The SlabTracked extension for Chrome

Step 1

Download & extract

Download the zip and unpack it to a folder you can keep around.

Step 2

Open extensions

In Chrome, navigate to chrome://extensions.

Step 3

Enable Developer Mode

Flip the toggle in the top-right of the extensions page.

Step 4

Load unpacked

Click "Load unpacked" and select the folder you extracted.

Step 5

Sign in

Click the SlabTracked icon in your toolbar and sign in.

Step 6

Choose how to sign in

Sign in to CGC or PSA yourself, or optionally save a login in the extension for automatic sign-in.

CGC & PSA account sync

Bring private order and invoice records from CGC Comics, CGC Cards, and PSA into SlabTracked.

Progress & return tracking

Keep grading statuses, item details, certificate numbers, and grader-provided return tracking together.

Optional sign-in assistance

Use your existing grader session, or save a login locally in the extension for automatic sign-in.

Submission form automation

Carry prepared items and service choices into supported grading forms, then review and complete checkout.

Whatnot inventory tools

Import prepared CSVs and fill supported draft fields in your Whatnot seller dashboard.

Browser alerts

Get notified of grading status changes and when a connected account needs your attention.

Sync on your schedule

Choose your sync interval, run an update from the popup, or pause background activity when you need to.

Session-only credentials (v2.10.5)

The companion now keeps its account token and optional grader logins only for the current browser session. Restarting Chrome or updating the extension requires reconnecting. Sign out clears these extension credentials. Older persistent credentials are deleted, preferences remain saved, and broad tabs permission is removed.

Clearer account sign-in (v2.10.4)

Once connected, the popup shows your SlabTracked account and Sign out. The Sign in link and Connect button disappear, and an open popup updates immediately when sign-in completes or the account changes. Reload the companion to activate this update.

Convention submission fixes (v2.10.3)

Brings the hosted convention fixes to your browser: selects the native Signature Series controls, verifies exact comic catalog matches, and waits for CGC to confirm each creator. Keeps different creators and eligible label numbers on each book, then opens Shipping (step 4) after every book is saved. Reload the extension and refresh SlabTracked and CGC tabs after updating.

Verified CGC shipping handoff (v2.10.2)

Prevents overlapping starts from losing submission settings, verifies Signature Series and the requested tier, and selects the exact eligible custom label. Fully prepared drafts advance from Review to Shipping (step 4); you choose shipping and complete payment in step 5. Incomplete or unverified carts stay at review. Reload the extension and refresh open SlabTracked and CGC tabs after updating.

Submission defaults and CGC service checks (v2.10.1)

Save Universal or Signature Series settings, plan conventions and signing events, and attach different creators and eligible labels to each book. Shared services are verified before advancing; mixed service and custom-label groups are stopped for correction. The companion verifies available choices, pauses for unresolved requests and the holder waiver, then hands off at review for you to complete shipping and payment in steps 3–5. Creator remarks and sketches remain requests for manual confirmation.

Confirmed Whatnot imports (v2.9.2)

CSV uploads reach the Whatnot inventory tab and return the result to the SlabTracked page that started them. Success appears only after Whatnot confirms the import; errors and missing confirmation stay visible. PSA and CGC account sync continue without the developer relay installed.

Complete-entry PSA search and relay v1.2.0

Search runs automatically after a 1.5-second pause in typing or completed dictation. The relay popup follows the companion design, idle queue checks return promptly, and optional image loading has a shorter deadline.

Relay idle-timeout fix (developer relay v1.1.1)

The separate developer relay now stays responsive after idle periods when connected to older website servers. Reload the relay after updating, then turn it off and on once to clear any previous retry delay.

Pause stays paused after restart (v2.9.1)

Pausing or signing out keeps background sync stopped when Chrome or the extension restarts. Scheduled callbacks, sync interval changes, deferred enrichment and manual CGC/PSA sync respect Pause until you resume. The companion and developer relay have also been tested together in an isolated Chromium browser.

PSA relay separated from the store companion (v2.9.0)

The regular companion contains no PSA relay polling, shared-search proxy, submission pool, or request-header rewriting. Relay operators can install the separate developer-only unpacked extension. The companion keeps CGC and PSA account sync, submission assistance, and Whatnot export.

Clearer sign-in and local credential handling (v2.9.0)

The popup shows the connected SlabTracked account. CGC auto-login uses the same local credentials saved by the popup, older saved logins migrate locally, and PSA credential replies are limited to the top-level Collectors sign-in page.

