ChromeWebStore API endpoint
Returns the permissions a Chrome Web Store extension declares in its manifest: `permissions`, `optional_permissions`, `host_permissions`, `optional_host_permissions`, plus `manifest_version` and `min_browser_version`. Useful for security and supply-chain review. Defaults: `country=us`, `lang=en`.
/chromewebstore/permissionsMCP tool: chromewebstore_permissions
Query parameters:
id (required) — Chrome Web Store item id, the 32-character extension id, e.g. cjpalhdlnbpafiamejdnhcphjbkeiagm.country — two-letter storefront country code, default us.lang — two-letter language code, default en.Response behavior:
permissions, optional_permissions, host_permissions, and
optional_host_permissions come from the extension's manifest, plus
manifest_version and min_browser_version. Useful for security and
supply-chain review.| Field | In the sample | Value in the sample |
|---|---|---|
| id | Has a value | |
| name | Has a value | “Free VPN for Chrome - VPN Proxy VeePN” |
| item_type | Has a value | “extension” |
| manifest_version | Has a value | |
| min_browser_version | Has a value | |
| permissions | Has a value | 9 entries |
| host_permissions | Has a value | 1 entry |
| url | Has a value | chromewebstore.google.com |
| Parameter | Type | Required | Default | Description | Example |
|---|---|---|---|---|---|
| id | string | Yes | Chrome Web Store item id (32-character extension id) | cjpalhdlnbpafiamejdnhcphjbkeiagm | |
| country | string | No | Two-letter storefront country code | us | |
| lang | string | No | Two-letter language code | en | |
| x-api-key (header) | string | Yes | API key required |
curl -X GET "https://api.crawlora.net/api/v1/chromewebstore/permissions?id=cjpalhdlnbpafiamejdnhcphjbkeiagm&country=us&lang=en" \ -H "x-api-key: $CRAWLORA_API_KEY"
{
"code": 200,
"msg": "OK",
"data": {
"id": "cjpalhdlnbpafiamejdnhcphjbkeiagm",
"name": "uBlock Origin",
"manifest_version": 2,
"min_browser_version": "93.0",
"permissions": [
"alarms",
"contextMenus",
"storage",
"tabs",
"webNavigation",
"webRequest",
"webRequestBlocking",
"<all_urls>"
],
"url": "https://chromewebstore.google.com/detail/cjpalhdlnbpafiamejdnhcphjbkeiagm"
}
}Request schema
No body schema
Response schema
#/definitions/chromewebstore.permissionsResponseDoc
| Field | Type | Required | Enum | Bounds | Example | Description |
|---|---|---|---|---|---|---|
| code | integer | No | 200 | |||
| data | chromewebstore.Permissions | No | ||||
| data.host_permissions | array | No | Site match patterns the item requests access to when installed. | |||
| data.id | string | No | 32-character Chrome Web Store item id. | |||
| data.item_type | string | No | Kind of item: `extension`, `theme` or `app`, or `unknown` when the manifest is unavailable. | |||
| data.manifest_version | integer | No | Manifest version the item declares, `2` or `3`. | |||
| data.min_browser_version | string | No | Minimum Chrome version the manifest requires. | |||
| data.name | string | No | Item name as shown on the store. | |||
| data.optional_host_permissions | array | No | Site match patterns the item can request access to later. | |||
| data.optional_permissions | array | No | Permissions the item can request later, after installation. | |||
| data.permissions | array | No | Permissions the item requests when installed. | |||
| data.url | string | No | Chrome Web Store detail page URL of the item. | |||
| msg | string | No | OK |
| Status | Description | Schema |
|---|---|---|
| 400 | Bad Request | #/definitions/app.Response |
| 404 | Not Found | #/definitions/app.Response |
| 429 | Too Many Requests | #/definitions/app.Response |
| 500 | Internal Server Error | #/definitions/app.Response |
Use environment variables for secrets and keep Crawlora API keys server-side.
curl -X GET "https://api.crawlora.net/api/v1/chromewebstore/permissions?id=cjpalhdlnbpafiamejdnhcphjbkeiagm&country=us&lang=en" \
-H "x-api-key: $CRAWLORA_API_KEY"