Browser extension support
Public support reference for NeutralAI Interceptor
This is the canonical support page for browser store review, self-serve installs, and enterprise rollout conversations. It explains the extension’s limited purpose, requested permissions, and the NeutralAI-owned app and API surfaces it interacts with.
Requested permissions
storage
Used to store extension settings, managed policy values, cached auth state, and a bounded retry buffer for telemetry delivery.
activeTab
Used to scope extension interaction to the active supported AI tab when the user opens the popup, instead of requesting broad access to all browsing activity.
scripting
Used to run the extension’s packaged content-script logic on supported AI web apps so sensitive prompt content can be detected and masked before submission.
alarms
Used to schedule lightweight background tasks such as remote configuration refresh and telemetry retry or flush without constant background polling.
tabs
Used to open the NeutralAI sign-in page when an unmanaged user chooses to authenticate from the extension popup.
Review notes
Host permissions are limited to supported AI web applications where prompt masking runs, plus NeutralAI-owned app and API domains used for session detection, auth context, masking, remote configuration, and telemetry.
The extension does not use remotely hosted executable code. All executable logic is packaged in the extension bundle. Network requests are only made to NeutralAI APIs for session detection, auth context, masking, remote configuration, and telemetry.
Self-serve users authenticate through the NeutralAI app sign-in path, while enterprise customers can deploy managed policies and force-install the extension through browser management tooling.
Self-serve auth flow
Public app and API endpoints
- https://app.neutralai.co.uk/auth/signin
- https://app.neutralai.co.uk/api/auth/session
- https://app.neutralai.co.uk/api/extension/auth-context
- https://api.neutralai.co.uk/v1/shield/mask
- https://api.neutralai.co.uk/api/v1/extension/config
- https://api.neutralai.co.uk/api/v1/extension/telemetry
Enterprise rollout
Policy-managed deployment
Enterprise customers can deploy NeutralAI Interceptor with managed browser policies so the extension is force-installed, pinned, and locked to organization-controlled NeutralAI endpoints.
That rollout path is separate from self-serve sign-in and is the recommended approach for regulated teams or centrally managed browser fleets.