Permissions

To access most extension APIs and features, you must declare permissions in yourextension'smanifest. Some permissionstrigger warnings that users must allow to continue using the extension.

For more information on how permissions work, seeDeclare permissions. For bestpractices for using permissions with warnings, seePermission warning guidelines.

The following is a list of all available permissions and any warnings triggeredby specific permissions.

"accessibilityFeatures.modify"
Lets extensions modify accessibility feature states when using thechrome.accessibilityFeatures API.
Warning displayed:Change your accessibility settings.
"accessibilityFeatures.read"
Lets extensions read accessibility states when using thechrome.accessibilityFeatures API.
Warning displayed:Read your accessibility settings.
"activeTab"
Gives temporary access to the active tab through a user gesture. For details,seeactiveTab.
"alarms"
Gives access to thechrome.alarms API.
"audio"
Gives access to thechrome.audio API.
"background"
Makes Chrome start up early (as soon as the user logs into their computer,before they launch Chrome), and shut down late (even after its last window isclosed, until the user explicitly quits Chrome).
"bookmarks"
Gives access to thechrome.bookmarks API.
Warning displayed:Read and change your bookmarks.
"browsingData"
Gives access to thechrome.browsingData API.
"certificateProvider"
Gives access to thechrome.certificateProviderAPI.
"clipboardRead"
Lets the extension paste items from the clipboard using the web platformClipboard API.
Warning displayed:Read data you copy and paste.
"clipboardWrite"
Lets the extension cut and copy items to the clipboard using the web platformClipboard API.
Warning displayed:Modify data you copy and paste.
"contentSettings"
Gives access to thechrome.contentSettingsAPI.
Warning displayed:Change your settings that control websites' access tofeatures such as cookies, JavaScript, plugins, geolocation, microphone, cameraetc.
"contextMenus"
Gives access to thechrome.contextMenus API.
"cookies"
Gives access to thechrome.cookies API.
"debugger"
Gives access to thechrome.debugger API.
Warnings displayed:
  • Access the page debugger backend.
  • Read and change all your data on all websites.
"declarativeContent"
Gives access to thechrome.declarativeContentAPI.
"declarativeNetRequest"
Gives access to thechrome.declarativeNetRequestAPI.
Warning displayed:Block content on any page.
"declarativeNetRequestWithHostAccess"
Gives access to thechrome.declarativeNetRequestAPI but requires host permissions for all actions.
"declarativeNetRequestFeedback"
Gives permission to write errors and warnings to the DevTools console whenusing thechrome.declarativeNetRequestAPI. This permission is for use with unpacked extensions and is ignored forextensions installed from the Chrome Web Store.
Warning displayed:Read your browsing history.
"dns"
Gives access to thechrome.dns API.
"desktopCapture"
Gives access to thechrome.desktopCaptureAPI.
Warning displayed:Capture content of your screen.
"documentScan"
Gives access to thechrome.documentScan API.
"downloads"
Gives access to thechrome.downloads API.
Warning displayed:Manage your downloads.
"downloads.open"
Allows the use ofchrome.downloads.open().
Warning displayed:Manage your downloads.
"downloads.ui"
Allows the use ofchrome.downloads.setUiOptions().
Warning displayed:Manage your downloads.
"enterprise.deviceAttributes"
Gives access to thechrome.enterprise.deviceAttributesAPI.
"enterprise.hardwarePlatform"
Gives access to thechrome.enterprise.hardwarePlatformAPI.
"enterprise.networkingAttributes"
Gives access to thechrome.enterprise.networkingAttributesAPI.
"enterprise.platformKeys"
Gives access to thechrome.enterprise.platformKeysAPI.
"favicon"
Grants access to theFavicon API.
Warning displayed:Read the icons of thewebsites you visit.
"fileBrowserHandler"
Gives access to thechrome.fileBrowserHandlerAPI.
"fileSystemProvider"
Gives access to thechrome.fileSystemProviderAPI.
"fontSettings"
Gives access to thechrome.fontSettings API.
"gcm"
Gives access to thechrome.gcm andchrome.instanceID APIs.
"geolocation"
Allows the extension to use the geolocation API without prompting the user forpermission.
Warning displayed:Detect your physical location.
"history"
Gives access to thechrome.history API.
Warning displayed:Read and change your browsing history on all signed-indevices.
"identity"
Gives access to thechrome.identity API.
"identity.email"
Gives access to the user's email address through thechrome.identity API.
Warning displayed:Know your email address.
"idle"
Gives access to thechrome.idle API.
"loginState"
Gives access to thechrome.loginState API.
"management"
Gives access to thechrome.management API.
Warning displayed:Manage your apps, extensions, and themes.
"nativeMessaging"
Gives access to thenative messaging API.
Warning displayed:Communicate with cooperating native applications.
"notifications"
Gives access to thechrome.notifications API.
Warning displayed:Display notifications.
"offscreen"
Gives access to thechrome.offscreen API.
"pageCapture"
Gives access to thechrome.pageCapture API.
Warning displayed:Read and change all your data on all websites.
"platformKeys"
Gives access to thechrome.platformKeys API.
"power"
Gives access to thechrome.power API.
"printerProvider"
Gives access to thechrome.printerProviderAPI.
"printing"
Gives access to thechrome.printing API.
"printingMetrics"
Gives access to thechrome.printingMetricsAPI.
"privacy"
Gives access to thechrome.privacy API.
Warning displayed:Change your privacy-related settings.
"processes"
Gives access to thechrome.processes API.
"proxy"
Gives access to thechrome.proxyAPI.
Warning displayed:Read and change all your data on all websites.
"readingList"
Gives access to thechrome.readingList API.
Warning displayed:Read and change entries in the reading list.
"runtime"
Gives access toruntime.connectNative()andruntime.sendNativeMessage().For all other features of theruntime namespace, no permission is required.
"scripting"
Gives access to thechrome.scripting API.
"search"
Gives access to thechrome.search API.
"sessions"
Gives access to thechrome.sessions API.
Warnings displayed:
  • When used with the"history" permission:Read and change your browsinghistory on all yoursigned-in devices.
  • When used with the"tabs" permission:Read your browsing history on allyour signed-in devices.
"sidePanel"
Gives access to thechrome.sidePanel API.
"storage"
Gives access to thechrome.storage API.
"system.cpu"
Gives access to thechrome.system.cpu API.
"system.display"
Gives access to thechrome.system.displayAPI.
"system.memory"
Gives access to thechrome.system.memoryAPI.
"system.storage"
Gives access to thechrome.system.storageAPI.
Warning displayed:Identify and eject storage devices.
"tabCapture"
Gives access to thechrome.tabCapture API.
Warning displayed:Read and change all your data on all websites.
"tabGroups"
Gives access to thechrome.tabGroups API.
Warning displayed:View and manage your tab groups.
"tabs"
Gives access to privileged fields of the Tab objects used by several APIs,includingchrome.tabs andchrome.windows. You usuallydon't need to declare this permission to use those APIs.
Warning displayed:Read your browsing history.
"topSites"
Gives access to thechrome.topSites API.
Warning displayed:Read a list of your most frequently visited websites.
"tts"
Gives access to thechrome.tts API.
"ttsEngine"
Gives access to thechrome.ttsEngine API.
Warning displayed:Read all text spoken using synthesized speech.
"unlimitedStorage"
Provides an unlimited quota forchrome.storage.local,IndexedDB,Cache Storage,andOrigin Private File System.For more information, seeStorage and cookies.
"userScripts"
Gives access to thechrome.userScripts API. NOTE:the user must alsoexplicitly enablethe usage of user scripts.
"vpnProvider"
Gives access to thechrome.vpnProvider API.
"wallpaper"
Gives access to thechrome.wallpaper API.
"webAuthenticationProxy"
Gives access to thechrome.webAuthenticationProxyAPI.
Warning displayed:Read and change all your data on all websites.
"webNavigation"
Gives access to thechrome.webNavigationAPI.
Warning displayed:Read your browsing history.
"webRequest"
Gives access to thechrome.webRequest API.
"webRequestBlocking"
Allows the use of thechrome.webRequest API forblocking.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-04-29 UTC.