Web app · Productivity
Tooltrail
A personal audit log of every tool your AI agents call
Which agent, which tool, what data flowed where — journalled by hand or parsed straight out of a pasted MCP log, then scored so you can see how far your data actually travelled. Free, offline, nothing leaves this browser.
Stored in your browser only. Nothing you do in the web version is sent to our servers. Clear your browser data and it's gone — so export a backup from the in-app menu if you want to keep it.
In your browser
What you can do in Tooltrail on the web
Journal any tool call
Agent, tool name, what flowed where, destination, date — plus a direction (read, search, write, execute, send, delete) and a data class (public through credentials).
Paste an MCP log and it parses
JSON objects, key=value traces and plain 'agent · tool — summary' lines all become dated entries, with the direction and data class guessed from the tool name.
Exposure scoring
Every call scores how far the data went times how much that data matters — 1 for reading something public, 25 for deleting credentials — banded low, watch, high, critical.
Per-agent accountability
See which agent racked up the most exposure, which tools it reached for, what data classes it touched and how much of it left your device.
Filters that matter
Unreviewed, left the device, high exposure, by agent, or free-text across tool, summary and destination.
Export the trail
Download the whole audit log as CSV — date, agent, tool, direction, class, destination and exposure — or a full JSON backup.
Screens
Every screen, rebuilt for the browser
-
1
Trail
Exposure over the last 30 days, a 14-day chart, the busiest agent and your latest calls.
-
2
Audit log
Every call grouped by day with per-day exposure, searchable and filtered by agent, review state or exposure.
-
3
Tool call detail
One call: the exposure maths behind its score, what happened, where it went, and other calls to the same tool.
-
4
Log a tool call
Agent, tool, summary, direction, data class, destination and date — with the direction and class guessed as you type the tool name.
-
5
Paste a log
Paste raw MCP tool-call lines, preview what was parsed, drop what you don't want, then journal the rest.
-
6
Agents
Exposure by agent with a chart and a bar per agent showing its share of the trail.
-
7
Agent detail
One agent's exposure, off-device calls, data classes as a donut, tools it reached for and everything it did.
-
8
Tools
Every distinct tool journalled, ranked by use, with total exposure and how many agents called it.
-
9
Insights
Weekly exposure, data classes as a donut, what the agents actually did, where data went and how scoring works.
-
10
Settings
Home window, journalling defaults, CSV and JSON export, sample data and erase.
Try it with sample data: Loads four weeks of agent tool calls — 21 entries across Claude, ChatGPT, Gemini, Perplexity, Copilot, a Custom GPT and a local agent, including a keychain read, a Slack post with customer names and a maps route that put your home address on the wire. You can start fresh at any time.
Ready? It's free.
Sign in once and every All Things AI web app opens instantly. No install, no subscription, no data leaving your browser.
Your say
Is Tooltrail useful? Tell us what to build next.
Sign in to vote.
Tell us what to build next.
Sign in to leave a comment or vote — it takes a few seconds.
Sign in to commentNo comments yet — be the first to say what this app should do next.
Questions
Is the web version of Tooltrail free?+
Yes. Sign in with a free All Things AI account and use every screen — no subscription, no in-app purchases.
Where is my data stored?+
Only in this browser's local storage. Nothing you enter is sent to our servers, so we can't see it, back it up, or restore it. Clearing site data, a private window, or another device starts empty. Export a backup from the in-app menu to keep it.
Do I need an account?+
You can read about the app without one, but you must sign in to open it. Sign-in is free and takes a few seconds with Google.
How is the web version different from the Tooltrail iPhone app?+
Nothing hooks into your agents: this is a journal you fill in or paste into, not a live interceptor. MCP has no consumer audit hook to subscribe to yet. The parser guesses direction and data class from the tool name and text — always worth correcting on the entry screen. Exposure scoring is Tooltrail's own heuristic (how far the data went × how sensitive it was), not an industry standard. The iPhone app keeps the same log on-device; the web version keeps it in this browser only, so the two do not sync.