Set plugin permissions — PexarBolt Docs

Set plugin permissionsThe App controls access to protected capabilities. Installation alone does not grant all declared permissions.Request access

Declare only the capabilities the plugin needs.

Explain why each capability is needed.

Let the user review access in the App.

Handle denied or revoked access.

Expected result: the plugin uses only the approved capabilities and sources.Choose the capability

Permission

Purpose

network

Request data from an approved service origin.

store

Save private plugin data in the App.

media.read / media.control

Read playback state or control supported playback.

images.read / video.read

Use image or video sources selected by the user.

hid.consumer

Send supported media-key actions.

hid.keyboard / hid.mouse

Send supported keyboard or mouse actions through the Dock.

dock.read

Read supported device status.

fs.watch

Observe external storage metadata.

fs.transfers

Observe supported transfer progress.

fs.read

Read permitted external storage content.

fs.eject

Request safe ejection of a physical storage device.

backup.read

Read backup rules and job summaries for this installation.

backup.control

Request native setup and control App-owned backup jobs. Source and destination access needs separate authorization.

Keep credentials privateStore credentials in App settings. Never include them in published source, runtime packages, or sample data.Direct device data sources require their own network consent. Explain service requirements in the setup instructions.Review updatesAn update that adds permissions needs renewed approval. Test how the plugin behaves before access is granted.Website previews use sample data. They cannot grant App permissions or access the user's devices.