Chrome Web StoreNo malware found
In code review (v0.3.2)
Our reviewer read version 0.3.2 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.
24 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Tally — Claude token counter, used by 100,000 people, showed no malicious code in Extension Auditor's review. It comes from a publisher with 3 extensions and was last updated in August 2026.
Analyst notes
All code behavior is strictly consistent with the extension's stated purpose: reads [domain withheld]'s own usage API using the user's existing session cookies (same-origin fetch, no credential extraction), fetches conversation content for user-initiated cross-LLM handoff (stored only in chrome.storage.local, never sent to a third-party server), and the three POST requests flagged by the ML model go exclusively to [domain withheld] for license key — [domain withheld] is a well-known legitimate SaaS billing platform. The third-party risk score's concerns (tabs, content scripts, multi-domain access) all map directly to the extension's declared functionality; the 'new and low user count' signals are maturity flags, not malice indicators.
Tally — Claude token counter Chrome extension security report
ID: baicaaiepddopbodaccgfffdimceidbp
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- divykairoth
- Privacy
- Privacy Policy
- MX records exist
- No
- Domain exists
- No
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- No
- Website
- Visit
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Screenshots & videos
Install growth
Sensitive Domain Access
This extension has access to the following sensitive domains:
- https://gemini.google.com/*
24 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Live token counter for Claude. Model-aware messages-left, reset countdowns, and one-click handoff to ChatGPT/Gemini/Grok.
Read the publisher’s full description
Tally is a quiet meter for Claude. It lives where you work — a thin strip beneath claude.ai's message box that shows your real usage in real time, predicts how many messages you have left, and lets you continue the conversation in ChatGPT, Gemini, or Grok in one click. WHY TALLY Claude's own settings page tells you "Current session: 31%" — but not how many messages 31% buys you, and not what happens when you hit the 5-hour limit. Tally fixes both: • Live inline meter: 31% used · ≈12.4 opus msgs · resets in 1h 22m • Model-aware estimates: Opus burns ~5× faster than Sonnet, ~25× faster than Haiku. The number always matches the model you're actually using. • Cross-LLM handoff: when you're out of Claude headroom, send the conversation — including every HTML file or code artefact Claude built — to ChatGPT/Gemini/Grok. Tally opens the tab and pastes the context automatically. THREE SURFACES, ONE NUMBER 1. Inline bar beneath the chat input on claude.ai 2. Sidebar card on the left nav showing session + weekly windows 3. Toolbar popup with a full breakdown matching claude.ai/settings/usage PRO FEATURES Free: 2 cross-LLM handoffs per day (unlimited copy / download). Pro: $2/mo OR $20 lifetime via Polar.sh — unlimited handoffs, license key, works on every device you sign in from. PRIVACY Tally reads your Claude usage from claude.ai's own API using your existing browser session — no API keys, no new accounts, no servers. All counting happens locally in your browser. The Capsule handoff is short-lived clipboard data only; conversation content is never sent to a Tally server (because there isn't one). BUILT ON THE SHOULDERS OF lugia19/Claude-Usage-Extension Tally builds on top of lugia19's pioneering work (MIT-licensed). The counting engine and API reverse-engineering came from their repo. Tally adds: model-aware messages-left, cross-LLM handoff with artefact preservation, redesigned UI, and Polar.sh-powered Pro tier. NOT AFFILIATED WITH ANTHROPIC.
User reviews
Extension files
Browse and explore files within this extension package
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
24 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Related extensions
More from divykairoth
- X Sort185 users
- Mindlessly19 users
Popular in Tools
- 迅雷下载支持80,000,000 users
- Claude18,000,000 users
- Passlit Openbook10,000,000 users
- Zotero Connector9,000,000 users
- WPS PDF - Read, Edit, Fill, Convert, and AI Chat PDF with Ease7,000,000 users