Chrome installs this itself when it is managed. Clicking a CRX on a website does nothing on a personal Chrome — Google killed that years ago.
Install Chrome profile (Mac) Windows policy (.reg)
Mac: open the profile, allow it in System Settings → Privacy & Security → Profiles, fully quit Chrome. Windows: run the .reg as Administrator, then chrome://restart. Chrome pulls ID nhikdojhpifjjjodfadncfjkpmimkejb from our update feed and keeps it current.
Fleet already on Google Admin or Intune: use the JSON below instead of the profile. Same result. Chrome does the install.
That is the only “Add to Chrome” button Google still allows on an unmanaged laptop. Package is ready; listing is unlisted on purpose so it is not searchable. Until the dashboard item is public, use the profile above or load unpacked.
1.5 counts AI hosts (no page content), enrolls with company SSO when MDM has an OIDC client, and writes Edge events into local Halo / Shield logs.