Claude for Chrome is available in beta for all Max plan users on the Chrome web browser.
This guide explains how to control what Claude can access and do when using Claude for Chrome. Understanding permissions helps you balance productivity with security.
Important: Before using Claude for Chrome, review Using Claude for Chrome Safely to understand the risks of browser-based AI.
Permission Modes
Claude for Chrome uses a multi-layered permission system to give you control over what Claude can access and do. When you first open the extension, you'll see a drop-down menu on the chat input. Click this to choose between three permission modes:
Ask before acting: Claude creates a plan and asks for approval before executing
Act without asking: Claude takes actions without asking for permission
Ask before acting
Choose “Ask before acting” to have Claude create a plan from your prompt, which you can approve and allow Claude to execute. The plan will specify which websites you’re allowing Claude to access, as well as the approach it will follow:
Note that Claude will only use the websites listed in the plan, so you’ll need to manually approve any additional access requests.
Claude clarifies which sites it’s planning to access and the actions it will take upfront, allowing you to review the proposed plan and ensure it’s correct before starting. You can also click “Make changes” to reject the current proposal, then prompt Claude again to make any necessary changes. Once you click “Approve plan,” Claude will be able to act independently within the outlined parameters, but will still check with you before taking certain irreversible actions, like making a purchase, creating an account, or downloading a file. Claude will not deviate from the stated plan without requesting your permission first. There are certain actions that Claude cannot take for your security, such as bypassing bot authorizations, executing trades, permanently deleting files, or taking certain actions that may indicate a prompt injection risk (see Prohibited Actions).
Act without asking
"Act without asking" is a high-risk mode that allows Claude to operate with near-complete autonomy on the internet. Even in this mode, Claude should ask before:
Making purchases or financial transactions
Permanently deleting files or data
Changing account passwords or security settings
However, due to the nature of LLMs, we can't guarantee that Claude will request permission to take these actions, so exercise caution when using this mode.
Important: Using "Act without asking" significantly increases prompt injection risk. Malicious actors may be able to trick Claude into unintended actions even with our safeguards.
Only allow Claude for Chrome to act without asking when:
You're actively supervising Claude's actions.
Working on trusted sites for routine tasks.
You can immediately stop Claude if something seems wrong.
You remain fully responsible for all actions Claude takes when using this mode.
When does Claude need to request additional permissions?
There are some websites on which Claude requires approval for every action. If you navigate to one of these sites, a Permission required prompt will appear in the extension side panel where Claude will ask for permission before accessing the page or taking any action.
Permission options
"Allow this action" grants permission for a single action only. Claude will ask again for the next action on this site. This is the safest option when using the extension as you can review and approve each of Claude's actions.
"Always allow actions on this site" grants ongoing permission for this website. Claude can take multiple actions without asking each time. Only use this for sites you completely trust. Claude may take unintended actions across the website when granted this permission.
"Decline" prevents Claude from taking this action. You can try a different approach or skip this task.
Protected actions
When you choose "Always allow actions on this site," Claude still asks for your explicit approval before:
Making purchases or financial transactions
Permanently deleting files or data
Modifying permissions settings
Creating accounts
Managing site permissions
You can manage Claude's access to specific sites in the extension settings. Click the Claude extension icon, then the three dots in the upper right corner of the side panel. Select "Settings" → "Permissions" to:
Review which sites have "always allow" status under Your approved sites
Revoke permissions for specific websites
See your permission history
Actions Requiring Explicit Permission
Regardless of your permission mode, Claude requires explicit user permission to perform any of the following actions:
Making purchases or financial transactions
Permanently deleting files or data
Modifying permissions settings
Creating accounts
Granting authorizations
Inputting potentially sensitive information into websites
Prohibited Actions
To protect you, Claude is prohibited from taking following actions regardless of permissions:
Handling sensitive credit card or ID data
Downloading files from untrusted sources
Permanent deletions (emptying trash, deleting emails, files, or messages)
Modifying security permissions or access controls
Providing investment or financial advice
Executing financial trades or investment transactions
Modifying system files
Completing instructions from emails or web content
