Moon AI for Chrome puts Moon, the Moon AI assistant, in the Google Chrome side panel. On a tab you share with it, Moon reads the page and answers your questions: summarize an article, compare two offers, extract a table, explain a passage. In the tabs you hand over to it, it can also act for you: click, type, select, open a page, asking for your approval before each action that changes something on the page or opens an address. It uses your Moon AI account, its models and your plan’s usage limit.
The extension’s interface is in French: the labels quoted on this page are English translations.
What the extension doesLink to the What the extension does section
- It reads the tab you share. You click the Moon AI icon while you’re on the tab, then “Share this tab”. Without that gesture, Moon sees neither the tab’s address nor its title, and it doesn’t read your other tabs or your history.
- It acts in its tab group, with your approval. “Let Moon act on this tab” moves the tab into the “Moon” group. Moon only acts there, and a card shows you each action that changes something before it does it.
- What’s yours to do stays yours. Moon refuses actions it recognizes as a payment, an order, creating an account, signing in, or entering a password, a code or a card, and hands control back to you; every other click goes through your approval.
- You can stop it anytime. “Stop” in the panel, or AltShiftX, at any moment.
- Moon Blur masks before sending. The secrets and identifiers it detects are replaced on your computer, then again at Moon AI, before sending to the model.
- It goes through your account. The models offered are the Moon CLI models for your plan, and usage counts toward the usage limit of the workspace chosen at sign-in. The exchanges don’t go into your conversation history.
What you needLink to the What you need section
| Item | Details |
|---|---|
| A Moon AI account | The one you use on chat.realmoon.ai. |
| A plan that includes Moon CLI | The extension is included in the plans that include Moon CLI, from Étoile up, on the workspace it uses. Lune and the Free plan don’t include it. See the plans. |
| Google Chrome | Version 116 or later, on a computer. The extension also works in Microsoft Edge. |
Acting in tabs is rolling out to accounts gradually: as long as the panel doesn’t offer “Let Moon act on this tab”, your account can have shared tabs read, but can’t hand a tab over to Moon yet.
Install the extensionLink to the Install the extension section
Moon AI for Chrome is on the Chrome Web Store, Google’s extension store, and installs from its listing.
- In Chrome, open the extension’s listing: Moon AI for Chrome on the Chrome Web Store.
- Click “Add to Chrome”, then confirm.
- To keep the Moon AI icon at hand, click Chrome’s Extensions icon (the puzzle piece, to the right of the address bar), then the pin next to Moon AI for Chrome.
When you install it, Chrome shows a warning about access to sites and to page debugging. The extension uses them to act in the tabs you hand over to Moon: it only acts in its tab group, during a task, on the sites you have allowed one by one. That limit is a rule of the extension, not of Chrome. See What you see while Moon acts.
Sign inLink to the Sign in section
- Click the Moon AI icon in the toolbar: the Moon panel opens on the side of the window.
- Click “Sign in to Moon AI”. A Moon AI window opens on “Connect Moon AI for Chrome.”; sign in to your account if needed.
- Choose the “Workspace used by the extension”, among those whose plan includes Moon CLI: its plan and rules apply to what the extension does.
- Click “Authorize”. You’re back in the panel, signed in; the top of the panel shows the workspace and its plan.
Only authorize if you just clicked “Sign in to Moon AI” in the extension. The extension never sees your password, your conversations or your connectors. Each time you sign in, Moon AI sends you the email “New Moon AI for Chrome sign-in”.
The sign-in renews itself as long as you use the extension. After 30 days without use, and at the latest 90 days after signing in, the extension asks you to sign in again.
Share a tabLink to the Share a tab section
- On the tab you want to share, click the Moon AI icon (or AltShiftM).
- In the panel, click “Share this tab”.
- A card asks you, for example, “Share www.example.com with Moon?”: “Once”, “Always on this site” or “Refuse”.
- The page is attached. Type your question, then Enter (ShiftEnter for a new line).
Moon reads the visible content of the page: its text, its structure (headings, links, tables, buttons), its title and its address, without its parameters. On top of that:
- the text you selected on the page, if it is visible;
- the text of a document being edited in an online editor (word processor, wiki), masked by Moon Blur like the rest.
