MCPサーバー

crx-permission-risk

            one.zovo/crx-permission-risk
        

開発者向けツールセキュリティ公開・接続可能 MCP 2026-07-28

このMCPでできること

Analyzes Chrome MV3 extension permissions, scores privilege risk, explains permissions, and compares manifest permission changes.

analyze_manifest

Analyze a Chrome extension manifest

Static privilege analysis of a Chrome MV3 manifest.json. Returns a 0-100 risk score, the permissions and host patterns that drive it, dangerous permission combinations, and MV3 policy problems (remote code, unsafe-eval, <all_urls> web_accessible_resources). Content-script matches are counted as host access even when host_permissions is empty.

入力スキーマ

{'type': 'object', 'required': ['manifest'], 'properties': {'manifest': {'description': 'The manifest.json content, as a JSON object or a JSON string.'}}}

compare_permission_sets

Diff two permission sets

Compares the permissions and host patterns of two versions of an extension. Reports the score delta, what was added or removed, and whether the change widens the install-time warning set, which makes Chrome disable the extension for existing users until they re-accept.

入力スキーマ

{'type': 'object', 'required': ['before', 'after'], 'properties': {'after': {'type': 'array', 'items': {'type': 'string'}, 'description': 'API permissions in the new version.'}, 'before': {'type': 'array', 'items': {'type': 'string'}, 'description': 'API permissions in the current published version.'}, 'after_hosts': {'type': 'array', 'items': {'type': 'string'}, 'description': 'host_permissions in the new version.'}, 'before_hosts': {'type': 'array', 'items': {'type': 'string'}, 'description': 'host_permissions in the current published version.'}}}

explain_permission

Explain one permission

Returns the privilege weight (0-10) for a single Chrome extension permission or host pattern, what it actually grants, whether it triggers an install-time warning, and the narrower alternative if one exists.

入力スキーマ

{'type': 'object', 'required': ['permission'], 'properties': {'permission': {'type': 'string', 'description': 'A permission name such as cookies, or a host pattern such as <all_urls>.'}}}

追加

                            compare_permission_sets
                        

2026年9月17日12:54

追加

                            explain_permission
                        

2026年9月17日12:54

追加

                            analyze_manifest
                        

2026年9月17日12:54

サーバー情報

バージョン

1.0.0

通信方式

Streamable HTTP

ツール

レイテンシ

182 ms

最終スキャン

2026年10月1日2:50

初回確認

2026年9月13日2:25

エンドポイント

https://crx-permission-risk-mcp.lipmichal.workers.dev/mcp

crx-permission-risk

このMCPでできること

ツール

最近のツール変更

類似のMCPサーバー

hyperion

Vee3

IA-QA — 130+ QA & Dev Tools for AI Agents

validoria-mcp

HubVibe: Pay-per-Call Tools for AI Agents: Web Search, Email Verify, KYC, Stocks, Crypto, News, Data

developer-tools

Qiniso

ContrastAPI