You can also optionally turn on notifications for when a webapp is trying to use your nos2x capabilities and gets automatically allowed or rejected: