xAI Workspace Bridge Chrome extension security report

xAI Workspace Bridge is a developer tool for xAI Workspace that provides two capabilities: seamless OAuth token authorization for AI coding assistants, and local Docker instance provisioning — all from within your browser. ───────────────────────────────────────── OAUTH BRIDGE ───────────────────────────────────────── When you authorize Claude (Anthropic), Gemini (Google), or Codex (OpenAI) through the xAI Workspace admin panel, each provider redirects its OAuth callback to a localhost port. This extension intercepts those localhost redirects and forwards them to your xAI Workspace router — so the token lands in the right place automatically, with no tab juggling or clipboard gymnastics. Supported providers and their callback ports: • Claude / Anthropic → localhost:54545/callback • Gemini / Google → localhost:8085/oauth2callback • Codex / OpenAI → localhost:1455/auth/callback All three redirects are forwarded to: https://router.xaiworkspace.com/admin/cliproxy/oauth/callback How the OAuth bridge works: 1. Open the xAI Workspace admin panel and navigate to CLI Proxy → OAuth Providers. 2. Click "Authorize" next to the provider you want to connect. 3. Complete sign-in on the provider's consent screen as normal. 4. The OAuth callback URL (which would normally hit a localhost port) is intercepted using Chrome's declarativeNetRequest API and redirected to the xAI Workspace router. 5. The router receives the authorization code, exchanges it for tokens, and stores them server-side. Tokens are stored server-side by the xAI Workspace router. The extension itself never sees, stores, or transmits your credentials. ───────────────────────────────────────── LOCAL DOCKER PROVISIONING ───────────────────────────────────────── The extension can launch and manage local OpenClaw Docker containers directly from the browser. When Docker is available on your machine (via TCP on localhost:2375), the extension popup shows Docker status and the xAI Workspace web app can request container provisioning through the extension. This lets you run a local AI workspace instance without leaving the browser — the extension handles container creation, configuration, networking, and teardown. ───────────────────────────────────────── TECHNICAL DETAILS ───────────────────────────────────────── • Manifest V3 — built on the modern, secure extension platform • OAuth redirects use declarativeNetRequest — static rules evaluated natively by Chrome, no runtime JavaScript needed for the redirect itself • Background service worker handles Docker API communication and message routing • Content script relays messages between the xAI Workspace web app and the extension • All message senders are validated against a trusted-origin whitelist • No data collection, no analytics, no third-party services • Open architecture: all source is plain JavaScript you can inspect at any time ───────────────────────────────────────── WHO IS THIS FOR? ───────────────────────────────────────── This extension is designed for xAI Workspace users who: • Use the CLI Proxy feature to manage OAuth tokens for AI coding assistants (Claude Code, Gemini CLI, OpenAI Codex) • Want to provision local OpenClaw instances via Docker without leaving the browser It has no functionality outside of the xAI Workspace context and does not affect normal browser operation. If you are not an xAI Workspace user, this extension will have no visible effect on your browser. ───────────────────────────────────────── PRIVACY ───────────────────────────────────────── This extension collects no personal data. It makes no independent network requests beyond the OAuth redirect itself and Docker API calls to your own local machine. No data is sent to any third-party server. The only network activity it causes: • OAuth redirects from localhost to router.xaiworkspace.com (the same request your browser would have made) • Docker API calls to 127.0.0.1:2375 on your local machine only Full privacy policy: https://xaiworkspace.com/privacy ───────────────────────────────────────── PERMISSIONS EXPLAINED ───────────────────────────────────────── declarativeNetRequest Required to declare the URL redirect rules that intercept OAuth callbacks. Chrome evaluates these static rules and redirects matching URLs without runtime JavaScript. storage Required to persist Docker configuration settings (API endpoint, image name, network) across browser sessions. host_permissions: localhost:54545, localhost:8085, localhost:1455 Required so Chrome allows the redirect rules to act on OAuth callback requests to these specific localhost ports. No other URLs are affected. host_permissions: 127.0.0.1:2375 Required to communicate with the Docker Engine REST API on your local machine for container provisioning and status checks. ───────────────────────────────────────── SINGLE PURPOSE STATEMENT ───────────────────────────────────────── This extension serves xAI Workspace users by redirecting OAuth callback URLs from specific localhost ports to the xAI Workspace router and by provisioning local Docker containers for AI workspace instances — both enabling seamless integration between the xAI Workspace web app and local developer tools.