when this is on, your theme, epic AI switch, search engine, file view and sort, video volume and pinned chats follow you to every device you sign in on. it's a choice for each device. your own AI provider keys never leave the device.
files
files you upload to oeper.dev/files are private by default: only you can open them, and a link you copy for one stops working after a while. you can make single files public from that page, or change the default here. uploads made without signing in, and files shared from the one suite, are always public links.
epic AI
lets epic AI work with the rest of the site. it's off by default — nothing below happens until you turn it on, and it only affects this browser (unless you sync settings across your devices, under appearance).
appsan AI assistant inside one — rewrite, summarize, draft and explain in your documents
attach_fileattach your one documents to a chat on epic AI, and save its answers as new documents
note_addask epic AI to write a document straight into oneWord
description
Google Docs and Sheets
sign in to connect
edit_documentepic AI can create Google Docs and Sheets, and read or add to ones you paste the link of. it can't browse the rest of your Drive. you can disconnect any time, here or at myaccount.google.com/permissions.
your own AI model
use your own model and key instead of the built-in one. chats go straight from this browser to the provider you pick, so oeper.dev never sees them or your key. it only affects this browser.
saved only in this browser, in plain text, like any site setting. use a key with a spending limit, and remove it on a shared computer.
the web search, memory and "write into oneWord" tools only work with the built-in model. a provider must allow requests from websites (CORS). OpenAI, Anthropic, OpenRouter and Gemini do. for Ollama, start it with OLLAMA_ORIGINS set to this site.
MCP tools
connect MCP servers so epic AI can use their tools, such as search, files or your own apps. this needs your own AI model above. servers must support Streamable HTTP and allow requests from websites (CORS). tool results are treated as data, and every call asks you first unless you allow a server.
sign-in is Google-only, so real session control (revoking a device, 2-step verification, connected apps) lives on Google's side. this is just a local log of browsers that have signed in recently, so you can spot one you don't recognize.
you can delete your own posts, comments, files and messages from the site. for everything else, ask us and we'll do it by hand, usually within 30 days. details are in the privacy policy.