Permissions explained

Permissions explained

Before you install a plugin, Mumcord lists what it wants to do, with a risk colour. Optional permissions can be turned off at any time. An update that needs a new permission waits for your approval.

Colour	Meaning
Green	Low risk, mostly about showing things in the interface
Yellow	Sees or shares some activity, for example who is talking
Red	Official plugins only

What they unlock

Permission	Risk	In plain words
ui.panel	green	A panel in the plugins strip
ui.member-badge	green	A small badge next to user names
ui.profile-card	green	A section on profile cards
ui.chat-card	green	Cards and name decorations in the chat
ui.user-menu	green	An entry in a user's right-click menu
ui.dialog	green	The plugin's own window
events.self	green	Your own status (mute, deafen, channel)
events.voice	yellow	Who is talking
events.presence	yellow	Who joins and leaves your channel, and the user list
events.chat-activity	yellow	When someone writes or mentions you (never the text)
peers.messages	yellow	Exchanging data with the same plugin of other users in your channel
notify	green	Notifications
random.bytes	green	Secure random numbers
commands	green	Chat commands such as /roll
chat.send	yellow	Posting a chat message for you after a click or a command
chat.supersedes	green	Hiding the plugin's own text line for people who see its card
net.http	red	Talking to a server you chose (official plugins only)
secrets	red	A secret in the system keychain (official plugins only)
ui.webview	yellow	A sealed web view with no internet (official plugins only)

Things plugins can never do

• Read the text of your chat messages.
• Send a message without a click or command from you (at most one message of 500 characters, within 2 seconds).
• Use the three red permissions if they come from a third-party repository.

Full reference for developers: Permissions.