Letting an AI agent use your logged-in browser? It can read your inbox, your bank and your LinkedIn. It can also send, post and delete in your name.

OnlyRead makes the sites you pick read-only for agents. Reads pass, so the agent still finds everything it needs. Sends, posts, edits and deletes are refused before they leave the browser.

🛡️ How it works

It's enforced on the browser's network requests, not on the agent's instructions. Even if the agent is tricked or just gets it wrong, the write never goes out.

✨ Useful for

With the agent read-only, you can safely connect it to your most sensitive accounts and get its full value.

• Triaging your inbox without sending anything

• Researching on LinkedIn without posting or messaging

• Checking your spending with no way to move money

🤖 Works with Grok Bot, Claude in Chrome, Codex and any agent that uses Chrome.

✅ Free and open source