Gleano — permissions and source code

AI summaries, podcasts & chat for YouTube videos and articles — 20+ languages, free credits, BYOK or Pro.

Users: 12
Rating: 5.0 / 5
Version: 2.1.2
Updated: June 27, 2026
Size: 262KiB
Category: Productivity

What this extension can access

These are the capabilities Gleano declares in its manifest. Each one is a fact about the shipped code, not a judgement about the extension.

Reaches your browsing content

identity

Obtain OAuth tokens for your Google account.

What this permission means →

scripting

Inject scripts into pages you visit.

What this permission means →

Reaches browser state and activity

activeTab

Access the current tab, but only after you click the extension.

What this permission means →

Local to the extension

storage

Store its own settings and data locally.

What this permission means →

Websites it can read and change

https://*.youtube.com/*

Read and change your data on *.youtube.com.

https://api.groq.com/*

Read and change your data on api.groq.com.

https://generativelanguage.googleapis.com/*

Read and change your data on generativelanguage.googleapis.com.

https://ollama.com/*

Read and change your data on ollama.com.

https://smvnsfznxctkegjbckmt.supabase.co/*

Read and change your data on smvnsfznxctkegjbckmt.supabase.co.

https://youtu.be/*

Read and change your data on youtu.be.

https://youtube.com/*

Read and change your data on youtube.com.

Pages it injects code into

https://*.youtube.com/*https://youtu.be/*https://youtube.com/*

Get this extension's source code

Download the .crx package or unpack it to read the source, entirely in your browser.

Download .crx Extract source code View on Chrome Web Store

Inside the package

Manifest version	MV3
Files	57
Unpacked size	798.2 KiB
Download size	261.9 KiB

File types

json · 23js · 21css · 5html · 4png · 4

Code characteristics

Content Security Policy: script-src 'self'; object-src 'self'

Domains referenced in the code

Hostnames that appear in this extension's files. A hostname here means the string is present in the code, not that data is necessarily sent to it.

ai.google.devaistudio.google.comapi.groq.comcemkoyluoglu.codescloud.google.comcode.google.comconsole.groq.comen.wikipedia.orgfingerprint.comfpjs.devgenerativelanguage.googleapis.com groq.commariadb.commobile.slate.commusic.youtube.comollama.compolicies.google.comschema.orgsearchfox.orgsmvnsfznxctkegjbckmt.supabase.costripe.comsupabase.comwww.apache.orgwww.cerebras.aiwww.deepseek.comwww.youtube.com youtu.beyoutube.com