Granular PSA status sync (v2.8.23)

Scheduled PSA sync combines active-order stages with structured order history and reports completion only after SlabTracked accepts the saved orders. Failed attempts remain visible for retry.

Reliable CGC manual sync and CSV cleanup (v2.8.22)

Manual sync now reports accurate saved, updated, and unchanged invoice counts and surfaces partial import failures. Native CSV fallback cleanup is bounded to the exact extension-triggered export and shows a visible warning if the file cannot be removed; unrelated downloads are untouched.

Retryable CGC tracking propagation (v2.8.22)

After invoice statuses are saved, SlabTracked queues dealer and customer tracking updates for retryable processing independently of cert enrichment. Repeating an unchanged sync can recover an interrupted tracking handoff without creating another status transition.

Lower-cost PSA relay polling (v2.8.21)

Before the v2.9.0 split, the optional PSA relay checked for work with quick requests and waits in your browser between checks, instead of keeping a server function running while idle. Registration heartbeats are shared, temporary failures back off, and rejected sign-ins pause polling until authentication changes. Update your installed extension to enable the new polling protocol; older versions remain compatible.

CGC confirmation recovery and correct toast branding (v2.8.20)

Each CGC payment tab retains its own batch identity through confirmation; title/issue manifest checks provide a second guard against stale same-count batches, and consumed links no longer fail the import. A matching staged batch clears only after a successful capture, while failures remain retryable. Shared in-page toasts now display the current SlabTracked mark instead of the retired document glyph.

CGC CSV containment and PSA relay cleanup (v2.8.19)

Authenticated CGC invoice CSV requests now run in the loaded tracking page’s main context. The exact-endpoint native fallback removes completed extension-triggered files and ignores unrelated downloads. Two orphaned PSA relay helpers are gone, while direct locale validation and all six pool-aware heartbeat paths remain.

Obsolete local CGC cert completion state removed (v2.8.18)

The uncalled local cert-completion writer and its stale invoice flags are gone. Licensed Dealer API enrichment remains authoritative, including complete, Cert Pending, and failed queue outcomes with original error reporting; frequent polling and browser-session invoice discovery continue unchanged.

Server-owned CGC status notifications (v2.8.17)

Tracking-page and CSV sync no longer repost each accepted status transition through the compatibility notification endpoint. SlabTracked’s normalized lifecycle checks, preferences, deduplication, durable CSV outbox, and shipped-enrichment gate remain authoritative; local Chrome alerts and frequent polling continue unchanged.

Unreachable automatic backfill wrappers removed (v2.8.16)

Dead daily/weekly deep-sync decision logic, its unused last-run field, and a logging-only server-enrichment wrapper are gone. Explicit deep sync still uses the reusable warm tab, while scheduled, targeted, shipped, and CGC Cards enrichment continue calling the licensed server integration directly.

Server-owned shipped enrichment notifications (v2.8.15)

An unreachable extension helper that duplicated shipped-grid notification delivery is gone. Official CGC enrichment still triggers the server coordinator, which waits for complete cert data and shipment evidence, honors preferences, and deduplicates delivery. The compatibility endpoint remains available for older installed builds.

Duplicate CGC tracking injector removed (v2.8.14)

An unreferenced second scraper that injected generic selectors and posted a reduced tracking payload is gone. The reusable warm tab, Angular-aware content script, virtual-grid scrolling, CGC Cards tagging, state merge, notifications, and authenticated API sync continue unchanged.

Unreachable CGC overview fetch removed (v2.8.13)

An uncalled fetch chain that guessed internal CGC endpoints and regex-parsed tracking HTML is gone. Alarm-driven CSV import, the reusable warm tracking tab, signed-in invoice details, CGC Cards cert mapping, licensed Dealer API enrichment, and normal polling continue unchanged.

Unused PSA CSV code removed (v2.8.12)

Two unreferenced completed-order CSV parsers and stale export-route documentation are gone. Authenticated orders.list discovery, orders.get cert details, private order-HTML recovery, official enrichment, and normal PSA polling continue unchanged.

Server-owned morning summaries (v2.8.11)

The extension no longer schedules a second 9:00 AM summary alarm or refreshes a duplicate CGC CSV for it. SlabTracked’s server cron owns the summary; configurable CGC and PSA sync, queue polling, automation polling, and PSA relay maintenance continue unchanged.

Server-owned entitlements (v2.8.10)

The extension no longer duplicates SlabTracked subscription tiers, stores a separate license cache, or schedules a daily license-validation alarm. Access remains enforced by SlabTracked’s server.

PSA detail path simplified (v2.8.10)

PSA order details continue through the authenticated orders.get endpoint. The unused detail-page DOM payload and local cache, which had no background receiver, have been removed.

