Claude in Chrome: URL categorization API blocks legitimate ticket/athletics sites (false positives)

Resolved 💬 2 comments Opened Apr 15, 2026 by yancyqin Closed May 24, 2026

Summary

The Claude in Chrome extension calls api.anthropic.com/api/web/url_hash_check/browser_extension to categorize domains before adding them to turnApprovedDomains. Domains classified as category1 or category2 are silently filtered out and permanently blocked — no prompt is shown, no override is possible from the extension UI.

Several legitimate sports/entertainment ticket sites on evenue.net are being incorrectly categorized and blocked.

Affected domains (all legitimate ticketing/athletics sites)

| Domain | Site |
|--------|------|
| huskers.evenue.net | University of Nebraska Athletics tickets |
| ramblinwreck.evenue.net | Georgia Tech Athletics tickets |
| longbeachstate.evenue.net | Cal State Long Beach Athletics tickets |
| hawaiiathletics.evenue.net | University of Hawaii Athletics tickets |
| ictickets.evenue.net | Ford Idaho Center (concerts/events) |
| wsucougars.evenue.net | Washington State University Athletics tickets |
| ticketswestinw.evenue.net | TicketsWest (concert/event venue) |

Working domains (same platform, same *.evenue.net TLD)

ticketleader.evenue.net, ticketsnorth.evenue.net, rolltide.evenue.net, mbcentre.evenue.net, texastech.evenue.net, selectyourtickets.evenue.net

How it manifests

All blocked domains return "Navigation to this domain is not allowed" from navigate, read_page, javascript_tool, computer — even though the extension UI shows them as allowed and the manifest has <all_urls> host permission.

Root cause (found in extension source)

In mcpPermissions-D7Rkh1yL.js / PermissionManager-WI3FAKQw.js (v1.0.68):

// During plan approval, domains are filtered through URL categorization:
const category = await A.getCategory(url); // calls api.anthropic.com/api/web/url_hash_check/...
if (category === "category1" || category === "category2" || category === "category_org_blocked")
    filtered.push(domain); // silently removed, never added to turnApprovedDomains

// In checkPermission() — hard block with no prompt:
if (turnApprovedDomains.size > 0 && !isTurnApprovedDomain(hostname))
    return { allowed: false, needsPrompt: false };

Expected behavior

University athletics ticket sites and regional entertainment venues should not be classified as category1/category2. These appear to be false positives — likely a sports gambling or adult content classifier incorrectly tagging legitimate Paciolan/evenue.net ticketing subdomains.

Extension version

1.0.68

View original on GitHub ↗

This issue has 2 comments on GitHub. Read the full discussion on GitHub ↗