Cross-domain scripting in greasemonkey with a 0-timeout callback, now we can call our API when GM is running over facebook.