What permission does the extension require?
This is the list of requirements required to run the Alby extension:
Identity Needed to connect to your Alby Account via OAuth2 APIs.
Native messaging If you want to connect your own node via TOR this allows the extension to communicate with the Alby Companion App (which connects your browser to the TOR network)
Notifications Alby notifies you of successful or failed payments through browser notifications.
Storage Allows the extension to save credentials (always encrypted with your password) and other information (e.g. permissions you gave to certain websites, etc).
Tabs Allows to get the active tab and fetch payment information provided by websites in their meta tags.
Unlimited Storage Storage is usually hard-limited to 10 MB, this is mostly just a preemptive measure for users not to hit this limit.