Locke Extension by Sonomos

Connects your browser to the Locke desktop app so AI website requests are held and scanned on-device before leaving your machine.

0 (0 reviews)

Download Firefox and get the extension

Download file

About this extension

Locke Extension is the browser half of the Sonomos Locke desktop app. It watches a fixed list of AI websites (ChatGPT, Claude, Gemini, Perplexity, and the other in-scope chat and search surfaces) and, when a page on one of those sites sends a request with a body, it holds that request and relays it to the Locke desktop app running on your machine. The app scans it on-device and returns a verdict, which the extension enforces before anything leaves your browser:

allow — the request is sent exactly as the page issued it.
redact — the request is sent with sensitive data replaced by the desktop app's rebuilt version.
block — the request is not sent; the page sees a network error.
The failure posture is fail-closed: if the desktop app is unreachable or no clean verdict arrives, an in-scope request is blocked rather than sent unscreened. Traffic to sites outside the list is never touched.

All scanning and redaction happen locally in the Locke desktop app. The extension has no detection logic of its own, contacts no remote servers, and sends no data off your machine. Its only two endpoints are the desktop app's native-messaging host and a loopback heartbeat (127.0.0.1) that tells the app the extension is installed and connected.

Requires the Locke desktop app. Without it, in-scope AI-website requests are blocked (fail-closed) and the toolbar badge shows the connection problem.

Rated 0 by 0 reviewers

Permissions and data

Required permissions:

Exchange messages with programs other than Firefox
Access your data for sites in the aistudio.google.com domain
Access your data for sites in the assistant.kagi.com domain
Access your data for sites in the chat.deepseek.com domain
Access your data for sites in the chat.mistral.ai domain
Access your data for sites in the chat.openai.com domain
Access your data for sites in the chat.qwen.ai domain
Access your data for sites in the chatgpt.com domain
Access your data for sites in the claude.ai domain
Access your data for sites in the claude.com domain
Access your data for sites in the console.anthropic.com domain
Access your data for sites in the console.x.ai domain
Access your data for sites in the copilot.microsoft.com domain
Access your data for sites in the duck.ai domain
Access your data for sites in the duckduckgo.com domain
Access your data for sites in the gemini.google.com domain
Access your data for sites in the grok.com domain
Access your data for sites in the kagi.com domain
Access your data for sites in the meta.ai domain
Access your data for sites in the perplexity.ai domain
Access your data for sites in the platform.openai.com domain
Access your data for sites in the search.brave.com domain
Access your data for sites in the www.bing.com domain
Access your data for sites in the www.google.com domain
Access your data for sites in the you.com domain
Access your data for aistudio.google.com
Access your data for assistant.kagi.com
Access your data for chat.deepseek.com
Access your data for chat.mistral.ai
Access your data for chat.openai.com
Access your data for chat.qwen.ai
Access your data for chatgpt.com
Access your data for claude.ai
Access your data for claude.com
Access your data for console.anthropic.com
Access your data for console.x.ai
Access your data for copilot.microsoft.com
Access your data for duck.ai
Access your data for duckduckgo.com
Access your data for gemini.google.com
Access your data for grok.com
Access your data for kagi.com
Access your data for meta.ai
Access your data for perplexity.ai
Access your data for platform.openai.com
Access your data for search.brave.com
Access your data for www.bing.com
Access your data for www.google.com
Access your data for you.com

Optional permissions:

Access your data for 127.0.0.1

Data collection:

The developer says this extension doesn't require data collection.