Start here
The free tool below runs entirely in this browser — no account, nothing stored or transmitted. Redact anything you would not want kept before you type it.
Open the companion tool →Why an agent is not a tab
An agent inherits your logged-in sessions. That means the permission list is not a settings screen — it is everything you are signed into, plus anything it can reach with your credentials.
You do not have to remove the agent; you need to know which accounts it can act on, and to keep account browsing in a browser the agent cannot reach.
The protocol
- List every browser AI feature and extension you have enabled, with version dates.
- For each, note its permissions: read pages, act on forms, access files, network requests.
- List the accounts you are signed into in that browser, especially money, email, and work.
- Disable the agent for sensitive sites and separate everyday browsing from account browsing.
- Write the results down, then re-check after the next browser update.
What the tool does
Build a browser-agent permission audit It runs locally in this browser and sends nothing.
Limit first: This tool helps you document what you asked for and what you were told; it cannot inspect a company's systems, enforce a deletion, or guarantee a response.
Open the companion tool →Cost and free path
Cost: Free: one complete run in this browser, no account. Optional $4 one-time unlock allows unlimited runs of this tool on this browser. The free path and safety guidance never require payment.
Free path, in order (no cost):
- FTC privacy and data-security guidance for the report route
- The browser vendor's extension and security reporting channel
- IdentityTheft.gov if account access was actually misused
What this cannot do: It cannot decide the outcome for you.
Sources checked 2026-10-03 · source bank reviewed against the live pages listed in metadata.
One human next step
If an extension or agent behaves outside what it disclosed, report it to the browser vendor and the FTC; if account data was exposed, change the passwords of affected accounts and enable a second factor.
Research log and safety checks
AI-assist path: not used for a verdict. This builder organises the reader's own documents and names an independent source; it does not infer authenticity, eligibility, or legal rights. §6.9/§6.10/§6.11 disclosed in the batch report; §6.12 status line carried in metadata as `status_line`.
§0.5 protection result: category is data-privacy-exposure; crisis-adjacent: no; fear/urgency/scarcity toolkit used: no. The protective function is free and the paid feature is convenience only.