Permissions

Google sign-in scopes only. No Apps Script project scopes.

For anyone deciding whether to install: Google sign-in identifies your account for subscription status and AI quick fixes. myFunction never requests OAuth access to your Apps Script projects, Drive, Gmail, or Calendar.

Updated October 14, 2026

Identity only

openid email profile

Gives myFunction your Google account identifier, email address, and basic profile so it can start a session and check your subscription. Signing in does not grant access to your Apps Script projects. Autocomplete and diagnostics are free without signing in.

No Drive or Apps Script API scopes

No project API scopes

script.projects scope is not requested

myFunction never requests the Apps Script project scope (https://www.googleapis.com/auth/script.projects). Diagnostics and completions run in your browser. An AI quick fix, JSDoc generation, or explanation sends the enclosing code snippet, the script ID, the file name, and the diagnostic details to the myFunction service. For a fix from a failed run, the diagnostic details are the error message and stack locations Apps Script showed, which can quote values from your data.

Edits happen in the open editor. Because myFunction has no Apps Script API scope, it cannot read or change your projects or Drive files through Google APIs. It reads the code open in the Apps Script editor tab. When you click Fix with myFunction on a failed run, it also reads that run's error from the execution log or error message. A quick fix changes the code only when you apply it.

Chrome extension

Required browser permissions.

These permissions run the extension's background tasks, its side panel, and the language service. None of them grants access to Gmail, Drive files, or Calendar.

alarms: Schedules the delivery of batched feature-use counts without keeping the background service worker awake.
identity: Starts Google sign-in, and only after you choose to sign in.
offscreen: Runs the TypeScript language service in an offscreen extension page.
sidePanel: Shows sign-in, plan, and billing in Chrome's side panel.
storage: Stores session state, the cached language library, and local feature-use counters in Chrome storage.

Host access

Sites the extension connects to.

https://script.google.com/*: Loads the editor integration only on Google Apps Script pages and sends the code in open editor files to the extension's language service.
https://api.myfunction.dev/*: Connects to myFunction services for sign-in, AI quick fixes, subscription status, usage counts, and scrubbed error reports.

Not requested

No Gmail, Drive, or Calendar scopes.

Gmail

No Gmail read, send, or modify scope.

Drive

No general Drive file access scope.

Calendar

No Calendar read or write scope.

Your script may call those services when you run it, and Apps Script asks you to authorize that. myFunction does not run the script and does not request those scopes for itself.

Your control

Sign in only when you want AI quick fixes.

Completions, diagnostics, hover documentation, navigation, and rule-based quick fixes work without an account. Sign out at any time to clear the service session, or revoke Google access from your Google Account permissions page.

Read security details Privacy policy