Is KEXI - Interactive Streaming Widget safe?

Clean risk

KEXI reads your Kick session token on kick.com and uses it to call Kick's own points and gift APIs.

On kick.com pages the extension reads the Kick session token from localStorage or cookies and passes it to its background worker. The worker uses it as a bearer token to fetch channel points balances from kick.com and to send Kick gifts when the user asks. The token is only used against Kick's own endpoints.

KEXIv2.9.20Firefox Add-ons
0Risk
Who publishes it

KEXI - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
KEXI
Website

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.9.20. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on kick.com

    https://kick.com/*

  • Read and change your data on web.kick.com

    https://web.kick.com/*

  • Read and change your data on dashboard.kick.com

    https://dashboard.kick.com/*

  • Read and change your data on kexi.app

    https://kexi.app/*

  • Read and change your data on localhost:3000

    http://localhost:3000/*

  • Read and change your data on p4rrot.com

    https://p4rrot.com/*

  • Read and change your data on www.p4rrot.com

    https://www.p4rrot.com/*

  • Read and change your data on blerp.com

    https://blerp.com/*

  • Read and change your data on www.blerp.com

    https://www.blerp.com/*

  • Store data in your browser

    storage

  • See the address and title of every tab you have open

    tabs

  • Run its own code inside the pages you visit

    scripting

  • Show you desktop notifications

    notifications

  • Schedule its own background tasks

    alarms

Where it sends data

Destinations our analysis observed KEXI - Interactive Streaming Widget contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • kick.com

    KEXI - Interactive Streaming Widget sends data to kick.com. 6 other extensions we have analysed send data here.

Updated 15 October 2026amo-2969712