Permissions control which capabilities your extension can access. Declare the permissions your extension needs in manifest.json before using the corresponding features.

Available Permissions (10)

context:read
data:query
data:fetch
actions:toast
actions:invoke
messaging:send
identity:extend
events:identity
events:messaging
events:activity

Capability → Permission Mapping

Capability	Required Permission
`context.read`	`context:read`
`data.query`	`data:query`
`data.fetch`	`data:fetch`
`actions.toast`	`actions:toast`
`actions.invoke`	`actions:invoke`
`identity.extend`	`identity:extend`
`messaging.send`	`messaging:send`

Target → Permission Conventions

Common permission sets for each surface target:

Target	Typical Permissions
`slot.header`	`context:read`
`slot.content`	`context:read`, `data:query`, `actions:toast`, `actions:invoke`
`slot.footer`	(none)
`slot.footer-links`	(none)

Only declare permissions your extension actually uses.