# Chrome Extension Downloader (remote · extensiondownloader.com)

Chrome extension data: free previews; API key for full reviews, comparisons and permissions.

- Trust score: 79/100 (medium)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- remote · `extensiondownloader.com`: 79/100 (this document), [markdown](https://verifymcp.io/servers/com-extensiondownloader-mcp/api-mcp.md), [page](https://verifymcp.io/servers/com-extensiondownloader-mcp/api-mcp)

## Channel facts

- Endpoint: `https://extensiondownloader.com/api/mcp`
- Transports: `streamable-http`
- Auth: `required (not validated)`
- Version: `1.0.2`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Endpoint Security**: 89/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token.
  - HTTPS is enforced; there's no plaintext access path.
  - The HSTS (Strict-Transport-Security) header is present.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 73/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 2116 tokens (~132/item across 16 items; 16 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 13/100
  - Stability observed for 4 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 16 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 17 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a current MCP spec version (2026-07-28).

## Install

### How do I install the Chrome Extension Downloader MCP server?

Chrome Extension Downloader is a hosted endpoint at https://extensiondownloader.com/api/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http com-extensiondownloader-mcp 'https://extensiondownloader.com/api/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "com-extensiondownloader-mcp": {
      "url": "https://extensiondownloader.com/api/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "com-extensiondownloader-mcp": {
      "type": "http",
      "url": "https://extensiondownloader.com/api/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.com-extensiondownloader-mcp]
url = "https://extensiondownloader.com/api/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-extensiondownloader-mcp": {
      "type": "remote",
      "url": "https://extensiondownloader.com/api/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add com-extensiondownloader-mcp --url 'https://extensiondownloader.com/api/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  com-extensiondownloader-mcp:
    url: "https://extensiondownloader.com/api/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "com-extensiondownloader-mcp": {
      "Transport": "http",
      "Url": "https://extensiondownloader.com/api/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add com-extensiondownloader-mcp -t streamable-http -u 'https://extensiondownloader.com/api/mcp'
```

### Other

```json
{
  "mcpServers": {
    "com-extensiondownloader-mcp": {
      "type": "http",
      "url": "https://extensiondownloader.com/api/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-05 (score 79, +1)

No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-11-03 (score 78, +1)

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-11-02 (score 77, 0)

- [functional improvement] Stability: unverified → 0.03

### 2026-11-01 (score 77, +41)

- [security improvement] Transport: unverified → pass
- [security improvement] Injection markers: unverified → pass
- [security] First check of Judged manipulation: pass
- [security] Authorization: Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token.
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Tool coverage: unverified → 100
- [functional] First check of Schema quality: fail
- [functional] First check of Schema quality: excellent
- [functional] First check of Destructive annotations: pass
- [functional] First check of Schema quality: fail
- [functional] First check of Tool coverage: 100

### 2026-10-31 (score 36)

First indexed and scored.

## MCP tools (16)

### `extension_search` (~101 tokens)

Find extensions by name, description or category name. Returns metadata and pagination, ordered by user count. Use returned IDs for detail and analysis tools; not Chrome Web Store keyword search positions.

Input parameters:

- `page` (integer): Page number, starting at 1.
- `pageSize` (integer): Results per page, up to 100.
- `q` (string): Text to match, e.g. password manager. Omit to browse the catalog by user count.

### `extension_get` (~94 tokens)

Get collected store metadata for one extension, including users, ratings and version. Free without a key for basic metadata only; a key returns the full metadata record. Unknown IDs return not found, never trigger a crawl.

Input parameters:

- `eid` (string, required): 32-letter Chrome Web Store extension ID (a-p), not a URL, name or slug. Example: cjpalhdlnbpafiamejdnhcphjbkeiagm.

### `extension_trends` (~138 tokens)

Read one extension's user-count, store rating-count and average-star history with current metrics and deltas. Use for time-series analysis, not keyword ranks. Missing days are not zero values.

Input parameters:

- `days` (integer): Look back this many days for stored metric snapshots, up to 365; coverage may be incomplete.
- `eid` (string, required): 32-letter Chrome Web Store extension ID (a-p), not a URL, name or slug. Example: cjpalhdlnbpafiamejdnhcphjbkeiagm.
- `locale` (string): Preferred response content language, not a review-language filter or a store search market.

### `extension_rank_history` (~108 tokens)

Track one extension's position in our overall and category user-count rankings. Returns per-scope history, not official store or keyword search positions. Untracked ranks may be missing.

