I ship eight small Chrome extensions under Legacy Tools. They are all Manifest V3, and they all need some form of access to the pages you visit — that is what tools that check things before you send them do. I have written before about the rules I give AI agents so they never broaden permission...
Source: [Dev.to](https://dev.to/k-wada/8-shipped-chrome-extensions-4-ways-to-declare-host-permissions-3n1c)