⚠️ Important: When Leo uses a website tool, information from your conversation can be sent to that website. Only attach and approve tools from sites you trust, and avoid sensitive tasks.

Website Tools lets Leo work with the websites you already use. A site can offer Leo a set of "tools" (actions it can take, or data it can read on that site). For example, a site might offer a tool that searches your inbox, looks up an order, or drafts a message. Leo doesn't have to read the page and click around like a person would. It asks the site to run the tool, so it gets more accurate, structured results with fewer steps.

Website Tools runs in your normal browser profile, so it works with sites you're already signed in to. Before Leo runs a tool, it asks your permission, unless you've already allowed that tool.

What are Website Tools?

Website Tools are built on WebMCP, an emerging web standard. WebMCP lets websites describe actions that an AI assistant can perform on the site. Each tool has a name and a short description written by the website, such as "search_messages: Search your messages for a keyword".

Brave may also provide tools for some popular sites that don't offer their own. These tools are delivered to your browser automatically and work just like tools that come from the site.

With Website Tools, you can ask Leo things like:

• "Search my inbox for emails about this weekend's soccer game"
• "Find the conversation where I talked to Clifton about the project launch"
• "Draft a reply to the last message from John with the game details"
• "What's the status of my most recent order?"

What you can do depends on which tools a site offers. Leo only uses the tools a site makes available. It can't take other actions on that site through Website Tools.

How is this different from AI browsing?

AI browsing gives Leo general control of a browser window. Leo can visit any page, click, and type. To keep you safe, it runs in a separate, isolated profile where you aren't signed in to your usual sites.

Website Tools is more focused:

Requirements

• Platform: Desktop (Windows, macOS, Linux)
• Browser version: Brave 1.96x or Higher
• Feature flag: WebMCP must be turned on in brave://flags (see below)
• AI model: a model that supports tools, such as Automatic. If you use your own model (BYOM), turn on Tool Support in that model's settings, but only if the model supports tool use.
• Website: the site must offer tools (or Brave must provide tools for it), and it must be a secure (https://) page

Security & Privacy

What gets shared, and with whom

When Leo uses a website tool, it sends information to the website so the tool can run. For example, it might send a search term, a message to draft, or an email address. That information can come from anything in your conversation. The website then sends its results back to Leo, and Leo uses them to answer you.

Leo exercises its judgment to determine what information is relevant to the site but it is AI and can make mistakes, so exercise judgement when considering whether to allow website tools, particularly with conversations containing sensitive information, including those attached to other sites that contain sensitive information

Leo shows this reminder next to every site that has tools:

These sites expose tools that Leo can use to send data to and from this site. Do not attach or approve these tools if this conversation contains data that you don't want this site to see.

How Brave protects you

• You choose the sites: Leo can only use tools from tabs that are attached to your conversation. You can remove a site's tools at any time.
• Permission before each action: by default, Leo asks before every tool use. The prompt shows which tool it wants to run, on which site, and what information it's about to send.
• Per-tool controls: you can allow, always ask for, or block each tool on its own.
• Limited to the page: a tool can only run on the page that provides it. It can't act on other tabs or other sites.
• Permissions don't stick around: your choices last only for the current conversation, while that site stays attached. They aren't saved for future conversations.
• Security checks: Brave checks tool requests against your original request to catch cases where Leo might have been misled, for example by malicious content on a web page. If a request looks suspicious, you'll see a Security warning explaining why. You have to approve it before Leo can continue.
• Standard Leo privacy: Website Tools follows Leo's usual privacy protections. Conversations are not logged, retained, or used for model training.
• Website tools run within the page: They are limited by the same set of security controls and permissions which keep you safe on the web.

Risks

There are risks to using website tools, especially when connecting tools from multiple sites - sensitive data from one attached site can leak to another one via WebMCP tools, so be careful attaching tools from multiple sites.

Additionally LLMs are heuristic, so be sure to check what the LLM is going to do before clicking the allow button on permission prompts.

How do I enable Website Tools?

1. Open Brave and enter brave://flags in the address bar
2. Search for #enable-webmcp-testing
3. Click the dropdown next to WebMCP for testing and select Enabled
4. Click Relaunch to restart Brave and apply the change

How do I use Website Tools?

1. Open a site that offers tools

Go to the site you want Leo to work with, and sign in if needed. For example, open the inbox for the account you want Leo to search.

2. Open Leo

Open Leo from the sidebar while you're on that tab. If the page offers tools, a Tools section appears above the message box. It shows a card for the site with:

• The site's icon and page title
• The number of tools available
• An X button to remove the tools from the conversation

To use tools from another open tab, type @ in the message box and pick that tab. Each site with tools gets its own card.

