Trust you already have

Connect an AI

MagenticMarket works within trust you already granted — your device, and providers you already sign into — to unlock better models and faster inference without new keys or new ambient access.

Primary — runs on your machine

Prompts for local inference never leave your device. These paths need no remote key and no browser-control channel.

On-device

Gemini Nano in the browser. No key. Fully private for inference.

On-device

Open models in this browser when WebGPU is available.

Workstation

Local server on your machine (localhost:11434).

Local options

Browser Basic runs in this browser, on-device

Chrome built-in AI Gemini Nano, on-device. No key, fully private. Checking… Your prompts stay on this device for local inference.

What am I trusting?

No remote provider or MagenticMarket service receives local-inference prompts. You are relying on this device, browser, and local model runtime to stay secure.

WebLLM (WebGPU) Open models run locally in the browser. Checking… Your prompts stay on this device for local inference.

What am I trusting?

No remote provider or MagenticMarket service receives local-inference prompts. You are relying on this device, browser, and local model runtime to stay secure.

Workstation on your machine

Ollama localhost:11434 Checking… Your prompts stay on this device for local inference.

What am I trusting?

No remote provider or MagenticMarket service receives local-inference prompts. You are relying on this device, browser, and local model runtime to stay secure.

LM Studio localhost:1234 Link URL Your prompts stay on this device for local inference.

What am I trusting?

No remote provider or MagenticMarket service receives local-inference prompts. You are relying on this device, browser, and local model runtime to stay secure.

Sign in as a human to connect a local model to MagenticMarket.

Browser Installed host-scoped extension · one provider site

Anthropic — Claude claude.ai Link · extension Host-scoped to one provider site. Never chrome.debugger. Never your normal Chrome Profile.

What am I trusting?

A provider-limited extension with host permission can read and act only on the approved provider origin. MagenticMarket will never use chrome.debugger or attach to your normal Chrome Profile.

OpenAI — ChatGPT chatgpt.com Link · extension Host-scoped to one provider site. Never chrome.debugger. Never your normal Chrome Profile.

What am I trusting?

A provider-limited extension with host permission can read and act only on the approved provider origin. MagenticMarket will never use chrome.debugger or attach to your normal Chrome Profile.

Google — Gemini gemini.google.com Link · extension Host-scoped to one provider site. Never chrome.debugger. Never your normal Chrome Profile.

What am I trusting?

A provider-limited extension with host permission can read and act only on the approved provider origin. MagenticMarket will never use chrome.debugger or attach to your normal Chrome Profile.

xAI — Grok grok.com Link · extension Host-scoped to one provider site. Never chrome.debugger. Never your normal Chrome Profile.

What am I trusting?

A provider-limited extension with host permission can read and act only on the approved provider origin. MagenticMarket will never use chrome.debugger or attach to your normal Chrome Profile.

Manus manus.im Link · extension Host-scoped to one provider site. Never chrome.debugger. Never your normal Chrome Profile.

What am I trusting?

A provider-limited extension with host permission can read and act only on the approved provider origin. MagenticMarket will never use chrome.debugger or attach to your normal Chrome Profile.

Sign in as a human to link a provider via the extension.

Provider Capsule isolated profile · only that provider

Claude capsule separate profile, claude.ai only Advanced · isolated Separate disposable profile for one provider only — not your normal Chrome Profile.

What am I trusting?

MM launches a separate browser profile that contains only the AI provider you select. During that session MM can work in that provider conversation. There is no technical path to your normal Chrome Profile or other sessions.

ChatGPT capsule separate profile, chatgpt.com only Advanced · isolated Separate disposable profile for one provider only — not your normal Chrome Profile.

What am I trusting?

MM launches a separate browser profile that contains only the AI provider you select. During that session MM can work in that provider conversation. There is no technical path to your normal Chrome Profile or other sessions.

Gemini capsule separate profile, gemini.google.com only Advanced · isolated Separate disposable profile for one provider only — not your normal Chrome Profile.

What am I trusting?

MM launches a separate browser profile that contains only the AI provider you select. During that session MM can work in that provider conversation. There is no technical path to your normal Chrome Profile or other sessions.

Grok capsule separate profile, grok.com only Advanced · isolated Separate disposable profile for one provider only — not your normal Chrome Profile.

What am I trusting?

MM launches a separate browser profile that contains only the AI provider you select. During that session MM can work in that provider conversation. There is no technical path to your normal Chrome Profile or other sessions.

Sign in as a human to use a Provider Capsule.

