| storage Allows the extension to store and retrieve its own data on your computer. | Very low risk impact | 192,119 | 19,096 | 38,171 |
| activeTab Grants temporary access to the currently active tab when the user interacts with the extension. This is a safer permission as it only works for the tab you are on and only when you use the extension. | Low risk impact | 100,490 | 9,665 | 23,380 |
| tabs Allows the extension to create, query, and modify your browser tabs. For example, a tab manager extension would need this. | Moderate risk impact | 79,143 | 9,556 | 22,753 |
| scripting Allows the extension to execute scripts and insert CSS into web pages. This is a very powerful permission that allows the extension to modify the content and behavior of websites you visit. | Very high risk impact | 71,699 | 7,361 | 7,012 |
| contextMenus Allows the extension to add new options to the right-click context menu. For example, an extension could add a "Search for this image on..." option. | Very low risk impact | 32,594 | 4,917 | 8,049 |
| alarms Allows the extension to schedule tasks to run at a specific time or periodically. For example, a to-do list extension could use this to show you a reminder. | Very low risk impact | 31,768 | 3,200 | 4,657 |
| notifications Allows the extension to show desktop notifications. For example, a chat application could notify you of new messages. | Low risk impact | 27,059 | 2,699 | 6,004 |
| sidePanel Allows the extension to display its own user interface in the browser's side panel. | Very low risk impact | 21,950 | 1,819 | 123 |
| identity Allows the extension to get an OAuth2 access token to authenticate you with services like Google or Facebook. | Very high risk impact | 16,009 | 1,091 | 1,076 |
| unlimitedStorage Allows the extension to exceed the normal storage quota. This is for extensions that need to store large amounts of data. | Low risk impact | 15,912 | 2,049 | 2,102 |
| downloads Allows the extension to manage your downloads. It can start, monitor, cancel, and search for downloaded files. | Moderate risk impact | 15,813 | 2,052 | 3,381 |
| cookies Allows the extension to access and modify cookies for websites. This can be used for managing logins or tracking user sessions. | Very high risk impact | 14,541 | 2,309 | 3,403 |
| clipboardWrite Allows the extension to write content to your clipboard. For example, you could click a button to copy a link or a piece of text. | Moderate risk impact | 12,300 | 1,170 | 3,210 |
| webRequest Allows the extension to observe and analyze network traffic. This permission is powerful and can see the data being sent and received by websites. (Manifest V2 only) | Very high risk impact | 10,838 | 2,062 | 7,465 |
| webNavigation Allows the extension to receive notifications about the status of web page navigation (e.g., when a page starts loading or has completed). | High risk impact | 10,326 | 1,568 | 3,166 |
| offscreen Allows an extension with a background service worker to use DOM APIs in a hidden document, for tasks that require it. | Low risk impact | 9,765 | 998 | 81 |
| declarativeNetRequest Allows the extension to block or modify network requests without intercepting them and viewing their content. This is often used by content blockers. | Low risk impact | 9,101 | 1,761 | 987 |
| search Allows the extension to override the default search provider in your browser. | High risk impact | 5,201 | 245 | 267 |
| bookmarks Allows the extension to read, create, and organize your bookmarks. A bookmark manager extension would need this permission. | Moderate risk impact | 4,049 | 1,042 | 1,220 |
| clipboardRead Allows the extension to read content from your clipboard. For example, a dictionary extension could use this to look up a word you have copied. | High risk impact | 3,927 | 418 | 883 |
| nativeMessaging Allows the extension to communicate with a native application installed on your computer. This is for extensions that need more capabilities than a browser can provide. | Low risk impact | 3,184 | 866 | 1,092 |
| background Allows the extension to run in the background, even when you are not directly interacting with it. This is necessary for extensions that need to be always active, like a notifier for new emails. | Very low risk impact | 3,063 | 445 | 173 |
| debugger Allows the extension to inspect and debug web pages, similar to the browser's developer tools. This is a powerful permission and should be granted with caution. | Very high risk impact | 2,635 | 231 | 42 |
| tabGroups Allows the extension to organize your tabs into groups. | Low risk impact | 2,617 | 273 | 174 |
| tabCapture Allows the extension to capture the audio and video content of a tab. | High risk impact | 2,464 | 254 | 36 |
| proxy Allows the extension to configure and manage the browser's proxy settings. This can be used to route your traffic through another server. | Very high risk impact | 2,418 | 293 | 685 |
| system.display Allows the extension to get information about the connected displays. | Low risk impact | 2,383 | 200 | 19 |
| history Allows the extension to read and modify your browsing history. Be cautious with this permission, as it gives access to sensitive information. | Very high risk impact | 2,274 | 702 | 766 |
| webRequestBlocking Allows the extension to block or modify network requests in real-time. This is used by advanced ad blockers but is being phased out in favor of `declarativeNetRequest`. (Manifest V2 only) | Very high risk impact | 2,185 | 480 | 5,056 |
| geolocation Allows the extension to access your physical location. A map or weather extension would need this to provide location-specific information. | Moderate risk impact | 2,165 | 141 | 260 |
| declarativeContent Allows the extension to show or hide its icon in the address bar depending on the content of the page. For example, an RSS reader extension could show its icon only on pages that have an RSS feed. | Very low risk impact | 2,144 | 185 | 117 |
| management Allows the extension to manage other installed extensions and themes. It can enable, disable, or uninstall them. | High risk impact | 2,136 | 355 | 657 |
| desktopCapture Allows the extension to capture the content of your screen, a specific window, or a browser tab. This is used by screen recording or screenshot extensions. | High risk impact | 2,109 | 102 | 29 |
