Chrome extension — Sentinel BYO
Enrich Sentinel with the full content of your paid press subscriptions — Le Monde, FT, NYT, Politico and 13 more — without ever sending your credentials to our servers.
BYO security model
Chrome browser (your machine)
Authenticated session
Le Monde · FT · NYT · Politico · …
Sentinel BYO Extension
- 1.Polls the article queue (every 15 min)
- 2.Fetches the article using your local cookies
- 3.Extracts clean text from the DOM
- 4.Sends text to Sentinel (HTTPS)
Never transmitted:
✗ Passwords
✗ Session cookies
✗ Credentials
Sentinel servers
Received & stored
✓ Article text
✓ user_id (audit trail)
Never received
✗ Passwords
✗ Third-party cookies
✗ Media sessions
1. Prerequisites
- An active Sentinel account with a Firm or Enterprise plan.
- Google Chrome version 88 or later.
- Be logged into your press subscriptions on the relevant sites in Chrome (your usual session).
- Leave Chrome open so the service worker can run in the background.
Required plan: Firm or Enterprise. API key creation returns a 402 error on Solo and Team plans. Contact your administrator to upgrade.
2. Install the extension (developer mode)
Chrome Web Store pending. While awaiting Google review, install the extension in developer mode from the ZIP file provided by Sentinel.
- In Sentinel, go to Settings → API Keys and click Download extension to get the ZIP file.
- Extract the ZIP into a permanent folder on your machine (e.g.
~/extensions/sentinel-byo/). - In Chrome, open
chrome://extensions/. - Enable Developer mode (toggle in the top right corner of the page).
- Click Load unpacked and select the folder extracted in step 2.
- The Sentinel S icon appears in the Chrome toolbar.
Important: do not delete the extracted folder. Chrome loads the extension from this folder on every start.
3. Create your API key
The key is shown only once. Copy it immediately to a password manager. It cannot be retrieved later.
- In Sentinel, go to Settings → API Keys.
- Click + Create API key.
- Give it a meaningful name, e.g. Chrome Extension — Marc's workstation.
- Select the scope: extension.
- Click Create. The key in
sk_live_xxxxx...format is displayed. - Copy the key immediately — it will no longer be visible after closing this window.
Each user must generate their own key. This per-user model enables targeted revocation (if a workstation is lost, revoke only that key without affecting others) and maintains an audit trail per user_id.
4. Configure the extension
- Click the Sentinel S icon in the Chrome toolbar. The popup opens.
- Enter the Sentinel URL:
https://app.sentinelbriefing.com(default value, do not change unless on-premises). - Paste your
sk_live_...key into the API Token field. - Click Test auth. A green checkmark ✓ confirms the connection works.
- Check Enable automatic fetch.
- Click Save.
The extension is now active. It will poll Sentinel every 15 minutes to pick up queued articles.
Supported publishers
The extension can access the 17 publishers listed below. Publishers marked Specific have a dedicated DOM extractor (more reliable and complete extraction). Others use a generic extractor (<article> / <main>).
| Publisher | Domain | Country | Extractor |
|---|---|---|---|
| Le Monde | lemonde.fr | 🇫🇷 | Specific |
| Les Échos | lesechos.fr | 🇫🇷 | Specific |
| Le Figaro | lefigaro.fr | 🇫🇷 | Specific |
| Mediapart | mediapart.fr | 🇫🇷 | Specific |
| La Croix | la-croix.com | 🇫🇷 | Generic |
| Libération | liberation.fr | 🇫🇷 | Generic |
| Le Parisien | leparisien.fr | 🇫🇷 | Generic |
| Le Nouvel Obs | nouvelobs.com | 🇫🇷 | Generic |
| Courrier International | courrierinternational.com | 🇫🇷 | Generic |
| Le Monde Diplomatique | monde-diplomatique.fr | 🇫🇷 | Generic |
| Le Grand Continent | legrandcontinent.eu | 🇪🇺 | Generic |
| Politico Europe | politico.eu | 🇪🇺 | Specific |
| Politico US | politico.com | 🇺🇸 | Specific |
| Financial Times | ft.com | 🇬🇧 | Specific |
| The New York Times | nytimes.com | 🇺🇸 | Specific |
| Foreign Affairs | foreignaffairs.com | 🇺🇸 | Specific |
| linkedin.com | 🌐 | Content script |
To add a domain not listed above, contact your Sentinel administrator. Adding a domain requires an extension update and reinstallation.
Polling behaviour
| Poll interval | Every 15 minutes |
| Articles per cycle | Maximum 5 articles per cycle (MV3 service worker limit) |
| Delay between fetches | 8 seconds between fetches (to avoid overloading target sites) |
| Requirement | Chrome must be open. If Chrome is closed, fetches resume on next launch. |
| Token storage | chrome.storage.local — encrypted at rest by Chrome. |
Privacy & GDPR
The BYO model was designed from the ground up to never transmit your credentials to our servers. Here are the technical guarantees:
- Credentials never transmitted: session cookies for media sites (Le Monde, FT, etc.) stay in your browser. Sentinel never sees them.
- Text only: the extension extracts structured article text and sends it to Sentinel via HTTPS. No cookies, no session data.
- Encrypted API token: your
sk_live_...key is stored inchrome.storage.local, encrypted at rest by Chrome. It is transmitted only toapp.sentinelbriefing.com. - Whitelisted domains: the extension can only access domains declared in
manifest.json → host_permissions. All other domains are ignored. - Audit trail: each submission is traced with the
user_idof the API key used, allowing the firm administrator to see which key submitted which content. - Targeted revocation: if a workstation is lost, its associated key can be revoked from Sentinel without affecting other users.
Troubleshooting
"Test auth" shows a red error
https://app.sentinelbriefing.com (no trailing slash) and that the sk_live_... key is complete and has no spaces. If the key has been lost, create a new one from Settings → API Keys.402 error when creating the API key
No articles appear in Sentinel
Articles arrive truncated or empty
<article> or <main> — if these tags have changed, extraction is partial. Report the issue to your Sentinel administrator.The Sentinel icon does not appear in the toolbar
chrome://extensions/ and check that the extension is enabled. If it is not listed, reload it (click "Load unpacked" and reselect the folder). Pin the icon via the Extensions menu (puzzle icon) → pin.FAQ
Does Sentinel see my passwords?
No. Your credentials never leave your browser. The extension uses cookies already present in Chrome to access articles. Only the extracted text is sent to Sentinel, via HTTPS.
Does the extension work on Firefox?
Not yet. Firefox support (Manifest V2/V3 dual) is planned for a future version. Only Chrome is currently supported.
Can I revoke access for one workstation without affecting others?
Yes. Since each user has their own sk_live_... key, revoking one key only affects the associated workstation. Go to Settings → API Keys → Revoke.
What if I change computers?
Install the extension on the new machine (steps 1–4) and generate a new API key from Settings → API Keys. Revoke the old key if the old workstation is no longer in use.
Does the extension run when Chrome is closed?
No. The Manifest V3 service worker only runs when Chrome is open. If you close Chrome over the weekend, fetches resume automatically on the next Chrome launch.
The extension is open-source. Its source code can be audited by any user who wants to verify that no authentication data is sent to Sentinel.