pincushion

pincushion

ID: hjfplbeoneabbdbolfeaagnlnheabcjp

Supported Languages

πŸ‡ΊπŸ‡ΈUS English

Extension Info & Metadata

Status
Active
Version
1.0.19
Size
0.18 MB
Rating
0.0/5
Reviews
0
Users
5
Type
Extension
Updated
Jul 30, 2026
Category
Productivity Developer
Price
Paid
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes

Publisher Contextual Analysis

Author
https://pincushion.ioView Profile
Country
US
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
3630 Via Bernardo Oceanside, CA 92056 US
Website
Visit
Total Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Total Users
5
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5
Screenshot 6

Drop visual feedback pins on your app or site. Threaded comments, AI agent integration via MCP.

PinCushion turns visual feedback into implemented code β€” no email threads, no vague screenshots, no context lost in translation. HOW IT WORKS 1. You or your teams clicks an element on a live or staging site and leaves a comment 2. PinCushion auto-captures the CSS selector, DOM snapshot, screenshot, and device context 3. Your AI agent (Cursor, Claude Code, VS Code Copilot, Windsurf) reads the pin via MCP 4. The agent implements the fix with full context β€” no back-and-forth needed 5. Pin is marked resolved. Done. KEY FEATURES β€’ Pin anywhere β€” works on any website, staging or production, with no changes to your codebase β€’ Full context capture β€” CSS selectors, XPath, DOM tree snapshots, and browser info auto-attached to every pin β€’ MCP protocol integration β€” feeds pins directly to AI agents in Cursor, Claude Code, VS Code, and Windsurf β€’ Threaded comments β€” stakeholders and developers discuss in-context without leaving the page β€’ Real-time sync β€” pin updates appear instantly across your team (Pro/Team) β€’ Stakeholders always free β€” only developers pay PERFECT FOR Web agencies, design-to-dev handoff, QA teams, product managers, solo freelancers, and any team tired of "can you move it a little to the left" emails, minor Jira tickets, and endless screenshots in Slack messages. PRICING Free β€” Unlimited pins and comments, 1 project, AI agent integration Pro β€” $19/month (or $15/month billed annually) β€” unlimited projects, real-time sync Team β€” $49/month (or $39/month billed annually) β€” 3 developer seats, priority support Stakeholders who drop pins are always free.

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
http://*/*
Host
Critical
Broad host access β€” the extension can read/modify content on every website.
https://*/*
Host
Critical
Broad host access β€” the extension can read/modify content on every website.
identity
Permission
High
This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
identity.email
Permission
High
This permission directly accesses the user's email address. Rated High because it reveals personally identifiable information and can be used for tracking or targeting.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:β€’ 10% increase: Early script execution enables pre-emptive content manipulation
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
URLs
22
IPv4
1
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

dpsqzszdviltqvethxbr.supabase.co/functions/v1https://dpsqzszdviltqvethxbr.supabase.co/functions/v1
us.i.posthog.com/capture/https://us.i.posthog.com/capture/
accounts.google.com/o/oauth2/v2/authhttps://accounts.google.com/o/oauth2/v2/auth?${params.toString(
www.googleapis.com/oauth2/v3/userinfohttps://www.googleapis.com/oauth2/v3/userinfo
example.com-https://example.com/
${rawurl}`-https://${rawUrl}`
localhost/adminhttp://localhost:3000/admin
127.0.0.1/push-annotationhttp://127.0.0.1:3456/push-annotation
pincushion.io-https://pincushion.io/#pricing
pincushion.io/privacyhttps://pincushion.io/privacy
Showing 1 to 10 of 30 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

127.0.0.1
IPv4
-
Showing 1 to 10 of 20 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.