Agent
Free
$0
Open source. Bring your own key.
- Full read-only enforcement
- Bring your own model key (BYOK)
- Open source, inspect every line
is the read-only mode for AI agents in your browser. Your agent can explore your sites. It just can’t act on them.
Go on. Try to like it. Tap the onlyread logo to switch it off.
“Please don’t change anything” is a request.
makes it a boundary.
Every click is a request. Let’s look inside.
A little thought before every action.
Scroll to see what stands in the way.
2,000+real tasks, tested.
Validated against a published university benchmark of AI agents working on the web’s busiest sites. onlyread holds up wherever people actually browse.
Add it to Chrome
One click from the Web Store. It lives in the browser your agent already uses.
Pick your apps
Choose the sites to protect. It guards them whenever an agent is working.
Let it look around
Your agent reads everything it needs. Anything that would change something stops at the glass.
Pick your access level
Pro
$5/month
No keys to manage. We run the AI judge for you.
Everything in Free, plus:
- No API key to create or top up
- Generous usage for everyday agent work
- Manage billing from your account
Enterprise
Let’s talk
For teams putting agents to work at scale.
Everything in Pro, plus:
- Dedicated support
- Custom app testing and verification
Good questions.
Straight answers.
Is this another AI agent?
No. onlyread is a free, open-source Chrome extension that gives AI browser agents read-only access to your web apps: they can read and search, but cannot send, post, delete or buy by mistake. You bring the agent; onlyread limits what can change in the apps you guard.
What does “read-only” actually mean?
Requests classified as changes are blocked; reads continue. Some apps use the same endpoint for reads and writes, so app-specific rules and request classification matter. It is a strong boundary, not a guarantee against every possible change.
Does my data leave the browser?
Your settings and decision log stay in Chrome storage. Most requests are decided locally. The few that aren’t go to a model for a verdict: on Free, to your own provider with your key; on Pro, to OnlyRead’s service, which never stores the request content.
Where do I get it?
From the Chrome Web Store, in one click. It runs in Google Chrome and Chromium browsers such as Perplexity Comet, with any agent that drives them: Claude in Chrome, ChatGPT in Chrome and Codex, Gemini in Chrome, Claude Cowork and others. Every site starts off; you switch on the apps your agent may use, and it guards them whenever an agent is working.