I ship eight small Chrome extensions under Legacy Tools. They are all
Manifest V3, and they all need some form of access to the pages you
visit — that is what tools that check things before you send them do.
I have written before about the rules I give AI agents
so they never broaden permissions on their own. This post is about the






