Your tools. Your browser.

ToolGraft is a free, MIT-licensed project by Particular Labs. Updated September 23, 2026.

Extension data stays local

Installed adapter packages, exact versions, hashes, site permissions, safety lists, and diagnostics are stored in your browser. ToolGraft does not collect browsing history, tool inputs, or results. Optional extension analytics start off. It has no account system.

Your external agent

The paired local MCP receives inspected page content and tool results and passes them to your chosen agent. Its model provider may process that data under your agent settings. ToolGraft supplies no AI service. Pairing credentials, authored source and exports stay on this computer; the MCP stores them under ~/.toolgraft/. Disconnect in the extension to remove its pairing; delete the MCP data directory separately to remove saved drafts and credentials.

Network access

Adapter API calls go directly to the declared site; they are not proxied through ToolGraft. Registry requests happen during explicit install or update checks and periodic safety-list refreshes. Normal page navigation does not query the registry. Hosting providers may receive ordinary request metadata when you visit the website or fetch the registry.

Script adapters are trusted code

An approved script adapter can access the sites you grant. ToolGraft does not claim to sandbox that code from the page. Review the source, tools, runtime, and permissions before installing. Write prompts prevent accidental calls; a malicious adapter could bypass its SDK.

Removal

Removing an adapter deletes its install record and package and releases site permissions no other installed adapter needs. Reload matching tabs to clear existing page registrations. Removing the extension clears its local store.

Website resources

Fonts are served with this website; no request to a third-party font service is needed. The site includes no advertising. The interactive mailbox is synthetic and does not read your email.

Minimal usage analytics

The public website sends fixed page names, setup and download actions, and the ToolGraft release to Particular Labs’ self-hosted Umami server. Website analytics are on by default; local previews send nothing. Use the control below to opt out on this browser.

Extension analytics are separate and off by default. In Manage adapters, you can allow fixed panel, setup, approval and install actions, then turn them off at any time. Do Not Track and Global Privacy Control suppress both surfaces; extension private windows also suppress events.

We send no browsing URLs, query strings, fragments, referrers, page content, search terms, adapter names or code, tool inputs/results, error text, or persistent user identifier. We load no remote analytics script and use no analytics cookies, session replay or advertising IDs.

Requests go to umami.particularlabs.cloud. Like any server, it receives your IP address and browser headers; Umami can derive approximate location and browser information. Its documentation says it does not store the IP itself. Proxy logs and server retention have not yet been audited; no short retention period is promised for this developer preview.

Security reports

Before public release, the repository must enable private vulnerability reporting. Do not put credentials or private browsing data in public issues. The project's security model and release gates are maintained alongside the source.