Is Zoho WA by treble.ai safe?

Clean risk

Zoho WA by treble.ai reads your Zoho user ID and API key on Zoho CRM pages and sends them to treble.ai.

When a Zoho CRM Web Tab embeds sales.treble.ai, the extension reads your Zoho user ID from the page and the API key from the embedded frame address. It then loads a hidden frame to agent-api.treble.ai to log you in with both values. This is limited to that Web Tab and goes to the vendor's own backend.

developmentv1.4.0Chrome Web Store
0Risk
Who publishes it

development - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
development

Same store account

1 other listing published from this account, 10k+ users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Zoho WA by treble.ai contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • agent-api.treble.ai

    Zoho WA by treble.ai sends data to agent-api.treble.ai. One other extension we have analysed sends data here.

Updated 15 October 2026gpgfodckpogicpjpjhohkdgdcmjlbbae