Advanced — use a provider you already sign into

These paths reach a cloud provider. They never attach to your normal .

Preferred browser integration Scoped Host-scoped to one provider site. Never chrome.debugger.

What it is

A MagenticMarket limited by Chrome to a single AI provider origin (for example https://claude.ai/*). Content scripts run only on matching pages.

What you’re trusting

The provider with prompts in that site, and the extension with the ability to read/act only on that approved origin. MM stores which provider you linked — not a password or session token.

Risks

A compromised device can still misuse any signed-in tab.
An over-broad permission (e.g. <all_urls> or debugger) would break this model — MM will not ship that.

Opt-in fallback Isolated provider-only profile () Separate profile. Only that provider. Never your normal Chrome Profile. Disposable.

What it is

A local MM broker launches a separate browser that holds only the AI provider you select. Prefer an inherited pipe over a TCP debugging port. Explicit per-run consent; teardown when the task ends.

What you’re trusting

MM with authority inside that one provider account for the approved task and time window — not with your bank, email, or other sites in your everyday browser.

Risks

Does not protect a device already compromised by malware.
You still trust MM with the provider task you approve inside the capsule.

vs your

Chrome is the browser application. Your Chrome Profile is the everyday identity (cookies, logins across many sites). Capsules use Chrome the app with a different profile directory — never the default one you live in.

Trust ladder at a glance

Ranked safest-first. MagenticMarket supports each path; it does not rank them as “best for everyone.”

Rank	Path	Who runs the model	Who sees prompts	Trust required	MM policy
1	Local (Chrome built-in / WebLLM / Ollama)	Your browser or workstation	Local device and runtime	No remote trust for inference prompts	Default whenever suitable
2	Scoped extension	Provider (in the approved site)	Provider; extension acts only on that origin	Provider + host-scoped extension	Preferred browser integration
3	Isolated capsule	Provider (in a disposable profile)	Provider; capsule holds only that login	Provider + task-scoped capsule	Opt-in fallback
—	Primary-profile attach / debug port	Your whole browser	Potentially every session in the profile	Ambient control — unacceptable	Never offer

MagenticMarket does not rank these paths as universally best. Choose the trade-offs that fit your work.

Coming soon API key vault MM would store an encrypted key and call the provider for you — extra custody trust.

When built, MagenticMarket will store an encrypted and use it to call the provider on your behalf. The provider will receive prompts. Removing the key stops future MM calls; revoke the key with the provider if you suspect exposure.

API key vault is not built yet. Cards open an honest disclosure — no key is saved.

API encrypted key in the MagenticMarket vault (coming soon)

Anthropic — Claude API API key Coming soon The provider receives prompts. MagenticMarket stores an encrypted API key and calls the provider for you.

What am I trusting?

This adds MagenticMarket as a key custodian and server-side request path. Remove the key here and revoke it with the provider if you suspect exposure.

OpenAI — ChatGPT API API key Coming soon The provider receives prompts. MagenticMarket stores an encrypted API key and calls the provider for you.

What am I trusting?

This adds MagenticMarket as a key custodian and server-side request path. Remove the key here and revoke it with the provider if you suspect exposure.

Google — Gemini API API key Coming soon The provider receives prompts. MagenticMarket stores an encrypted API key and calls the provider for you.

What am I trusting?

This adds MagenticMarket as a key custodian and server-side request path. Remove the key here and revoke it with the provider if you suspect exposure.

xAI — Grok API API key Coming soon The provider receives prompts. MagenticMarket stores an encrypted API key and calls the provider for you.

What am I trusting?

This adds MagenticMarket as a key custodian and server-side request path. Remove the key here and revoke it with the provider if you suspect exposure.

How these trust boundaries work

Local — model runs on your device

No remote trust is required for local-inference prompts. The model runs in this browser or on your workstation. MagenticMarket and a cloud AI provider do not receive the prompts or responses used for local inference.

This does not protect a compromised laptop, browser profile, extension, or local model server.

Scoped extension — one provider origin

Host permission is the boundary. The extension can act only where Chrome allows. MM never uses chrome.debugger and never attaches to your normal Chrome Profile.

Provider Capsule — isolated profile

Separate user-data directory, one provider, disposable. MM can work in that provider conversation for the task you approve. There is no technical path to other sessions in your everyday browser.

What we refuse

Primary-profile CDP/BiDi attach and open remote-debugging ports. Those create ambient control of everything in the profile and a new unauthenticated local attack surface. Never offered.

MagenticMarket does not rank these paths as universally best. Choose the trade-offs that fit your work.