Input parameters:

- `days` (integer): Look back this many days for tracked ranking positions, up to 365.
- `eid` (string, required): 32-letter Chrome Web Store extension ID (a-p), not a URL, name or slug. Example: cjpalhdlnbpafiamejdnhcphjbkeiagm.

### `extension_safety` (~104 tokens)

Inspect permission capabilities, observed permission changes and heuristic store risk signals. Reports evidence and incomplete assessments; not a malware scan, malware probability or safety guarantee.

Input parameters:

- `eid` (string, required): 32-letter Chrome Web Store extension ID (a-p), not a URL, name or slug. Example: cjpalhdlnbpafiamejdnhcphjbkeiagm.
- `locale` (string): Preferred response content language, not a review-language filter or a store search market.

### `extension_compare` (~78 tokens)

Compare up to four extensions side by side: users, stars, rating counts, versions, permissions and recent permission changes. For historical comparisons, call extension_trends for each ID; this is not code-similarity detection.

Input parameters:

- `eids` (array, required): One to four extension IDs to compare, in the desired display order. Use distinct IDs.

### `extension_top` (~106 tokens)

Browse extensions ranked by current users, average stars or store rating count. Free without a key for the first 10 by users only; omit arguments for that preview. Other sorts and pagination require a key.

Input parameters:

- `page` (number): Free preview includes the first page only.
- `pageSize` (number): Free preview returns at most 10 extensions; omit to use this default.
- `sort` (string): Free preview ranks by store user count only; omit to use this default.

### `extension_trending` (~183 tokens)

Find growing extensions using saved 7/14/30/90-day user or rating-count growth rankings. Candidates have 1K-1M users and at least 500 net new users in the window. Free without a key for the first 10 by 30-day user gain; omit arguments for that preview. Missing comparison data is not zero growth; requests never rebuild rankings.

Input parameters:

- `fastGrowth` (boolean): Free preview does not apply the optional 20% user-growth filter.
- `page` (number): Free preview includes the first page only.
- `pageSize` (number): Free preview returns at most 10 extensions; omit to use this default.
- `sort` (string): Free preview ranks by net user gain, not percentage or rating-count gain.
- `windowDays` (number): Free preview uses the saved 30-day growth window only.

### `extension_rankings` (~156 tokens)

Read our saved user-count leaderboard for one date, overall or within a category. Returns positions and pagination; not official store or keyword search ranks. Use extension_rank_history to follow one extension over time.

Input parameters:

- `limit` (integer): Ranking rows per page, up to 250.
- `page` (integer): Page number, starting at 1.
- `rankDate` (string): Ranking date as YYYY-MM-DD in Asia/Shanghai. Omit for today; missing dates are not replaced with another date.
- `scopeKey` (string): Use all for overall scope; for category scope, use the recorded category key, not its translated display name.
- `scopeType` (string): Choose the overall catalog or one category leaderboard.

### `extension_review_summary` (~118 tokens)

Get an existing published AI summary of collected reviews, with pros and cons. Use extension_reviews for original comments. Returns null when unavailable and English when a translation is missing; never calls a model or generates a new summary.

Input parameters:

- `eid` (string, required): 32-letter Chrome Web Store extension ID (a-p), not a URL, name or slug. Example: cjpalhdlnbpafiamejdnhcphjbkeiagm.
- `locale` (string): Preferred response content language, not a review-language filter or a store search market.

### `extension_review_insights` (~139 tokens)

Read stored review statistics and star distribution for an extension, optionally by review language. These describe collected reviews, not all store ratings. Missing statistics return null; no refresh is triggered.

Input parameters:

- `eid` (string, required): 32-letter Chrome Web Store extension ID (a-p), not a URL, name or slug. Example: cjpalhdlnbpafiamejdnhcphjbkeiagm.
- `language` (string): Original review language, e.g. en; all combines languages. This filters reviews rather than translating the response.
- `windowDays`: 0 = all retained reviews; 365 = the stored one-year review window.

### `extension_review_history` (~88 tokens)

Read collected review counts grouped by original publication date and stars, plus version-level ratings and undated/unrated counts. Reconstructed from retained reviews, not historical store rating-count snapshots.

Input parameters:

- `eid` (string, required): 32-letter Chrome Web Store extension ID (a-p), not a URL, name or slug. Example: cjpalhdlnbpafiamejdnhcphjbkeiagm.

