Back to search
100
MCP live MCP 2025-06-18 streamable-http

one.zovo/crx-permission-risk

one.zovo/crx-permission-risk

Score the privilege a Chrome MV3 extension takes from its manifest, and diff permission sets.

Watch this dependency Share evidence report
Uptime
100.0%
5 direct probes · 30d
Response
1199ms
last probe
Tools
3
callable
Resources
0
readable
Prompts
0
available
Primary URL
https://crx-permission-risk-mcp.lipmichal.workers.dev/mcp
Score: 100/100
Handshake verified by our own probe.
pass Answers the MCP handshake 50/50
The handshake and the list calls succeeded on the primary URL.
pass Lists tools, resources or prompts 30/30
3 tools, 0 resources, 0 prompts returned.
pass 3 or more catalogue items 10/10
3 items in total; 3 or more earns these points.
pass Describes itself 10/10
93 characters; more than 30 earns these points.

Tools · 3

analyze_manifest

Static privilege analysis of a Chrome MV3 manifest.json. Returns a 0-100 risk score, the permissions and host patterns that drive it, dangerous permission combinations, and MV3 policy problems (remote…

explain_permission

Returns the privilege weight (0-10) for a single Chrome extension permission or host pattern, what it actually grants, whether it triggers an install-time warning, and the narrower alternative if one …

compare_permission_sets

Compares the permissions and host patterns of two versions of an extension. Reports the score delta, what was added or removed, and whether the change widens the install-time warning set, which makes …

How to use

Claude Desktop or claude.ai: add a custom connector (Customize → Connectors; on Team and Enterprise plans an owner adds it under Organization settings → Connectors) with this server URL: https://crx-permission-risk-mcp.lipmichal.workers.dev/mcp

Cursor or Cline: add to your MCP config:

{
  "mcpServers": {
    "one.zovo/crx-permission-risk": {
      "url": "https://crx-permission-risk-mcp.lipmichal.workers.dev/mcp",
      "transport": "streamable-http"
    }
  }
}