Is Moni safe?

Medium risk

Moni sends the user's bearer access token in its trading WebSocket URL.

When an authenticated user connects to Moni's event stream, the extension builds a WebSocket URL that includes the PrinterAccessToken as a bearer token query parameter. That URL connects to api-events.moni.ai for trading event processing, so the credential is transmitted to that service as part of the request URL rather than an Authorization header.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

getzencorev2.10.0Chrome Web Store
40Risk
Who publishes it

12897366 - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
getzencore
Declared legal entity
12897366
Registered address
71-75 Shelton Street, London WC2H 9JQ, GB
Registered contact
MONI LABS LTD

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Moni contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api-events.moni.ai

    Moni sends data to api-events.moni.ai. No other extension we have analysed sends data here.

Updated 30 September 2026bgooiolaoinoncegoopcmincbomphmhi