Comes in from outside
Things Lolly did not make
- A tool from the cataloguemanifest, template, hooks34
- A tool inside a .lolly fileinstalled only after you agree5
- A link or QR codeplain, packed or private67
- A file someone sentimages, PDFs, decks, fonts9
- Translation strings13
- A request to the extensionapproved one at a time14
- An AI agent you connecton this computer or invited1721
Your device
Where each one is checked
- The pagethe app, signed built-in tools, templates11018
- A strict workerinstalled and remote tools, stopped on overrun12
- The enginefile parsers, signing, encryption911
- Offline cache and storageservice worker buckets, saved work12
- Network rulestool allowlists and the page's policy815
- Desktop app featuresfiles, sign-in windows, remote requests16
Optional servers
Only what you send them
- MCP endpointagent rendering and render links22
- Page capture on a server19
- Image proxyAdd from URL in the web app20
- Agent relayinvitations to one document21
- Certificate serviceverified signing identity23
- Lolly Work instanceyour organisation's shared work24
1A number is a card on this pageRendering in the app stays on the device