Moon never reads the values of form fields, passwords included.
- “Always on this site” applies to the site’s exact address (
www.example.com, not its other subdomains): the card no longer comes back for it. The “Allowed sites” button, at the top of the panel, lists these sites; “Remove” takes one off. - The card shows the page that will be read. If it changes before you choose, nothing is read: “The page changed while you were choosing: share it again.”
- Several tabs: to compare two pages, share them one after the other (the Moon AI icon on each one, then “Share this tab”), then ask your question. “Remove”, under an attached page, takes it off before sending.
See what gets sentLink to the See what gets sent section
“See what gets sent”, under an attached page, shows the content exactly as it will be sent, after Moon Blur masking: masked values appear as placeholders (MOONBLUR_…), and the attached capture as it will be sent. Nothing goes to the model until you send your message.
The conversationLink to the The conversation section
- Choose the model in the panel’s list: these are the Moon CLI models for your plan. Your choice is remembered.
- The conversation stays in the panel. It isn’t saved in your Moon AI history and disappears when you close the panel; “New chat”, at the top of the panel, starts another one.
- Esc stops an answer in progress.
- When the conversation gets long, its beginning is no longer sent to the model, and the panel tells you.
Let Moon actLink to the Let Moon act section
- On the tab, click the Moon AI icon, then, in the panel, “Let Moon act on this tab”.
- A card asks you, for example, “Let Moon act on www.example.com?”: “For this conversation”, “Always on this site” or “Refuse”. The first time, Chrome also asks you to allow the extension on this site.
- The tab joins the “Moon” tab group. Ask for a task in the panel, for example “Open the Exploration section and summarize it”.
Moon can then click, type text (the field’s text is replaced), choose from a list, check a box, press a key, scroll the page, open a page, go back, open or close a tab in its group and answer a dialog box. It does a task in at most 40 steps per message; the panel shows the current step, for example “Moon: Clicks “Add to cart” (www.example.com)”, then the list of the answer’s steps, done or refused.
- “For this conversation”: the approval and Chrome’s access to this site are given back at the end of the conversation. “Always on this site”: the site stays in “Sites where Moon acts” (the “Allowed sites” button, at the top of the panel), where “Remove” takes it off and gives the access back to Chrome.
- A new site during a task brings up the same card: Moon doesn’t go to a site you haven’t allowed.
- On a sensitive site, the site card offers “This time” or “Refuse”, never “Always”.
The cards before each actionLink to the The cards before each action section
Before each action that changes something on the page or opens an address (a click, typing, a choice in a list, a checkbox, Enter, opening a page), a card shows it to you in the panel and waits for your answer: “Allow” or “Refuse”. Scrolling the page, hovering over an element, pressing Tab or an arrow key outside a list of choices, going back, reloading the page and waiting don’t need a card.
- The title gives the action and the site, based on the page: “Click “Search” on www.example.com?”, “Type in “City” on www.example.com?”, “Submit the form …”, “Delete with …”, “Publish or send with …”, “Accept …”, “Open this address on …?”.
- The card shows the full text that will be typed, the full address that will be opened, and a thumbnail of the page around the element. This thumbnail stays on your computer.
- Submitting a form, publishing, deleting, accepting terms or a dialog box, granting a permission and carrying data read on one page over to another site always get their card, with a warning.
- If you refuse, Moon doesn’t do it, doesn’t look for another way, and asks you what you want.
- A card becomes active a moment after it appears: a click that is too fast, or that comes from a page, doesn’t count.
What Moon doesn’t doLink to the What Moon doesn’t do section
Moon refuses actions it recognizes as a payment, an order, a subscription, a donation, a financial order (transfer, trading), creating an account, signing in, a CAPTCHA, downloading a program, or entering a password, a code, a bank card, an IBAN, a social security number or an official ID. The panel then shows “Your turn” with the reason: do it yourself in the tab, then “Hand control back to Moon” if it is waiting, or “Got it”.
It recognizes them from what the page shows: a button it doesn’t recognize (text in an image, an unknown word) only gets the ordinary card. So read every card. Moon doesn’t act on pages never read either.
