Live Directory · 0 tools
Know what your AI tools
actually do with your data
Evidence-based risk scores (1–5) for AI browser & VS Code extensions. Every score is traceable to external domains, API endpoints, native bindings, and telemetry extracted by REA static analysis — not marketing claims.
0
Tools indexed
0
Broad scope (4/5)
0
High risk (5/5)
0
Vendors tracked
Browse by category
Filter the directory by extension type.
No categories yet.
Browse by platform
VS Code extensions, MCP servers, and more.
Featured Extensions
View all 0 →How scores work
1 — Local only
No external network calls. Data stays on your machine.
2 — Own API
Calls only the vendor's own API. No third-party egress.
3 — Third-party / telemetry
Sends data to bundled libraries or telemetry services.
4 — Broad scope
Many external domains, AI-provider egress, or dynamic child processes. Weak signals cap at 4.
5 — High risk
Hard signals only: shipped native binary + confirmed sensitive/SSRF target.