Is it safe to give an AI agent your sign-ins?

Your sign-ins can act as you, so here is exactly what syncs, where it goes, who can use it, and what we don’t protect against yet.

What does the extension read?

Only the sites you add. The extension asks for no site access when you install it; each site you add asks for its own Chrome permission, and the extension reads that site’s cookies. Domains you exclude are never read. The extension is open source, so you can read exactly what it sends.

Where do my sign-ins go?

From your browser to our server, and from there to the browsers your agents use, one way. The server keeps only your latest copy, encrypted with AES-256-GCM. Nothing an agent does in its browser changes your own.

Who can use them?

Only agents you connect, and only while you keep them connected. One agent uses your computer at a time, and you can watch it live and take over. Disconnecting an agent from your account takes effect immediately.

When an app that uses Clutchbox asks you to connect, you join its organization, and joining is your consent: its servers can then read the sites you sync to that organization with its API keys. Each organization gets only the sites you add for it, and leaving it ends its access.

Agents act on your real accounts: an agent signed in to a site can do what you can do there. Sync only the sites a task needs.

How do I stop or delete?

• Pause sync, or remove a site, from the extension or your account. A removed site is cleared from your cloud computer the next time it opens.
• Disconnect a browser, which deletes what it uploaded.
• Delete everything from your account.

Each browser signs in to our server on its own, with short-lived tokens that rotate. If a stolen token is reused, that browser is disconnected and its upload deleted.

What doesn’t this protect against?

• We, as the operator, and the provider that runs cloud computers are trusted: the browser on your cloud computer uses your sign-ins unencrypted. This is not end-to-end encryption yet.
• Some sign-ins can’t be copied, such as ones a site ties to your device.

Can I check this myself?

Yes. The extension, the sync format and a minimal server are open source under Apache-2.0, and you can run all of it on your own servers. The security model is in the repository, along with how to report a vulnerability privately. Our privacy policy lists the providers we use.