterResponseData" capability. | 1 | |
webRequestExtraHeaders
|
Requests the "webRequestExtraHeaders" capability. | 1 | |
webRequestFilterResponse
|
Requests the "webRequestFilterResponse" capability. | 1 | |
webRequestHeaders
|
Requests the "webRequestHeaders" capability. | 1 | |
webcamPrivate
|
Requests the "webcamPrivate" capability. | 1 | |
windows.focused
|
Requests the "windows.focused" capability. | 1 | |
writeText
|
Requests the "writeText" capability. | 1 | |
wsj.com/market-data/quotes
|
Requests the "wsj.com/market-data/quotes" capability. | 1 | |
wsj.com/search?&query
|
Requests the "wsj.com/search?&query" capability. | 1 |