Trust and security
Magpie separates capture from workspace access. The Chrome extension is a deliberately untrusted, write-only client.
What the extension can do
- Submit captures through an owner-bound pairing token.
- Send bounded source text, context, URL, and optional screenshot evidence.
What it cannot do
- Read your Collections, Items, Enrichments, or dashboard workspace.
- Use dashboard credentials or service-role credentials.
- Authorize broad crawling of pages you did not capture.
How the dashboard is protected
Workspace reads and mutations are owner-scoped on the server. AI proposes organization and extraction; deterministic backend code validates proposals before durable writes. When confidence is insufficient, Magpie shows a review state instead of inventing a result.