Chrome Extension Permission Risk

Name: Chrome Extension Permission Risk
Author: zovo

@zovoMCP server · External

Score the privilege a Chrome MV3 extension takes from its manifest, and diff permission sets.

Penetration testingv1.0.0

Freeno charge per call

One address for any MCP client. No sign-in needed on this server.

Safety · AI4%Low risk
Does · AIReads3 read · 0 act, by tool name
ConnectRemote · no sign-inStreamable HTTP
PopularityNo stars yetUpdated 9 Aug 2026
StatusAll clearAnswered Odel on 26 Sep

What it does

3 read

Grouped by tool name. At most: only reads or looks up information.

What it costs

Free

Odel charges nothing per call. The publisher may charge for its own service.

Tools

3 · grouped by tool name · checked 26 Sep 2026

Read · 3Look things up

analyze_manifest
explain_permission
compare_permission_sets

Try it in the Inspector

No README yet. What Odel knows about this module is on the right.

Similar modules

Browse Penetration testing

MCP server: One MCP server.
Jshookmcp
@vmoranv · External2,035 GitHub stars.
Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.
9% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
9% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
9% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
OpenOSINTRun by its publisher: served from their own domain, namespace checked by the registry.
@openosint · External1,744 GitHub stars.
AI-powered OSINT agent & MCP server. 21 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.
11% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
11% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
11% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
MCP server: One MCP server.
Wireshark
@bx33661 · External288 GitHub stars.
Professional network analysis with tshark. Security audits, deep-dives, and threat detection.
5% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 known advisories (OSV) in its package.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 known advisories (OSV) in its package.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 known advisories (OSV) in its package.Free to use.
MCP server: One MCP server.
Crowdsentinel
@thomasxm · External209 GitHub stars.
AI threat hunting & incident response for Elasticsearch/OpenSearch with endpoint & network forensics
6% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
6% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
6% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
MCP server: One MCP server.
Reversecore MCP
@sjkim1127 · External208 GitHub stars.
Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.
7% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
7% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
7% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
MCP server: One MCP server.
Shodan
@w0h1v · External174 GitHub stars.
MCP server for Shodan API — device search, IP lookup, DNS, and CVE/CPE queries.
7% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
7% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
7% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Code PathfinderRun by its publisher: served from their own domain, namespace checked by the registry.
@codepathfinder · External142 GitHub stars.
Code intelligence MCP server: call graphs, type inference, and symbol search for Python/Go.
3% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
3% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
3% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
MCP server: One MCP server.
ObservatoryRun by its publisher: served from their own domain, namespace checked by the registry.
@kryptosai · External141 GitHub stars.
MCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.
6% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
6% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
6% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.