Chrome Extension Source Viewer X-Ray

Inspect Chrome extension source and CRX files, review manifest permissions, and find static network and security indicators.

Chrome Extension Source Viewer X-Ray helps developers inspect packaged Chrome extension source in the browser's side panel. Review an authorized CRX or ZIP, understand manifest declarations, and follow potential findings back to the source that needs your attention. SOURCE INSPECTION • Open an available public Chrome Web Store package by URL or extension ID, or import a local CRX/ZIP you are authorized to inspect. Public package availability is controlled by the upstream service. • Browse packaged files and preview supported source text. • Review manifest settings, declared permissions, host access, and external endpoints found in scanned source. • Look for potential hardcoded credentials and risky source patterns. Findings are indicators for manual review, not a malware verdict. • Export packaged source for further review with your own development tools. UNDERSTAND THE EVIDENCE Static analysis describes declarations and patterns in the files examined. A URL found in source is not proof that a request was sent. A score or empty finding list does not certify safety, and packaged source cannot reveal a service's private backend implementation. OPTIONAL AI AND ONE-TIME CREDITS AI Decompile assists with rewriting selected source, while Deep Rebuild Spec generates an implementation outline. These are separate credit balances. AI output may be incomplete or incorrect and needs developer review; it is not a guaranteed recovered original or working clone. Static inspection does not consume backend AI credits. Optional AI features require sign-in, available credits and the relevant data-processing disclosure. One-time Starter, Builder, Pro and Energy packs do not renew automatically. Check the selected pack, currency, taxes, discount eligibility and final total at Gumroad checkout. Only a verified purchase activates purchased credits; opening checkout is not a purchase. Purchased credits do not expire. Each new free, registration or daily reward expires 72 hours after its grant, whether or not you open the extension. Refund requests and credit adjustments are handled separately under the applicable purchase terms and Gumroad process. HOW TO USE 1. Open X-Ray from the Chrome toolbar. 2. Choose an available Store package or your authorized local CRX/ZIP. 3. Run an inspection and review the source, manifest and potential findings. 4. Inspect the evidence before making a security decision. Export source when needed, or explicitly choose an optional AI action after checking its credit cost and data disclosure. PRIVACY AND CONTROL Package inspection and source viewing run locally. Sign-in and credit management use the backend, and Gumroad processes checkout. Optional AI sends the selected content needed for the action to the configured service. Product usage sharing is optional and off until you opt in; it is separate from the account and purchase records needed to operate the service. You can change the sharing choice in Settings. Read the privacy policy for the data categories, providers, retention and request process. LIMITATIONS AND SUPPORT Package availability, file support and processing limits apply. Source inspection does not execute the inspected package or automatically observe another extension's live traffic. For help with access, purchase delivery or an operation result, use the support link and keep receipt/license details private. X-Ray is an independent developer tool for lawful, authorized inspection. It is not affiliated with or endorsed by Google, the Chrome Web Store, or the authors of inspected extensions. Product names and trademarks belong to their owners.