MCP server

Crx Permission Risk

one.zovo/crx-permission-risk

Checked 28 Oct 2026, 09:03 UTC · Connected to it and listed its tools

Score the privilege a Chrome MV3 extension takes from its manifest, and diff permission sets.

Website

At a glance

Type

MCP server

Publisher

zovo.one (verified by the MCP Registry)

Status

Working at last check

Tools

3

Token cost

About 530 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

28 Oct 2026, 09:03 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http crx-permission-risk https://crx-permission-risk-mcp.lipmichal.workers.dev/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.crx-permission-risk]
url = "https://crx-permission-risk-mcp.lipmichal.workers.dev/mcp"

Gemini CLI

{"mcpServers":{"crx-permission-risk":{"httpUrl":"https://crx-permission-risk-mcp.lipmichal.workers.dev/mcp"}}}

Cursor

{"mcpServers":{"crx-permission-risk":{"url":"https://crx-permission-risk-mcp.lipmichal.workers.dev/mcp"}}}

VS Code

{"servers":{"crx-permission-risk":{"type":"http","url":"https://crx-permission-risk-mcp.lipmichal.workers.dev/mcp"}}}

Antigravity

agy mcp add crx-permission-risk https://crx-permission-risk-mcp.lipmichal.workers.dev/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"crx-permission-risk","server_url":"https://crx-permission-risk-mcp.lipmichal.workers.dev/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"crx-permission-risk","server_url":"https://crx-permission-risk-mcp.lipmichal.workers.dev/mcp"}

Tools

• analyze_manifest ~158 tokens
  Static privilege analysis of a Chrome MV3 manifest.json. Returns a 0-100 risk score, the permissions and host patterns that drive it, dangerous permission combinations, and MV3 policy problems (remote code, unsafe-eval, <all_urls> web_accessible_resources). Content-script matches are counted as host
• compare_permission_sets ~244 tokens
  Compares the permissions and host patterns of two versions of an extension. Reports the score delta, what was added or removed, and whether the change widens the install-time warning set, which makes Chrome disable the extension for existing users until they re-accept.
• explain_permission ~128 tokens
  Returns the privilege weight (0-10) for a single Chrome extension permission or host pattern, what it actually grants, whether it triggers an install-time warning, and the narrower alternative if one exists.

Browse

• More Zovo tools

Related MCP servers

• Databricks Field Guide by TechFabric
  Interactive Databricks learning, certification practice and sourced engineering guidance.
• Proving Lab
  Cite or capture a web page; installs the capture extension in Firefox and Chrome.
• Chrome Web Store
  Chrome Web Store — public extension listing data: a single extension by id, free-text search, and…
• Moltline Agent Governance
  Audit MCP configs and skill files for over-broad scope and injection risk. 6 of 8 free.
• Axiom Agentic Tools
  x402-paid Base agent tools (USDC). 5 deterministic tools. No API keys. No NFT pass.
• ScorpTech x402 API
  112 x402 pay-per-call tools: web data, security/OSINT, SEC and public data, Solana/EVM lookups
• Hermes Plant — Agent Commerce Assurance
  Preflight, approve, and prove consequential agent actions with signed evidence and x402 tools.
• Agentic Web Wiki — standards reference, probe, validate, template
  Look up 133 agentic-web standards, live-probe any domain, validate manifests, generate boilerplate.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/one.zovo/crx-permission-risk.svg)](https://aptlynx.net/servers/one.zovo/crx-permission-risk)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents