All of Helix/the API requires the user of a token. (not just a ClientID)
No token, no data.
For an extension, I assume you mean a browser extension, you can use implicit auth to obtain a token to use, the user will just need to (re)login to Twitch and provide a new token ever 60 days or so