Permissions

Standard Google identity. No Apps Script project access required.

Google identity establishes your account session for subscription management and AI quick fixes. myFunction does not request access to your Apps Script files.

Updated October 14, 2026

Identity only

openid email profile

Provides your Google account identifier, email address, and basic profile so myFunction can establish an account session and check subscription status. Signing in does not grant Apps Script project access. Autocomplete and continuous diagnostics are free without signing in.

Zero cloud file access

No project API scopes

script.projects scope is not requested

myFunction never requests Google Apps Script project access scopes (https://www.googleapis.com/auth/script.projects). Language intelligence runs locally in the browser, and AI quick fixes work on the selected code snippet.

Local modifications only: Because myFunction does not request the Apps Script API scope, it cannot read or modify your Google Drive or Apps Script project files in the cloud. All code changes happen locally in the active browser tab when you click Apply.

Chrome extension

Required browser permissions.

These permissions support extension lifecycle, UI, and local language-service state. They do not grant access to Gmail, Drive files, or Calendar.

alarms: Schedules delivery of batched feature-use counts without keeping the service worker active.
identity: Starts a Google sign-in flow only after you choose the corresponding action.
offscreen: Runs the TypeScript language-service host in a durable offscreen extension document.
sidePanel: Shows diagnostics, problems, and quick fixes in Chrome’s side panel.
storage: Stores session state, the cached language library, and local feature-use counters in Chrome storage.

Host access

Two network boundaries.

https://script.google.com/*: Loads the editor integration only on Google Apps Script pages and synchronizes open editor models with the extension language service.
https://api.myfunction.dev/*: Connects to myFunction services for sign-in, AI quick fixes, subscription status, usage counts, and scrubbed error reports.

Not requested

No unrelated Workspace data scopes.

Gmail

No Gmail read, send, or modify scope.

Drive

No general Drive file access scope.

Calendar

No Calendar read or write scope.

Code in your Apps Script project may call those services when you run it. myFunction itself does not execute the script and does not request those service scopes for its own account access.

Your control

Editor assistance does not require sign-in.

Completions, diagnostics, hover, navigation, and deterministic quick fixes work without an account. You can sign out at any time to clear the service session, or revoke Google access from your Google Account permissions page.

Read security details Privacy policy