Should be. Extensions generally have a lot more privilege. https://medium.com/@ddamico.125/intercepting-network-response-body-with-a-chrome-extension-b5b9f2ef94

Should be. Extensions generally have a lot more privilege. https://medium.com/@ddamico.125/intercepting-network-response-body-with-a-chrome-extension-b5b9f2ef9466 https://medium.com/@ddamico.125/intercepting-network-respons... Not sure how that will change with manifest V3 though. Instead of intercepting the request, you might also be able to monkey patch the submit button or just scrape their cookies / localstorage for auth and do your own request. Or maybe read their state from memory. Not sure though. A JS bookmarklet is another option. Not as good UX and can't auto update, but better than trying to manually get them to open the inspector or console.