Extension permissions
Every permission observed across the StoreTally census, with a plain-English description and how many live extensions request it. · Stats
| Permission | What it lets an extension do | Sensitive | Extensions |
|---|---|---|---|
storage |
Save its own settings and data locally | 81,257 | |
activeTab |
See the page you're currently viewing, only when you click the extension | 41,788 | |
scripting |
Run scripts on web pages you visit | 33,335 | |
tabs |
See your open tabs and the pages you're on | 31,464 | |
alarms |
Schedule its code to run at a later time | 14,849 | |
contextMenus |
Add items to your right-click menu | 14,769 | |
notifications |
Show you desktop notifications | 11,049 | |
sidePanel |
Show its own panel at the side of your browser | 10,401 | |
downloads |
Start downloads and see your download history | 7,692 | |
unlimitedStorage |
Save an unlimited amount of its own data locally | 7,174 | |
identity |
Get your basic account/profile information for sign-in | 6,700 | |
cookies |
Read and change your cookies, which can include login sessions | ⚠ | 6,377 |
clipboardWrite |
Write to your clipboard | 5,420 | |
offscreen |
Run a hidden page to do background work, such as playing audio or reading documents | 4,894 | |
declarativeNetRequest |
Block or modify web requests using a predefined rule set | 4,688 | |
webNavigation |
See what pages you navigate to and when | 4,428 | |
webRequest |
See the web requests your browser makes, including URLs you visit | ⚠ | 4,373 |
bookmarks |
Read and change your bookmarks | 2,201 | |
search |
Run searches with your default search engine | 2,186 | |
clipboardRead |
Read the contents of your clipboard | ⚠ | 1,714 |
declarativeNetRequestWithHostAccess |
Block or modify web requests, with access to the content of matched sites | 1,627 | |
windows |
Open, close and arrange your browser windows | 1,606 | |
nativeMessaging |
Exchange messages with a program installed on your computer | ⚠ | 1,505 |
tabGroups |
Organise your tabs into groups | 1,292 | |
debugger |
Attach to your tabs' debugger, giving it deep access to page content and network traffic | ⚠ | 1,252 |
history |
Read and change your browsing history | ⚠ | 1,232 |
tabCapture |
Record the picture and sound of your browser tabs | ⚠ | 1,224 |
favicon |
Show the icons of websites | 1,077 | |
background |
Keep running in the background, even when no windows are open | 1,018 | |
proxy |
Control how your browser connects to the internet, including routing traffic through other servers | ⚠ | 1,001 |
idle |
Detect when your computer is idle or locked | 977 | |
system.display |
Read details of your displays | 948 | |
management |
View, enable, or disable your other installed extensions | ⚠ | 933 |
identity.email |
See the email address of your browser account | 912 | |
webview |
Show web pages inside its own windows | 816 | |
geolocation |
See your physical location | 807 | |
topSites |
See the sites you visit most often | 709 | |
browsingData |
Delete your browsing data, such as history, cookies and downloads | ⚠ | 684 |
declarativeNetRequestFeedback |
See which of your web requests its blocking rules matched | 611 | |
power |
Stop your computer or screen from going to sleep | 547 | |
webRequestAuthProvider |
Answer login prompts from websites and proxies on your behalf | ⚠ | 532 |
commands |
Respond to keyboard shortcuts | 464 | |
accessibilityFeatures.read |
Read your accessibility settings | 446 | |
videoCapture |
Use your camera | ⚠ | 434 |
desktopCapture |
Capture your screen, a window or a tab | ⚠ | 400 |
declarativeContent |
Act on pages based on their content, without reading it | 399 | |
tts |
Read text aloud | 345 | |
privacy |
View and change your browser's privacy and security settings | ⚠ | 335 |
