Everything about extensions lives in Settings > Extensions. The Enable extensions master toggle at the top turns the whole system on or off.
https://www.youtube.com/watch?v=aNNatcwTEIo
The Loaded Extensions list shows every extension currently installed. Click an extension to see:
The Browse community extensions button opens the Extension Manager. It lists Updates Available and Available Extensions with search; each entry shows its version, size, Network / Requires API Key badges, and the commands it adds. Use the Add, Update, and Refresh buttons to manage your collection.
Security: The extension catalog manifest is fetched from GitHub and verified with an Ed25519 signature against a key built into the app, and every downloaded extension is checked against a SHA-256 hash before it's extracted. Browsing requires Settings > Privacy > "Check GitHub for extension updates" to be on.
The API Keys section manages the credentials that network extensions use. Each key has:
apikey_openaiKey values are stored in the macOS Keychain — never in preferences. Extensions can only use keys once Settings > Privacy > "Let extensions call their own APIs" is enabled.
You can add your own aliases to any command from the command's detail view. Aliases are matched by Autocomplete just like command names, so a long command can be as short as you like.
Pro tip: Before adding an extension, check its Data Access declaration — extensions that declare No note content never see what you write.