Is Aria2 Download Manager Integration safe?

Clean risk

Aria2 Download Manager Integration sends download URLs and selected request headers to a configured aria2 endpoint.

When you start a download, the extension can send the download URL plus Referer, Cookie, Authorization, and related request headers to the aria2 JSON-RPC service you configured. Its default endpoint is local at 127.0.0.1:6800/jsonrpc, but the recipient depends on the user's aria2 host settings.

Ross Wangv0.4.5Firefox Add-ons
3Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 0.4.5. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Store data in your browser

    storage

  • See the address and title of every tab you have open

    tabs

  • Show you desktop notifications

    notifications

  • Start, monitor and manage your downloads

    downloads

  • Open files you have downloaded

    downloads.open

  • Add items to the right-click menu

    contextMenus

  • Watch every request your browser makes

    webRequest

  • Watch, block and rewrite every request your browser makes

    webRequestBlocking

  • Read and change cookies, including the ones that keep you signed in

    cookies

Where it sends data

Destinations our analysis observed Aria2 Download Manager Integration contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • 127.0.0.1:6800/jsonrpc

    Aria2 Download Manager Integration sends data to 127.0.0.1:6800/jsonrpc. No other extension we have analysed sends data here.

Updated 30 September 2026amo-860568