Browser-local tools
Browser-local tools process inputs on your device after the page loads. LocalTools does not receive the pasted text, token, image, or PDF for these tools.
Most LocalTools utilities run entirely in your browser. A small number of network tools use a server request because public HTTP headers and redirect chains cannot be checked reliably from browser-only JavaScript.
Browser-local tools process inputs on your device after the page loads. LocalTools does not receive the pasted text, token, image, or PDF for these tools.
Network tools send the public URL you enter to a LocalTools API so the server can fetch response headers or redirects. Private, local, reserved, and credentialed URLs are blocked before the request is followed.
Open your browser network panel before using a browser-local tool and confirm that the pasted input is not sent in a request.
Check the privacy badge on each tool page. Local tools are labeled Runs locally; public URL checks are labeled Uses API.
Avoid entering private URLs, internal hosts, credentials, or production secrets into any tool unless you have confirmed the workflow is appropriate.