### `extension_reviews` (~205 tokens)

Read original stored reviews for one extension, with text, star and language filters combined using AND. Returns reviews and pagination. For cross-extension or OR queries, use extension_reviews_search.

Input parameters:

- `eid` (string, required): 32-letter Chrome Web Store extension ID (a-p), not a URL, name or slug. Example: cjpalhdlnbpafiamejdnhcphjbkeiagm.
- `language` (string): Original review language, e.g. en. Omit for all languages; does not translate reviews.
- `page` (integer): Page number, starting at 1.
- `pageSize` (integer): Results per page, up to 100.
- `q` (string): Text to match in review bodies, e.g. subscription.
- `rating` (integer): Exact star rating from 1 to 5.
- `sort` (string): timestamp_desc/asc = newest/oldest first; rating_desc/asc = highest/lowest stars first.

### `extension_reviews_search` (~168 tokens)

Search original stored reviews across extensions with AND/OR field filters. Returns reviews and pagination. Example filter: {"field":"body","operator":"contains","value":"subscription"}. Use extensionEid to narrow to an extension.

Input parameters:

- `filters` (array): Up to 12 review filters. Example: [{"field":"rating","operator":"<=","value":2}]. Omit to browse retained reviews.
- `logic` (string): AND requires every filter to match; OR requires at least one.
- `page` (integer): Page number, starting at 1.
- `pageSize` (integer): Results per page, up to 100.
- `sort` (string): timestamp_desc/asc = newest/oldest first; rating_desc/asc = highest/lowest stars first.

### `extension_source_search` (~126 tokens)

Find extensions by Manifest metadata, permission names, host patterns, descriptions or archived source file paths. Returns metadata matches and snippets, not full-text JavaScript search, source downloads or code-similarity analysis.

Input parameters:

- `field` (string): Search target; source means archived file paths, not file contents. all searches metadata and paths.
- `limit` (integer): Maximum matches, up to 50, ordered by user count. No pagination.
- `q` (string, required): Text to match, e.g. webRequest, example.com or background.js. Uses case-insensitive substring matching.

### `extension_api_usage` (~80 tokens)

Read the current API key's daily REST/MCP usage and remaining key/account allowance. Requires a key, but remains available after its daily data quota is exhausted. Does not debit data quota; account minute limits still apply.

Input parameters:

- `days` (integer): Daily usage history lookback, up to 90 days. Today's balances and reset time are included separately.

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/com-extensiondownloader-mcp/api-mcp#diagnostics

## Score history

- 2026-11-05: 79
- 2026-11-04: 78
- 2026-11-03: 78
- 2026-11-02: 77
- 2026-11-01: 77
- 2026-10-31: 36

## Common questions

### What is the Chrome Extension Downloader MCP server?

Chrome Extension Downloader is an MCP server listed in the public MCP registry as com.extensiondownloader/mcp. Chrome extension data: free previews; API key for full reviews, comparisons and permissions. This page covers its hosted endpoint (https://extensiondownloader.com/api/mcp).

### Is the Chrome Extension Downloader MCP server safe to use?

Chrome Extension Downloader scores 79 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the Chrome Extension Downloader MCP server expose?

Chrome Extension Downloader exposes 16 tools: extension_search, extension_get, extension_trends, extension_rank_history, extension_safety, and 11 more. Their descriptions and schemas cost roughly 1,992 tokens of context every time the server is loaded.

### Does the Chrome Extension Downloader MCP server require authentication?

Yes. Chrome Extension Downloader asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.

### Is the Chrome Extension Downloader MCP server still maintained?

Chrome Extension Downloader is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

### What did VerifyMCP test on the Chrome Extension Downloader MCP server?

VerifyMCP ran 13 checks on Chrome Extension Downloader, covering TLS certificate, Authorization, HTTPS, HSTS header and 9 more. Supply Chain Security and Provenance & Transparency do not apply to a hosted endpoint, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.

## Links

- Remote endpoint: https://extensiondownloader.com/api/mcp
- Website: https://extensiondownloader.com/mcp
- Changelog RSS feed: https://verifymcp.io/servers/com-extensiondownloader-mcp/api-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/com-extensiondownloader-mcp/api-mcp/changelog.json
- Trust report (JSON): https://verifymcp.io/servers/com-extensiondownloader-mcp/api-mcp.json
- HTML version of this page: https://verifymcp.io/servers/com-extensiondownloader-mcp/api-mcp