Is WriteMe.ai - AI powered writing assistant safe?

Medium risk

WriteMe.ai reads REACT_TOKEN_AUTH tokens from pages and sends them to apiv2.writeme.ai.

The extension runs a content script on all URLs and checks each page's localStorage for a REACT_TOKEN_AUTH token. When present, it saves that token in extension storage and sends it as a Bearer credential to apiv2.writeme.ai while loading the extension UI.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

turboanchorv2.1.0Chrome Web Store
40Risk
Who publishes it

Turbo Anchor OU - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
turboanchor
Declared legal entity
Turbo Anchor OU
Registered address
Viru Valjak 2, 3rd Floor, Tallin, Estonia 10111, EE
Registered contact
Muhammad Ali Khokhar

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.1.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Act on the current tab, but only after you click the extension

    activeTab

  • Store data in your browser

    storage

  • See the address and title of every tab you have open

    tabs

Where it sends data

Destinations our analysis observed WriteMe.ai - AI powered writing assistant contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • apiv2.writeme.ai

    WriteMe.ai - AI powered writing assistant sends data to apiv2.writeme.ai. No other extension we have analysed sends data here.

Updated 30 September 2026cekebjfebnajphajaemjhgjhpmdjepdo