Is Inven safe?

Inven reads your LinkedIn session cookies to page your full connection list and sends those connections to its own servers.

When LinkedIn sync is enabled, Inven's background worker reads your LinkedIn li_at and JSESSIONID cookies and uses JSESSIONID as a CSRF token to call LinkedIn's private Voyager connections API in batches of 500, then POSTs the resulting list of connection public IDs to api.inven.ai. Separately, while the side panel is open it watches every tab change and sends the registrable domain of each site you visit to api.inven.ai to look up company data. Both behaviors run only after you enable sync and open the panel.