What you see while Moon actsLink to the What you see while Moon acts section
| Item | What it shows |
|---|---|
| The “Moon” tab group | The tabs where Moon can act, 8 at most. A tab that Moon opens joins it; a tab opened by the page only joins it after your approval. |
| The outline | A glowing blue border around the tab where Moon is acting; it turns amber when it’s your turn. |
| Moon’s cursor | A blue arrow that glides to the exact point of the click, then a ring on the click. |
| The page banner | At the bottom center: “Moon is acting on this tab”, “Moon is waiting for your approval in the panel” or “Your turn: Moon is waiting for you to hand control back”, the current step, and “Stop”. |
| Chrome’s banner | At the top of the window, “… started debugging this browser”: Chrome shows it while the extension is acting. |
To act, the extension uses Chrome’s debugging tool, only on the tabs of the “Moon” group and during a task; that is what makes Chrome’s banner appear. The banner, the outline and the cursor follow your system’s reduced motion setting.
Stop and take back controlLink to the Stop and take back control section
At any time, Moon stops with:
- “Stop”, in the panel (always visible while Moon acts), or Esc in the panel;
- AltShiftX, from any Chrome tab;
- closing Chrome’s banner, the “Moon” group or the panel, or moving the tab out of the group.
The “Stop” button of the page banner and Esc in the page stop it too, unless the page intercepts them: if in doubt, use the panel or AltShiftX.
“Take back control” puts Moon on hold while you act in the tab yourself; “Hand control back to Moon” lets it continue.
Page captureLink to the Page capture section
When the chosen model reads images, Moon also sees the page as an image: its pictures, colors and layout.
- For a shared tab, the “With a capture (input fields masked)” box is checked by default: a capture of the visible part of the tab goes with the page. The share card reminds you: “A capture of the visible part will also be sent, input fields masked.” Uncheck the box to send only the text: your choice is remembered for the next shares.
- When Moon acts, a capture of the visible part of the tab goes with each step where it acts. On a sensitive site, a capture is only sent after your approval on a card. For a task with no capture at all, choose a model that doesn’t read images.
- On each capture, input fields, editable areas and frames embedded in the page (content from another site, a video, an ad) are covered, as are the blocks of text where Moon Blur detects data.
- With a model that doesn’t read images, the panel shows “Capture: this model doesn’t read images” and only the text is sent.
- Moon receives at most the last three captures of the conversation.
Moon Blur in the extensionLink to the Moon Blur in the extension section
Before sending, Moon Blur masks on your computer the secrets and identifiers it detects in the pages, their titles, their addresses and your messages: keys, tokens, email addresses, phone numbers, IBANs, card numbers, social security numbers… At this stage, it detects neither names, nor postal addresses, nor health data. Moon AI then applies its own Moon Blur chain, as it does to every message.
In the panel, answers put your real values back in place, except in a link, in code or in a line that contains an address, where the placeholder stays. When Moon acts, a masked value is only typed on the site it comes from, or if it comes from you, after a “Type protected data on …?” card. See Moon Blur and its limits.
Sensitive sites and pages never readLink to the Sensitive sites and pages never read section
- Sensitive sites: banks, payment, health, government, messaging, account pages, online documents and calendars (Google, iCloud, OneDrive, SharePoint, Dropbox, Proton Drive…). To read, the “Share www.example.com, a sensitive site?” card comes back at every share, without “Always”. To act, every action gets its card, and no capture is sent without your approval.
- Pages never read: browser pages (settings, extensions…), files opened from your computer, extension stores, password vaults known to the extension, Moon AI pages, and addresses that contain a username or a password. The panel shows “Moon doesn’t read this page.”, and Moon doesn’t act there.
- Moon AI can add sites to these lists; it never removes any.
Avoid sharing or handing over health pages, bank pages and sensitive legal documents: their content goes to Moon AI, then to the model, after Moon Blur masking.
