crx-permission-risk
Score the privilege a Chrome MV3 extension takes from its manifest, and diff permission sets.
我該用這個嗎
品質與安全性
根據工具定義與協定合規性的自動化分析。
上下文成本
這是每次將伺服器的工具載入模型上下文時所消耗的約略 token 數量。數量越高，可用於其他工作的注意力就越少。
安裝
一鍵安裝
將以下內容加入你的 `claude_desktop_config.json` 檔案：
{
"mcpServers": {
"crx-permission-risk": {
"url": "https://crx-permission-risk-mcp.lipmichal.workers.dev/mcp"
}
}
}遠端端點
https://crx-permission-risk-mcp.lipmichal.workers.dev/mcpstreamable-http它能做什麼
工具清單
工具（3）
🟢analyze_manifest(manifest)
Static privilege analysis of a Chrome MV3 manifest.json. Returns a 0-100 risk score, the permissions and host patterns that drive it, dangerous permission combinations, and MV3 policy problems (remote code, unsafe-eval, <all_urls> web_accessible_resources). Content-script matches are counted as host access even when host_permissions is empty.
輸入結構描述
{
"type": "object",
"properties": {
"manifest": {
"description": "The manifest.json content, as a JSON object or a JSON string."
}
},
"required": [
"manifest"
]
}🟢explain_permission(permission)
Returns the privilege weight (0-10) for a single Chrome extension permission or host pattern, what it actually grants, whether it triggers an install-time warning, and the narrower alternative if one exists.
輸入結構描述
{
"type": "object",
"properties": {
"permission": {
"type": "string",
"description": "A permission name such as cookies, or a host pattern such as <all_urls>."
}
},
"required": [
"permission"
]
}🟡compare_permission_sets(before, after, before_hosts, after_hosts)
Compares the permissions and host patterns of two versions of an extension. Reports the score delta, what was added or removed, and whether the change widens the install-time warning set, which makes Chrome disable the extension for existing users until they re-accept.
輸入結構描述
{
"type": "object",
"properties": {
"before": {
"type": "array",
"items": {
"type": "string"
},
"description": "API permissions in the current published version."
},
"after": {
"type": "array",
"items": {
"type": "string"
},
"description": "API permissions in the new version."
},
"before_hosts": {
"type": "array",
"items": {
"type": "string"
},
"description": "host_permissions in the current published version."
},
"after_hosts": {
"type": "array",
"items": {
"type": "string"
},
"description": "host_permissions in the new version."
}
},
"required": [
"before",
"after"
]
}社群
證據