pointerLock |
Hide and capture your mouse pointer inside its window | 327 | |
sessions |
See recently closed tabs and tabs open on your other devices | 323 | |
accessibilityFeatures.modify |
Change your accessibility settings | 299 | |
webRequestBlocking |
See and block or modify web requests before they complete | ⚠ | 291 |
fullscreen |
Make its window fill your screen | 241 | |
contentSettings |
Change which websites may use your camera, microphone, location, cookies and more | ⚠ | 207 |
system.memory |
Read how much memory your computer has | 203 | |
audioCapture |
Use your microphone | ⚠ | 174 |
gcm |
Receive push messages from its developer | 172 | |
system.cpu |
Read details of your processor | 159 | |
downloads.open |
Open files you have downloaded | ⚠ | 150 |
userScripts |
Run user scripts - code that did not ship with the extension - on the pages you visit | ⚠ | 148 |
serial |
Connect to devices on your computer's serial ports | ⚠ | 146 |
alwaysOnTopWindows |
Keep its windows above all others | 124 | |
system.network |
Read details of your network adapters | 109 | |
fileSystem |
Open files and folders you choose on your computer | 100 | |
pageCapture |
Save complete copies of the pages you visit | 93 | |
downloads.shelf |
Show or hide the downloads bar | 80 | |
fontSettings |
Change your browser's font settings | 72 | |
browser |
Open new tabs in your browser | 70 | |
enterprise.deviceAttributes |
Read your device's serial number and asset tags on managed devices | 70 | |
overrideEscFullscreen |
Stop the Esc key from leaving full screen in its window | 68 | |
usb |
Connect to USB devices plugged into your computer | ⚠ | 68 |
system.storage |
Read details of your storage devices | 61 | |
downloads.ui |
Change how the downloads bar looks | 53 | |
printerProvider |
Offer printers to your browser's print dialog | 48 | |
hid |
Connect to keyboards, game controllers and other input devices | ⚠ | 46 |
app.window.fullscreen |
Make its window fill your screen | 44 | |
readingList |
Read and change your reading list | 42 | |
app.window.fullscreen.overrideEsc |
Stop the Esc key from leaving full screen in its window | 40 | |
microphone |
Use your microphone | ⚠ | 40 |
permissions |
Ask you for more permissions while it runs | 38 | |
overrideEdgeStartPage |
Replace Edge's start page | 34 | |
syncFileSystem |
Store its own files in your cloud storage | 34 | |
omnibox |
Add a keyword to your address bar | 29 | |
runtime |
Nothing - this is not a real permission, so listing it grants no access | 28 | |
action |
Nothing - this is a manifest setting, not a permission | 27 | |
fileSystem.write |
Write to files and folders you choose on your computer | 22 | |
ttsEngine |
Provide a voice for reading text aloud | 22 | |
audio |
Requests the "audio" capability. | 19 | |
app.window |
Requests the "app.window" capability. | 17 | |
app.window.alwaysOnTop |
Requests the "app.window.alwaysOnTop" capability. | 16 | |
unlimited_storage |
Requests the "unlimited_storage" capability. | 16 | |
webAuthenticationProxy |
Requests the "webAuthenticationProxy" capability. | 15 | |
input |
Requests the "input" capability. | 14 | |
processes |
Requests the "processes" capability. | 12 | |
enterprise.platformKeys |
Requests the "enterprise.platformKeys" capability. | 11 | |
enterprise.hardwarePlatform |
Requests the "enterprise.hardwarePlatform" capability. | 10 | |
enterprise.networkingAttributes |
Requests the "enterprise.networkingAttributes" capability. | 10 | |
fileSystem.retainEntries |
Requests the "fileSystem.retainEntries" capability. | 10 | |
aiLanguageModelOriginTrial |
Requests the "aiLanguageModelOriginTrial" capability. | 9 | |
printing |
Requests the "printing" capability. | 9 | |
i18n |
Requests the "i18n" capability. | 8 | |
mdns |
Requests the "mdns" capability. | 7 | |
theme |
Requests the "theme" capability. | 7 | |
wallpaper |
Requests the "wallpaper" capability. | 7 | |
clipboard |
Requests the "clipboard" capability. | 6 | |
fileSystemProvider |
Requests the "fileSystemProvider" capability. | 6 | |
menus |
Requests the "menus" capability. | 6 | |
activetab |
See the page you're currently viewing, only when you click the extension | 5 | |
browserAction |
Requests the "browserAction" capability. | 5 | |
camera |
Requests the "camera" capability. | 5 | |
clipboard-write |
Requests the "clipboard-write" capability. | 5 | |
host_permissions |
Requests the "host_permissions" capability. | 5 | |
metricsPrivate |
Requests the "metricsPrivate" capability. | 5 | |
networking.onc |
Requests the "networking.onc" capability. | 5 | |
platformKeys |
Requests the "platformKeys" capability. | 5 | |
externally_connectable |
Requests the "externally_connectable" capability. | 4 | |
fileSystem.directory |
Requests the "fileSystem.directory" capability. | 4 | |
languageModel |
Requests the "languageModel" capability. | 4 | |
pushMessaging |
Requests the "pushMessaging" capability. | 4 | |
browser_action |
Requests the "browser_action" capability. | 3 | |
certificateProvider |
Requests the "certificateProvider" capability. | 3 | |
dns |
Requests the "dns" capability. | 3 | |
fileBrowserHandler |
Requests the "fileBrowserHandler" capability. | 3 | |
virtualKeyboard |
Requests the "virtualKeyboard" capability. | 3 | |
account360 |
Requests the "account360" capability. | 2 | |
contextMenus.onShown |
Requests the "contextMenus.onShown" capability. | 2 | |
devtools |
Requests the "devtools" capability. | 2 | |
devtools_page |
Requests the "devtools_page" capability. | 2 | |
documentScan |
Requests the "documentScan" capability. | 2 | |
extension |
Requests the "extension" capability. | 2 | |
eyeDropper |
Requests the "eyeDropper" capability. | 2 | |
fetch |
Requests the "fetch" capability. | 2 | |
incognito |
Requests the "incognito" capability. | 2 | |
loginState |
Requests the "loginState" capability. | 2 | |
printPreview |
Requests the "printPreview" capability. | 2 | |
searchProvider |
Requests the "searchProvider" capability. | 2 | |
session |
Requests the "session" capability. | 2 | |
storage.managed |
Requests the "storage.managed" capability. | 2 | |
web_accessible_resources |
Requests the "web_accessible_resources" capability. | 2 | |
INTERNAL_SPEAKER |
Requests the "INTERNAL_SPEAKER" capability. | 1 | |
actions |
Requests the "actions" capability. | 1 | |
activeTabs |
Requests the "activeTabs" capability. | 1 | |
active_tab |
Requests the "active_tab" capability. | 1 | |
activetabs |
Requests the "activetabs" capability. | 1 | |
all_frames |
Requests the "all_frames" capability. | 1 | |
app |
Requests the "app" capability. | 1 | |
app.runtime |
Requests the "app.runtime" capability. | 1 | |
app.window.shape |
Requests the "app.window.shape" capability. | 1 | |
appview |
Requests the "appview" capability. | 1 | |
audio_capture |
Requests the "audio_capture" capability. | 1 | |
automation |
Requests the "automation" capability. | 1 | |
bluetooth |
Requests the "bluetooth" capability. | 1 | |
cdn.jsdelivr.net |
Requests the "cdn.jsdelivr.net" capability. | 1 | |
chrome.runtime |
Requests the "chrome.runtime" capability. | 1 | |
chrome.storage |
Requests the "chrome.storage" capability. | 1 | |
chromeosInfoPrivate |
Requests the "chromeosInfoPrivate" capability. | 1 | |
coccocPrivate |
Requests the "coccocPrivate" capability. | 1 | |
content_script |
Requests the "content_script " capability. | 1 | |
content_scripts |
Requests the "content_scripts" capability. | 1 | |
copyText |