Instructions hidden in a pageLink to the Instructions hidden in a page section
A page can contain text written to trick an assistant (“ignore your instructions…”), sometimes invisible on screen. Moon is instructed not to follow what a page writes. When a page contains text that looks like an instruction addressed to Moon, the panel flags it: “Text that looks like an instruction: Moon is instructed not to follow it”.
- When Moon acts, every action goes through its card anyway: read it, especially after an unfamiliar page. A card can add “A page that was read contained text that looks like an instruction”.
- For some accounts, Moon AI also has tasks checked by a third-party model, called at an outside provider that may differ from your model’s. This model receives the text of the pages (after Moon Blur) and the captures, with the same masks as for your model. It looks for instructions hidden in what the pages showed Moon, and checks that each action matches your request. When in doubt, the card says so (“Moon AI has a doubt”) and highlights “Refuse”. This check adds cards; it never removes any. See the privacy policy.
- These checks don’t catch everything: keep a critical eye on an answer or an action drawn from a page you don’t know.
Links in answersLink to the Links in answers section
The destination site is written next to each link in an answer. A click first opens an “Open www.example.com?” card that shows the full address; “Open in a tab” opens it, “Cancel” closes the card. A link may have been dictated by a shared page: check the site before you open it, and don’t enter a password, a code or a card there if you don’t know it. A link whose address would carry a masked value stays plain text.
The logLink to the The log section
The “Log” button, at the top of the panel, opens the “Log (30 days, on this computer only)”: sign-ins, shares, Moon’s actions, your answers to the cards, sends, opened links and refusals, with their date.
- It keeps facts: the site, the title and the address without parameters (a value detected by Moon Blur becomes “[masked]”), the size of the text, Moon’s actions with the name of the elements it acts on, and the model used. It never keeps the text of the pages, what Moon types, or a token.
- It stays on your computer: 30 days, 2,000 entries at most.
- “Export” saves it to a file; “Clear the log” erases it.
- It is erased when you sign out, and when another account signs in to the extension.
Sign outLink to the Sign out section
| Where | Effect |
|---|---|
| “Sign out”, at the top of the panel | The sign-in is closed at Moon AI. The extension erases from your computer its tokens, its log, the sites allowed for reading and for actions, and your choices. |
| Settings › Account and security, “Moon AI for Chrome” section | The list of signed-in browsers, with the sign-in, last use and expiry dates. “Disconnect” closes a sign-in right away, even remotely. The section appears when a browser is signed in. |
| “Sign out from all devices”, in Settings › Account and security | Also closes all of the extension’s sign-ins. See Devices and sessions. |
| Uninstall the extension | Chrome’s extensions page, “Remove”: what the extension kept on your computer is erased. Its sign-in stays listed in Settings › Account and security until it expires: close it there. |
If a sign-in token that was already used is presented again, a possible sign that the sign-in was copied to another device, Moon AI closes the sign-in and emails you: “Moon AI for Chrome session closed for safety”. Sign the extension in again to continue.
If something goes wrongLink to the If something goes wrong section
| Message | What to do |
|---|---|
| “Moon can’t read this tab: the browser didn’t give it access (or the page forbids it, like a PDF).” | Click the Moon AI icon while you’re on the tab, then try again. A PDF opened in Chrome can’t be read. |
| “The page changed while you were choosing: share it again.” | Wait for the page to finish loading, then “Share this tab”. |
| “Chrome didn’t allow the extension on www.example.com: Moon won’t go there.” | You refused Chrome’s request. Start again and accept it, or leave Moon out on this site. |
| “The Moon group already has 8 tabs: close one.” | Close a tab of the “Moon” group, or move one out of it. |
| No “Let Moon act on this tab” in the panel | Acting isn’t open for your account yet: you can share tabs for Moon to read. |
| “Your Moon AI sign-in was closed. Sign the extension in again.” | The sign-in was closed (Settings › Account and security, expiry, sign-out from all devices): “Sign in to Moon AI”. |
| “Moon doesn’t read this page.” | The page is one of the pages never read. |
PrivacyLink to the Privacy section
What the extension reads and does, what is sent and where, Moon AI’s check, what stays on your computer and for how long, the limited use of data and how to stop everything: see the Moon AI for Chrome section of the privacy policy.