The declaration to configure Safari Extensions.
| Setting | Type | Required | Default | Manual Install | Supported OS |
|---|---|---|---|---|---|
Managed Extensions ManagedExtensions The dictionary of managed extensions settings. Each key in the dictionary represents a composed identifier for a specific managed extension, or you can specify a single "*" character to match any extension. The dictionary values represent the settings that Safari applies to each extension that matches the key. In order for the extension to be managed, its host app needs to be present on the device.
The composed identifier of a managed extension uses the format "Identifier (TeamIdentifier)", for example "com.example.app (ABCD1234)". Use `codesign -dv <path_to_appex>` to show the information you need to generate this string on macOS, using the path to the extension bundle located in the "PlugIns" folder inside the app bundle. For other platforms, request this information from the app developer. 1 subkey | dictionary | optional | — | ✓Yes | iOS (18.0+)macOS (15.0+)visionOS (26.0+) |
└─ ANY ANY The dictionary that defines the settings for a managed extension. Each key represents a specific managed extension, or you can specify a single "*" character to match any extension. 4 subkeys | dictionary | optional | — | ✓Yes | iOS (18.0+)macOS (15.0+)visionOS (26.0+) |
└─ └─ Extension state State Controls whether an extension is allowed.
* `Allowed` - The user is allowed to turn the extension on or off.
* `AlwaysOn` - The extension will always be on.
* `AlwaysOff` - The extension will always be off. | string | optional | — | ✓Yes | iOS (18.0+)macOS (15.0+)visionOS (26.0+) |
└─ └─ Private Browsing state PrivateBrowsing Controls whether an extension is allowed in Private Browsing.
* `Allowed` - The user is allowed to turn the extension on or off in Private Browsing.
* `AlwaysOn` - The extension will always be on in Private Browsing if the extension is on outside of Private Browsing.
* `AlwaysOff` - The extension will never be on in Private Browsing. | string | optional | — | ✓Yes | iOS (18.0+)macOS (15.0+)visionOS (26.0+) |
└─ └─ Allowed domains AllowedDomains Controls the domains and sub-domains the extension is granted access to. 1 subkey | array | optional | — | ✓Yes | iOS (18.0+)macOS (15.0+)visionOS (26.0+) |
└─ └─ └─ Domain Domain A domain or set of sub-domains where the extension is allowed | string | — | ✓Yes | iOS (18.0+)macOS (15.0+)visionOS (26.0+) | |
└─ └─ Denied domains DeniedDomains Controls the domains and sub-domains the extension isn't allowed to access. 1 subkey | array | optional | — | ✓Yes | iOS (18.0+)macOS (15.0+)visionOS (26.0+) |
└─ └─ └─ Domain Domain A domain or set of sub-domains where the extension is not allowed | string | — | ✓Yes | iOS (18.0+)macOS (15.0+)visionOS (26.0+) |
