crx-permission-risk
Score the privilege a Chrome MV3 extension takes from its manifest, and diff permission sets.
Sollte ich dies verwenden
Qualität und Sicherheit
Basierend auf einer automatisierten Analyse der Tool-Definitionen und der Einhaltung des Protokolls.
Kontextkosten
Dies ist die ungefähre Anzahl der Tokens, die jedes Mal verbraucht werden, wenn die Tools des Servers in den Kontext eines Modells geladen werden. Höhere Werte verringern die Aufmerksamkeit, die für andere Aufgaben verfügbar ist.
Installieren
Installation mit einem Klick
Fügen Sie dies Ihrer Datei `claude_desktop_config.json` hinzu:
{
"mcpServers": {
"crx-permission-risk": {
"url": "https://crx-permission-risk-mcp.lipmichal.workers.dev/mcp"
}
}
}Remote-Endpunkte
https://crx-permission-risk-mcp.lipmichal.workers.dev/mcpstreamable-httpWas es kann
Tool-Inventar
Tools (3)
🟢analyze_manifest(manifest)
Static privilege analysis of a Chrome MV3 manifest.json. Returns a 0-100 risk score, the permissions and host patterns that drive it, dangerous permission combinations, and MV3 policy problems (remote code, unsafe-eval, <all_urls> web_accessible_resources). Content-script matches are counted as host access even when host_permissions is empty.
Eingabe-Schema
{
"type": "object",
"properties": {
"manifest": {
"description": "The manifest.json content, as a JSON object or a JSON string."
}
},
"required": [
"manifest"
]
}🟢explain_permission(permission)
Returns the privilege weight (0-10) for a single Chrome extension permission or host pattern, what it actually grants, whether it triggers an install-time warning, and the narrower alternative if one exists.
Eingabe-Schema
{
"type": "object",
"properties": {
"permission": {
"type": "string",
"description": "A permission name such as cookies, or a host pattern such as <all_urls>."
}
},
"required": [
"permission"
]
}🟡compare_permission_sets(before, after, before_hosts, after_hosts)
Compares the permissions and host patterns of two versions of an extension. Reports the score delta, what was added or removed, and whether the change widens the install-time warning set, which makes Chrome disable the extension for existing users until they re-accept.
Eingabe-Schema
{
"type": "object",
"properties": {
"before": {
"type": "array",
"items": {
"type": "string"
},
"description": "API permissions in the current published version."
},
"after": {
"type": "array",
"items": {
"type": "string"
},
"description": "API permissions in the new version."
},
"before_hosts": {
"type": "array",
"items": {
"type": "string"
},
"description": "host_permissions in the current published version."
},
"after_hosts": {
"type": "array",
"items": {
"type": "string"
},
"description": "host_permissions in the new version."
}
},
"required": [
"before",
"after"
]
}Community
Nachweis