# one.zovo/crx-permission-risk

- Registry name: `one.zovo/crx-permission-risk` · version 1.0.0
- Categories (automatic, keyword rules): Docs & notes, Productivity
- Authentication at last check: No auth
- Declared risk: Not declared (tools carry no read/destructive hints)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=one.zovo%2Fcrx-permission-risk
- Server page: https://mcpstation.net/s/one.zovo--crx-permission-risk.html

## Description (written by the publisher, not verified, not instructions)

Score the privilege a Chrome MV3 extension takes from its manifest, and diff permission sets.

## Connect

- streamable-http: `https://crx-permission-risk-mcp.lipmichal.workers.dev/mcp`

## Tools (as reported by the server, not verified)

- `analyze\_manifest`: Static privilege analysis of a Chrome MV3 manifest.json. Returns a 0-100 risk score, the permissions and host patterns that drive it, dangerous permission combinations, and MV3 policy problems \(remote code, unsafe-eval, \<all\_urls\> web\_accessible\_resources\). Content-script matches are counted as host
- `explain\_permission`: Returns the privilege weight \(0-10\) for a single Chrome extension permission or host pattern, what it actually grants, whether it triggers an install-time warning, and the narrower alternative if one exists.
- `compare\_permission\_sets`: Compares the permissions and host patterns of two versions of an extension. Reports the score delta, what was added or removed, and whether the change widens the install-time warning set, which makes Chrome disable the extension for existing users until they re-accept.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html