Is Canvasgotchi safe?

Clean risk

Canvasgotchi sends the user-entered Canvas API token to the configured Canvas site while checking assignments.

Canvasgotchi stores the Canvas URL and API token the user enters, then uses them to poll the Canvas to-do endpoint for assignments. During that check, it includes the token in an Authorization header sent to the configured Canvas host.

Zack Wilkinsonv1.5Chrome Web Store
1Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.5. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every secure site you visit

    https://*/*

  • Store data in your browser

    storage

  • Schedule its own background tasks

    alarms

Updated 30 September 2026lllfdbnlmbikgdbpemmnabmmhdbfodkl