CRXcavator
Chrome extension risk scoring
- Authentication
- API Key
- HTTPS
- Yes
- CORS
- Unknown
- Category
- Security
- Data source
- public-apis
- Documentation / URL
- https://crxcavator.io/apidocs
Overview
CRXcavator analyzes Chrome extension risk — permissions, CVEs, and reputations. Auth is an API key.
⚠️ Status (verified 2026-08): the API returned HTTP 502 Bad Gateway (nginx) — the service appears to be down or having issues at check time. Verify from your network before relying on it.
What it provides
curl "https://api.crxcavator.io/v1/crx?crx_id=YOUR_EXTENSION_ID"Notes
- Risk-scoring for Chrome extensions (permissions, libraries, CVEs).
- Endpoints cover extension metadata, risk scores, and reputation.
FAQ
Is CRXcavator free? It had a free tier; plans are paid.
Why 502? Our 2026-08 test hit a 502 Bad Gateway — the service was down (verified). Verify from your network.
What does it analyze? Extension permissions, CVEs, and risk scores.
More in Security
| API | Auth | HTTPS | CORS | |
|---|---|---|---|---|
| Application Environment Verification Android library and API to verify the safety of user devices, detect rooted devices and other risks | API Key | Yes | Yes | ↗ |
| ArkForge Trust Layer Cryptographic proof API for HTTP exchanges — Ed25519, RFC 3161, and Sigstore Rekor attestation | API Key | Yes | Unknown | ↗ |
| BinaryEdge Provide access to BinaryEdge 40fy scanning platform | API Key | Yes | Yes | ↗ |
| BitWarden Best open-source password manager | OAuth | Yes | Unknown | ↗ |
| Botd Botd is a browser library for JavaScript bot detection | API Key | Yes | Yes | ↗ |