Resources

Emerging agent interfaces

WebMCP turns page actions into explicit tool contracts.

The proposed browser standard can expose structured tools in visible page context. Treat it as progressive enhancement, with the same product and security discipline as any write-capable interface.

Aiscovery Research8 min readLast reviewed: August 25, 2026

What this helps you evaluate

  • Where WebMCP fits beside the visual interface, APIs and remote MCP
  • Which tool-contract and security properties an audit should inspect
  • Why deterministic tests and model evals are both necessary

What WebMCP is

Chrome describes WebMCP as a proposed web standard for exposing structured tools to AI agents. A page can register imperative JavaScript tools or annotate HTML forms declaratively. The browser presents tool names, descriptions and JSON schemas within the current page context.

This differs from pure actuation, where an agent interprets each visual or DOM step and simulates input. It also differs from a remote MCP server because the tool is discovered and executed in a visible browser context tied to the current origin and page state.

Label the maturity correctly

As of this review, Chrome documents WebMCP as proposed and experimental, with origin-trial requirements. Client support and APIs can change. Its absence should not automatically fail a website that offers a reliable accessible UI or safe API path.

Use WebMCP where an explicit contract materially reduces ambiguity, such as complex filters, support routing or date selection. Do not expose a tool merely to increase an inventory count.

Design the tool as a product contract

A useful tool has a precise name, purpose, input schema, structured result and predictable error model. The contract should distinguish read-only operations from actions that create, modify or delete state.

  • Use narrow descriptions that help an agent choose the right tool.
  • Validate inputs on both the tool boundary and the underlying server API.
  • Return structured errors with a safe recovery path.
  • Make retry behavior idempotent for state-changing operations.
  • Require explicit human confirmation before irreversible actions.

Permissions and evals are part of readiness

Chrome documents origin isolation and a tools Permissions Policy for WebMCP. Those platform gates are only the start. The application must still enforce authentication, authorization, tenancy, rate limits and business constraints below the browser layer.

Use deterministic tests for schema validation, business rules and final states. Add model evals for whether agents choose the correct tool, supply acceptable parameters and interpret the result. Record failures separately for the site, tool, model, policy and infrastructure.

WebMCP checks for an agent-readiness audit

  • Detect imperative and declarative tools and record browser support context.
  • Validate names, descriptions, JSON schemas and structured outputs.
  • Map every tool to an equivalent user-visible goal and final-state assertion.
  • Verify auth, permission, confirmation, rate-limit and idempotency boundaries.
  • Run tool-selection evals plus deterministic execution tests.

Primary sources

Test the signal in a real journey.

Technical presence matters only when it improves a verified outcome. Connect the signal to a task, evidence and final-state assertion.