| idle Allows the extension to detect when your computer is idle (not in use). | Low risk impact | 2,052 | 273 | 458 |
| power Allows the extension to prevent the system from entering power-saving modes (e.g., turning off the screen or sleeping). | Low risk impact | 1,482 | 38 | 10 |
| browsingData Allows the extension to clear your browsing data, such as cookies, history, and cached files. A privacy-focused extension might use this to help you clean up your digital footprint. | High risk impact | 1,477 | 262 | 452 |
| accessibilityFeatures.read Allows the extension to read accessibility features, which can be a user to understand how the user is interacting with the browser and web content. | Low risk impact | 1,310 | 0 | 0 |
| topSites Allows the extension to access the list of your most frequently visited websites. | Moderate risk impact | 1,291 | 368 | 215 |
| declarativeNetRequestFeedback Provides feedback on how `declarativeNetRequest` rules are being applied. Useful for debugging content blocking extensions. | Low risk impact | 1,256 | 243 | 91 |
| accessibilityFeatures.modify Allows the extension to modify accessibility features in the browser, such as making web content easier to read for visually impaired users. | Low risk impact | 882 | 0 | 0 |
| tts Stands for Text-to-Speech. Allows the extension to use the browser's text-to-speech engine to speak text aloud. | Low risk impact | 816 | 134 | 25 |
| gcm Stands for Google Cloud Messaging. Allows the extension to send and receive messages from a server, enabling push notifications. | Low risk impact | 695 | 39 | 10 |
| sessions Allows the extension to access and restore your recently closed tabs and browsing sessions. | Moderate risk impact | 598 | 99 | 379 |
| privacy Allows the extension to control privacy-related settings in the browser, such as whether to enable or disable certain web features. | High risk impact | 508 | 160 | 344 |
| system.memory Allows the extension to get information about the system's memory. | Low risk impact | 508 | 59 | 5 |
| contentSettings Allows the extension to control website settings, such as whether a site can use cookies, JavaScript, or show pop-ups. | Very high risk impact | 459 | 83 | 25 |
| system.cpu Allows the extension to get information about the CPU of the system. | Low risk impact | 416 | 51 | 3 |
| system.network Allows the extension to get information about network interfaces. | Moderate risk impact | 289 | 0 | 0 |
| downloads.open Allows the extension to open files that it has downloaded. | Very high risk impact | 251 | 66 | 155 |
| enterprise.deviceAttributes Allows an extension to read device attributes in an enterprise setting. This is for managed devices in a company or school. | Very low risk impact | 238 | 8 | 2 |
| pageCapture Allows the extension to save a web page as a single MHTML file. | High risk impact | 206 | 45 | 29 |
| system.storage Allows the extension to get information about storage devices. | Low risk impact | 186 | 19 | 3 |
| fontSettings Allows the extension to change the browser's font settings. | Low risk impact | 146 | 50 | 16 |
| printerProvider Allows the extension to act as a print service, making printers available to the browser. | Moderate risk impact | 98 | 4 | 2 |
| downloads.ui Allows the extension to show or hide the browser's downloads shelf. | Low risk impact | 81 | 18 | 3 |
| readingList Allows the extension to read and change items in your reading list. | Moderate risk impact | 65 | 2 | 0 |
| audio Allows the extension to control audio devices, such as adjusting volume or muting your speakers. | Low risk impact | 55 | 1 | 1 |
| enterprise.networkingAttributes Allows an extension to read network attributes in an enterprise setting. | Very low risk impact | 52 | 4 | 1 |
| ttsEngine Allows the extension to implement its own text-to-speech engine, providing different voices or languages. | Moderate risk impact | 39 | 11 | 3 |
| enterprise.hardwarePlatform Allows an extension to read hardware platform information in an enterprise setting. | Very low risk impact | 37 | 2 | 1 |
| wallpaper Allows the extension to change the wallpaper on ChromeOS. | Low risk impact | 37 | 3 | 1 |
| enterprise.platformKeys Allows an extension to access client certificates managed by the enterprise. | Very low risk impact | 32 | 0 | 1 |
| processes Allows the extension to view information about the browser's internal processes. | Low risk impact | 27 | 2 | 2 |
| fileSystemProvider Allows the extension to create virtual file systems that can be accessed from the ChromeOS file browser. | High risk impact | 24 | 0 | 1 |
| fileBrowserHandler Allows the extension to extend the ChromeOS file browser. For example, to add support for a new cloud storage service. | Low risk impact | 22 | 3 | 2 |
| webAuthenticationProxy Allows the extension to proxy Web Authentication API requests, enabling features like using a phone as a security key. | Very low risk impact | 18 | 4 | 1 |
| platformKeys Allows the extension to access hardware-backed client certificates for secure authentication. | Very high risk impact | 15 | 0 | 1 |
| printing Allows the extension to submit print jobs to the browser's print dialog. | Moderate risk impact | 14 | 0 | 4 |
| certificateProvider Allows the extension to provide digital certificates for authentication, which can be used to log in to certain websites or services. | Very high risk impact | 8 | 0 | 1 |
| dns Allows the extension to resolve domain names. This could be used by extensions that want to provide custom DNS services for privacy or security. | Low risk impact | 8 | 0 | 77 |
| loginState Allows the extension to access the login state (e.g., whether the user is logged in) on ChromeOS. | Very low risk impact | 8 | 0 | 0 |
| documentScan Access attached document scanners (ChromeOS) | Moderate risk impact | 7 | 0 | 1 |
| login Allows the extension to access user login information on ChromeOS. | Very low risk impact | 5 | 0 | 0 |
| vpnProvider Allows the extension to implement a VPN client. This is specific to ChromeOS. | Very high risk impact | 5 | 0 | 1 |
| printingMetrics Allows the extension to read data about printing usage. | Very low risk impact | 1 | 1 | 2 |