Security

Local assistance first. Scoped AI quick fixes when you ask.

How myFunction separates local editor assistance from project access, how it protects authorization tokens, and what it can do with your projects.

Updated October 14, 2026

In the editor

Language assistance

Completions, diagnostics, hover information, signature help, navigation, and deterministic quick fixes are produced locally by the extension against editor models. Diagnostics run continuously for free without an account.

No Apps Script API scope

Scoped AST snippets

myFunction never requests Google Apps Script project access scopes. When you trigger an AI quick fix, only the enclosing code scope and diagnostic details are transmitted to generate the fix.

Review-first

Inline diff previews

AI quick fixes present a side-by-side or inline diff for your review. The code in the editor changes only when you click Apply.

Session data

Account and subscription records.

Account identity: Google OAuth uses standard identity scopes (openid, email, profile) to manage your account and verify active subscriptions for Pro features.
Feature-use counts: The extension keeps feature counters locally and sends unsent counts, the extension version, and a random install ID, signed in or not. Signed-in batches also carry a keyed hash of the account identifier. The Worker forwards them to Google Analytics; no project, file, source code, or email address is included.
Permanent project copy: myFunction does not keep an account-level copy of your Apps Script projects.

Limits

Capabilities the product does not have.

Capability	Boundary
Runs Apps Script functions	No. Running stays in the Apps Script editor.
Creates versions or deployments	No. Published behavior changes only when you change it.
Uses a shell or terminal	No. It has no command-execution tool.
Browses your filesystem	No. It works only with the open code in the editor.
Directly mutates project files	No. Quick fixes apply only after you review and choose them.

More detail

Read the permission-by-permission explanation.

The privacy policy remains the legal statement. Report security concerns to support@myfunction.dev.

View permissions Privacy policy