Permission reference

Permission	Grants
plugin.storage	Private plugin key-value storage.
game.state.read	Public game and checkpoint state.
game.player.read	Local-player handle and read methods.
game.vehicle.read	Current local-vehicle handle and read methods.
game.entity.read	Streamed player, vehicle, object, actor, pickup, and text-label handles.
network.stats.read	Read-only transport and inspection queue statistics.
network.inspect	Bounded received and outgoing packet/RPC observation.
network.intercept	Best-effort cancellation of supported outgoing packet/RPC sends.
server.state.read	Current server snapshot.
chat.read	Player chat, server messages, and chat bubbles.
chat.intercept	Modify or cancel outgoing chat.
chat.send	Send chat messages and commands through normal interception.
command.intercept	Modify or cancel outgoing commands.
dialog.read	Read displayed server dialogs.
dialog.intercept	Modify or cancel dialog responses.
textdraw.read	Read supported TextDraw lifecycle and text.
textdraw.intercept	Cancel supported TextDraw clicks.
ui.menu	Register a plugin settings page.
ui.draw	Draw bounded HUD commands and project world positions.
ui.chat	Show local-only chat notifications.
ui.input	Receive and consume touch input.
ui.clipboard.read	Read the current UTF-8 clipboard snapshot.
ui.clipboard.write	Write bounded UTF-8 text to the clipboard.
audio.playback	Play and stop streams owned by the plugin.
game.player.write	Controlled local-player writes.
game.vehicle.write	Controlled current-vehicle writes.
game.physics.override	Reversible physics flags, surfaces, and collision filters.
game.camera.control	High-risk camera-follow effect for streamed remote players.

Basic logging, capability queries, event subscriptions, timers, and managed tasks do not require a manifest permission.

The machine-readable permissionMetadata in the release Schema is the source for permission labels, risk levels, first-version information, and revocation policy. Permission approval does not bypass phase, parameter, lifecycle, or thread checks. game.camera.control is high risk and is intentionally separate from read-only camera snapshots.