Dealer API authority (v2.8.9)

CGC Comics invoice sync now reconciles unresolved certs directly through the licensed Dealer API. Official identity, grade, images, and verified rejects supersede browser-derived cert data, while older unresolved invoices rotate through automatic backfill.

Comic sync no longer blocked by page scraping (v2.8.9)

Targeted comic enrichment calls the server first, incomplete results remain Cert Pending, and the private-detail normalizer is restored for the tracking workflows that still use it.

Canonical CGC identity (v2.8.8)

After every invoice line resolves, CGC’s official comic or card title, issue/card number, variant, maker or publisher, grade, and real cert details replace the submitted values in SlabTracked.

Real CGC Cards cert mapping (v2.8.8)

Cards invoice sync captures cert-to-line mappings from the signed-in private tracking detail. Card cert numbers are never guessed from the invoice number.

Accurate installed version (v2.8.7)

The extension popup now reads the installed manifest version instead of displaying a stale hard-coded release number.

Clear CGC credential boundaries (v2.8.7)

Extension auto-login remains device-local. The separately labeled, optional server CSV test is configured in SlabTracked and is never activated by the extension.

Reliable CGC checkout handoff (v2.8.6)

Submission data now survives CGC’s full-page transitions from Add Items through review, shipping, and payment, then clears at payment, cancellation, or failure.

Prescreen settings survive requeue (v2.8.6)

CGC tier and add-on choices are stored with the automation job, restored when the extension polls, and recovered from legacy batches so Grade PreScreen 9.8 is not dropped.

One-call PSA cert details (v2.8.5)

Existing order scans are reused, so official metadata normally costs one PSA call per new cert. Image requests are reserved for missing scans, completed official records never call PSA again, and terminal orders no longer spend progress calls.

Quota-safe PSA cert enrichment (v2.8.4)

Production shares a rolling 90-of-100-call safety budget, caches successful certs, and returns a durable cooldown. The extension stops the current cert batch immediately instead of retrying every remaining cert after a quota or access failure.

One warm CGC tracking tab (v2.8.3)

Sync, CSV, sign-in, and private invoice-detail work now reuse one background CGC tab inside the SlabTracked group. Service-worker restarts no longer strand separate minimized tracking windows.

Official cert APIs only (v2.8.2)

CGC and PSA cert pages are no longer fetched, opened, or scraped. Known certs use SlabTracked’s licensed server integrations, including images and population data.

Focused companion permissions (v2.8.2)

eBay listing automation and FedEx tracking-page access were removed. eBay now uses its official Inventory API and carrier delivery updates run on the server.

PSA persistence handoff fixed (v2.8.2)

API fields such as year, subject, card number, signatures, populations, spec ID, images, attribution, and the official response now survive the extension handoff.

CGC cert tabs removed (v2.8.0)

CGC certification enrichment now goes through SlabTracked’s licensed server-side Dealer API. The extension remains available for regular-account invoice and CSV intake, but no longer opens or scrapes public CGC certlookup pages.

Runaway CGC tabs stopped

Status, CSV, and private invoice-detail work now share one serialized CGC tab. Cert enrichment runs server-side; expired sign-ins pause retries and orphaned work tabs are removed on startup.

CGC CSV reconciliation repaired

Invoices and cert slots present in the CGC CSV are preserved even when certificate enrichment is incomplete; missing grades are no longer mistaken for rejects.

Server-side enrichment queue

Known CGC certs use the licensed Dealer API; PSA order certs can be imported from authenticated private-order details, with retry backoff and resumable checkpoints handled by SlabTracked.

Your PSA session token stays in your browser

The extension no longer uploads your PSA access token to the SlabTracked server - server-side autofill goes through the relay bridge instead, so the token stays in your browser. Relay support moved to the developer extension in v2.9.0.

Relay operations authenticated end-to-end

Every relay register/unregister call now carries your SlabTracked sign-in, and the server rejects anything unauthenticated.

Locked to slabtracked.com

API endpoints are pinned to an allow-list, external messages are sender-verified, and debug backdoors plus the direct Telegram/Discord send path (and those host permissions) were removed - alerts now route through SlabTracked.

Autofill asks first (v2.7.2)

Wizards only auto-run within 10 minutes of a kick from the web app - any other visit to a form shows a "Start autofill?" prompt, and your answer sticks for the tab.

Pause Extension is a true kill switch (v2.7.2)

Flipping the toggle instantly stops every open wizard page, cancels running fill loops and countdowns, and blocks new automation jobs.