diff --git a/README.md b/README.md
index f8943348fb..46f0ffd4ae 100644
--- a/README.md
+++ b/README.md
@@ -106,6 +106,8 @@ For production, configure public URLs and replace the default secrets before exp
 ```bash
 CAP_URL=https://cap.yourdomain.com
 S3_PUBLIC_URL=https://s3.yourdomain.com
+# Chrome Web Store extension ID allowed to receive auth keys
+CAP_CHROME_EXTENSION_ID=fefjaffcodfiogbbngmjkcjpbpclbdcp
 ```
 
 See the [self-hosting guide](https://cap.so/docs/self-hosting) for email setup, AI providers, SSL, storage, production hardening, and troubleshooting.
diff --git a/docker-compose.coolify.env.example b/docker-compose.coolify.env.example
index 144db76dc0..d89e50b15d 100644
--- a/docker-compose.coolify.env.example
+++ b/docker-compose.coolify.env.example
@@ -74,3 +74,11 @@ OPENAI_API_KEY=
 # Google OAuth
 GOOGLE_CLIENT_ID=
 GOOGLE_CLIENT_SECRET=
+
+# ===================
+# EXTENSION (OPTIONAL)
+# ===================
+
+# Chrome Web Store extension ID allowed to receive auth keys (e.g. fefjaffcodfiogbbngmjkcjpbpclbdcp)
+CAP_CHROME_EXTENSION_ID=
+
diff --git a/docker-compose.coolify.yml b/docker-compose.coolify.yml
index 8c89312e36..1228392393 100644
--- a/docker-compose.coolify.yml
+++ b/docker-compose.coolify.yml
@@ -25,6 +25,7 @@ services:
       S3_PATH_STYLE: "true"
       RESEND_API_KEY: ${RESEND_API_KEY:-}
       RESEND_FROM_DOMAIN: ${RESEND_FROM_DOMAIN:-}
+      CAP_CHROME_EXTENSION_ID: ${CAP_CHROME_EXTENSION_ID:-}
       MEDIA_SERVER_URL: http://media-server:3456
       MEDIA_SERVER_WEBHOOK_SECRET: ${MEDIA_SERVER_WEBHOOK_SECRET}
       MEDIA_SERVER_WEBHOOK_URL: http://cap-web:3000
diff --git a/docker-compose.yml b/docker-compose.yml
index 50add5ca7f..f3c701601b 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -26,6 +26,7 @@ services:
       S3_PATH_STYLE: "true"
       RESEND_API_KEY: ${RESEND_API_KEY:-}
       RESEND_FROM_DOMAIN: ${RESEND_FROM_DOMAIN:-}
+      CAP_CHROME_EXTENSION_ID: ${CAP_CHROME_EXTENSION_ID:-}
       MEDIA_SERVER_URL: http://media-server:3456
       MEDIA_SERVER_WEBHOOK_URL: http://cap-web:3000
     ports: