Is Group Monkey safe?

Clean risk

Group Monkey reads Facebook group join-request details and sends them to api.groupmonkey.io.

On facebook.com, the extension collects pending member names, Facebook user IDs, answers to membership questions (which can include emails and phone numbers) and friend/group counts. It posts these records to the vendor's API and to any webhook the user configures. It also checks the vendor's server every 5 minutes for automation tasks that open pinned Facebook tabs to post, message or approve members, and on plan 5 sends member names to a vendor AWS endpoint for gender inference.

Tier5 Technologiesv1.01.60Chrome Web Store
0Risk
Who publishes it

Tier5 Technologies - 11 other listings from the same operator, 1 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Tier5 Technologies

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.01.60. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on facebook.com

    *://*.facebook.com/* and 1 more

  • Read and change your data on zapier.com

    *://*.zapier.com/*

  • Read and change your data on kyubi.io

    *://*.kyubi.io/api/*

  • Read and change your data on z7c5j0fjy8.execute-api.us-east-2.amazonaws.com

    https://z7c5j0fjy8.execute-api.us-east-2.amazonaws.com/*

  • Read and change your data on www.facebook.com

    https://www.facebook.com/*

  • Read and change your data on groupmonkey.io

    *://*.groupmonkey.io/*

  • Store data in your browser

    storage

  • Schedule its own background tasks

    alarms

  • Read whatever you have copied to your clipboard

    clipboardRead

Where it sends data

Destinations our analysis observed Group Monkey contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • z7c5j0fjy8.execute-api.us-east-2.amazonaws.com

    Group Monkey sends data to z7c5j0fjy8.execute-api.us-east-2.amazonaws.com. 6 other extensions we have analysed send data here.

  • api.groupmonkey.io

    Group Monkey sends data to api.groupmonkey.io. No other extension we have analysed sends data here.

  • User-configured webhook URL

    Group Monkey sends data to User-configured webhook URL. Named as a recipient in this extension's own analysis.

Updated 15 October 2026goflgkgffmekeedmfdinbbchpfgboijg