Requests the "copyText" capability. | 1 | |
cors |
Requests the "cors" capability. | 1 | |
crypto |
Requests the "crypto" capability. | 1 | |
currentTab |
Requests the "currentTab" capability. | 1 | |
declarativeWebRequest |
Requests the "declarativeWebRequest" capability. | 1 | |
declarative_net_request |
Requests the "declarative_net_request" capability. | 1 | |
declartiveContent |
Requests the "declartiveContent" capability. | 1 | |
developerPrivate |
Requests the "developerPrivate" capability. | 1 | |
diagnostics |
Requests the "diagnostics" capability. | 1 | |
dom |
Requests the "dom" capability. | 1 | |
enterprise.reportingPrivate |
Requests the "enterprise.reportingPrivate" capability. | 1 | |
experimentalAiData |
Requests the "experimentalAiData" capability. | 1 | |
extraHeaders |
Requests the "extraHeaders" capability. | 1 | |
feedbackPrivate |
Requests the "feedbackPrivate" capability. | 1 | |
fontAccess |
Requests the "fontAccess" capability. | 1 | |
gamepad |
Requests the "gamepad" capability. | 1 | |
gener8Private |
Requests the "gener8Private" capability. | 1 | |
host |
Requests the "host" capability. | 1 | |
identity.profile |
Requests the "identity.profile" capability. | 1 | |
imageWriterPrivate |
Requests the "imageWriterPrivate" capability. | 1 | |
local-fonts |
Requests the "local-fonts" capability. | 1 | |
localFonts |
Requests the "localFonts" capability. | 1 | |
location |
Requests the "location" capability. | 1 | |
managementWeb |
Requests the "managementWeb" capability. | 1 | |
media |
Requests the "media" capability. | 1 | |
mediaRecorder |
Requests the "mediaRecorder" capability. | 1 | |
minimal-ui |
Requests the "minimal-ui" capability. | 1 | |
navigator |
Requests the "navigator" capability. | 1 | |
network |
Requests the "network" capability. | 1 | |
networking |
Requests the "networking" capability. | 1 | |
networking.config |
Requests the "networking.config" capability. | 1 | |
networkingPrivate |
Requests the "networkingPrivate" capability. | 1 | |
node |
Requests the "node" capability. | 1 | |
notification |
Requests the "notification" capability. | 1 | |
notificationProvider |
Requests the "notificationProvider" capability. | 1 | |
os.diagnostics |
Requests the "os.diagnostics" capability. | 1 | |
os.events |
Requests the "os.events" capability. | 1 | |
os.telemetry |
Requests the "os.telemetry" capability. | 1 | |
os.telemetry.serial_number |
Requests the "os.telemetry.serial_number" capability. | 1 | |
page_action |
Requests the "page_action" capability. | 1 | |
printingMetrics |
Requests the "printingMetrics" capability. | 1 | |
profile |
Requests the "profile" capability. | 1 | |
retainEntries |
Requests the "retainEntries" capability. | 1 | |
safeBrowsingPrivate |
Requests the "safeBrowsingPrivate" capability. | 1 | |
script |
Requests the "script" capability. | 1 | |
sideAction |
Requests the "sideAction" capability. | 1 | |
sidebarAction |
Requests the "sidebarAction" capability. | 1 | |
sidepanel |
Show its own panel at the side of your browser | 1 | |
sockets.tcp |
Requests the "sockets.tcp" capability. | 1 | |
sockets.udp |
Requests the "sockets.udp" capability. | 1 | |
storage.session |
Requests the "storage.session" capability. | 1 | |
stotage |
Requests the "stotage" capability. | 1 | |
system |
Requests the "system" capability. | 1 | |
terminalPrivate |
Requests the "terminalPrivate" capability. | 1 | |
trialML |
Requests the "trialML" capability. | 1 | |
unlimitedstorage |
Save an unlimited amount of its own data locally | 1 | |
vpnProvider |
Requests the "vpnProvider" capability. | 1 | |
webRequestExtraHeaders |
Requests the "webRequestExtraHeaders" capability. | 1 | |
webRequestHeaders |
Requests the "webRequestHeaders" capability. | 1 |