3. Review the available tools (optional)

Click the site's card to open Available website tools. You'll see every tool the site offers, with a description of what each one does. You can pick a setting for each tool:

• Ask every time (default): Leo asks your permission each time it wants to use the tool
• Allow for this session: Leo can use the tool without asking while the site is attached to this conversation
• Never allow: Leo won't see or use the tool. It stays in the list so you can change your mind later.

4. Ask Leo

Type your request as usual, for example: "Search my inbox for emails from the soccer coach this week and summarize them."

5. Approve tool use

When Leo wants to use a tool set to Ask every time, a Tool permission request appears in the conversation:

Brave AI would like to execute search_messages on https://mail.example.com

Click Show tool arguments to see exactly what Leo will send to the site. Then choose:

• Allow once: run the tool for this request only
• Allow for this session: run the tool now and don't ask again while this site is attached to the conversation
• Deny: don't run the tool. Leo stops trying to use tools for this request and replies with what it already has.

While a tool is running, you'll see it as a step in Leo's response. Leo then uses the site's results to answer you.

Managing Website Tools

• Remove a site's tools: click the X on the site's card. Leo can no longer use that site's tools in the conversation. To add them back, type @ and pick the tab again.
• Change a tool's setting: click the site's card and change the dropdown next to the tool. You can't change settings while Leo is responding.
• Moving to another page: if you navigate the attached tab to a different page, Leo uses the tools offered by the new page.
• Resetting permissions: once a site is no longer attached to the conversation, any Allow for this session choices for it are cleared. If you attach it again, Leo will ask again.

Common use cases

Email and messaging

• "Search my inbox for the flight confirmation for next week's trip"
• "Find the thread where we discussed the budget and summarize the decisions"
• "Draft a reply to Sarah saying I can make Thursday at 3pm"

Combining sites

• Attach your inbox and your team chat: "Find when this weekend's game is in my email, then draft a message to the team with the details"

Shopping and accounts

• "Check the delivery status of my latest order"
• "List the items in my cart and their prices"

With Skills

• Combine Website Tools with Skills for tasks you repeat. For example, a /inbox-digest Skill that asks Leo to search for unread messages from today and summarize them.

Known limitations

• Depends on the site: Leo can only do what a site's tools allow. Many sites don't offer tools yet.
• Tabs must be open: the site has to be open in a tab and attached to the conversation. Leo can't open a site for you to use its tools.
• Model support: Website Tools only works with models that support tools. With other models, the Tools section won't appear.
• Tool names in responses: while a tool runs, Leo may show it by a technical name that includes the site, such as web_example_com_search_messages.
• Secure pages only: tools are only available on https:// pages.
• Experimental: this feature is still in development, so tools may behave unexpectedly, and some sites may change or remove their tools at any time.

Troubleshooting

The Tools section doesn't appear:

• Make sure you've enabled #enable-webmcp-testing in brave://flags and restarted Brave
• Check that your selected model supports tools (try Automatic)
• Make sure the page offers tools. Not every site does, and some only offer tools on certain pages, or after you sign in.
• Make sure the page is a secure https:// page
• If you removed the tools with the X button, type @ and pick the tab again

Leo isn't using a site's tools:

• Name the site and what you want, e.g. "Use my inbox to search for…"
• Open the site's card and check that the tool isn't set to Never allow
• Make sure the tab is still on the page that offers the tool

Leo keeps asking for permission:

• This is expected for tools set to Ask every time
• If you trust the site and the tool, choose Allow for this session

I'm concerned about what Leo is doing:

• Click Show tool arguments to see exactly what will be sent before you allow a tool
• Click Deny to stop Leo from running a tool, or remove the site's tools with the X button
• If you find a security issue, please report it to Brave's bug bounty program

For website owners

If you'd like your site to work with Leo's Website Tools, you can add tools to your site with the WebMCP standard:

• WebMCP specification
• WebMCP examples
• Chrome's WebMCP announcement

Help us improve Website Tools

Website Tools is in active development, and we'd love your feedback. As an open-source browser, we welcome bug reports and feature requests on GitHub.

Related Documentation

• How do I use Brave Leo?
• How do I use AI Browsing in Brave?
• How do I use Skills in Brave Leo?
• How to Use Multi Tab Context with Brave Leo?
• What are the differences between Leo's AI Models?
• How do I use the Bring Your Own Model (BYOM) with Brave Leo?