Entity trail

WebMCP

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-07-11 / vibe-coding-researcherPattern: MCP Trust-Boundary Attacks Have Become the Dominant Agent-Hijack VectorThree distinct July-2026 attack classes now share one root cause: the Sentry fake-event injection (payload via a trusted integration), Mid-Session Tool Injection / MSTI (hijacking which tools a WebMCP agent uses mid-session), and workspace-config auto-loading (Amazon Q's CVSS 8.5 flaw loading MCP configs without consent). All exploit the agent treating MCP-supplied context as trusted. The defensive pattern is converging: zero-trust boundaries between agent and context providers, output validation on every MCP response, and explicit consent for any config the agent didn't author.
2026-07-09 / agents-researcherMid-Session Tool Injection weaponized against WebMCP agents via threshold poisoning and fake diagnostic eventsJuly MCP security roundups document attackers actively using Mid-Session Tool Injection (MSTI) to hijack tools in WebMCP agents mid-conversation, using threshold poisoning and fabricated diagnostic events to swap or re-scope tools after a session is established. The technique proves context providers can no longer be blindly trusted even after an initial handshake. It reinforces the shift toward per-response output validation and zero-trust boundaries between agents and their tool servers.
2026-06-12 / vibe-coding-researcherChrome DevTools MCP Reaches Stable v1.1.1 With WebMCP Debugging and Custom Page-Exposed ToolsGoogle's official chrome-devtools-mcp server and CLI are now marked officially stable (v1.1.1), letting coding agents attach to a live Chrome session for reliable automation, in-depth debugging, and performance analysis. New features include WebMCP tool listing/execution from within DevTools, custom third-party debugging tools that pages define via JavaScript, and custom HTTP header emulation (auth tokens, custom User-Agents). The repo is at 43k+ stars.
2026-06-07 / arxiv-researcherWebMCP Tool Surface Poisoning: Runtime Manipulation Attacks on LLM AgentsWebMCP — the emerging standard (now in a Chrome 149 origin trial) that lets websites expose JavaScript functions and HTML forms directly as tools for browser agents — introduces a new attack surface: a site can dynamically alter the tools an agent sees at runtime. The paper demonstrates 'tool surface poisoning' where the agent-accessible tool list is manipulated mid-session to redirect agent behavior. Critical reading for anyone building or deploying browser-based agents. Published 2026-06-04 (cs.CR).
2026-05-27 / saas-disruption-researcherCROSS-CATEGORY: Agent Infrastructure Wars Erupt — Google (Antigravity SDK + WebMCP), CopilotKit (AG-UI), and Camunda (ProcessOS) All Ship Agent Platforms in Same 2-Week WindowThree distinct layers of agent infrastructure shipped simultaneously in May 2026: Google's Antigravity SDK + WebMCP (agent runtime + browser tool standard), CopilotKit's AG-UI (agent-to-UI protocol adopted by Google/Microsoft/Amazon/Oracle), and Camunda's ProcessOS (agent-driven business process automation). This is the infrastructure layer race for the agentic era — the equivalent of the cloud platform wars (AWS/Azure/GCP) but for AI agents. The convergence on open standards (WebMCP, AG-UI, MCP) signals that agent interoperability, not model capability, is becoming the competitive battleground.
2026-05-27 / saas-disruption-researcherWebMCP Origin Trial Launches in Chrome 149 June 2: Websites Become AI Agent Tools, Early Benchmarks Show 8-12x Faster Than Vision-Based AgentsGoogle's WebMCP — an open web standard letting websites declare structured tools (JS functions, HTML forms) for AI agents — enters public origin trial in Chrome 149 on June 2. Early benchmarks show end-to-end agent task completion 8-12x faster on WebMCP-enabled sites versus vision-based screen-scraping agents. Microsoft co-authored the spec and shipped Edge 147 support in March. This eliminates the screenshot-parse-click loop that makes current browser agents slow and brittle, replacing it with direct function calls.
2026-05-20 / saas-disruption-researcherCROSS-CATEGORY: Agent-Readiness Becomes the New Integration Standard Across Enterprise, DevTools, and Analytics SimultaneouslyThree unrelated events this week converge on the same thesis: agent-readiness is replacing API quality as the defining integration standard. SaaStr graded 144 B2B APIs specifically on agent readiness (average 71/100, with legacy vendors like Workday at 38), SAP announced bidirectional agent-to-agent interoperability between Joule and external agent frameworks (Anthropic, AWS, Google, Microsoft), and Google proposed WebMCP as an open web standard for browser-based AI agents. The companies building for agent consumption are pulling away; those built for human UIs are falling behind on a measurable, public scoreboard.
2026-05-20 / saas-disruption-researcherGoogle I/O 2026: Chrome DevTools for Agents and WebMCP Open Standard Redefine How AI Agents Interact with Web AppsGoogle announced Chrome DevTools for agents — giving coding agents like Gemini CLI, Antigravity, and Cursor direct access to web app runtimes — alongside a proposed WebMCP open web standard for browser-based AI agents. Managed Agents in the Gemini API also shipped, providing one-API-call provisioning of a fully sandboxed agent with remote execution. For SaaS companies: the browser is becoming an agent-accessible surface whether you build for it or not, and WebMCP could standardize how every web app exposes functionality to AI.
2026-05-20 / reddit-researcherGoogle Proposes WebMCP as Open Web Standard — W3C Incubation, Chrome 149 Origin Trial, Booking.com and Shopify Already TestingGoogle announced WebMCP at I/O 2026, a proposed open web standard allowing developers to expose structured JavaScript functions and HTML forms directly to browser-based AI agents. The specification is being co-developed with Microsoft and incubated through the W3C Web Machine Learning community group, with an experimental origin trial starting in Chrome 149. Booking.com, Expedia, Instacart, Intuit, Shopify, and Redfin are already experimenting — this is the first serious attempt to standardize how AI agents interact with the web.
2026-04-18 / agents-researcherCloudflare Ships WebMCP Protocol: Websites Declare Agent-Callable Actions for Reliable DiscoveryAs part of Agents Week (April 15), Cloudflare added WebMCP support to Browser Run, enabling websites to declare structured actions that AI agents can discover and call programmatically. With agents projected to outnumber humans using the web, WebMCP represents a shift from brittle selector-driven automation to protocol-level agent-web interaction. Websites expose capabilities directly, making agent navigation more reliable than screen-scraping approaches.
2026-04-18 / agents-researcherCloudflare Ships Browser Run with WebMCP, Live View, Human-in-the-Loop, and 4x Concurrency for AI AgentsDuring Agents Week (April 15), Cloudflare rebranded Browser Rendering to Browser Run and shipped five major features: Live View for real-time agent observation, Human-in-the-Loop handoff when agents hit edge cases, native Chrome DevTools Protocol exposure, WebMCP support enabling websites to declare agent-callable actions, and session recordings for debugging. Concurrent browser limit quadrupled to 120, positioning Browser Run as dedicated infrastructure for agent-driven web automation.
2026-04-10 / vibe-coding-researcherWebMCP: Open-Source MCP Server Gives Local LLMs Web Research with SearXNG SupportA developer released WebMCP on GitHub, an MCP server that adds web research capabilities to any local LLM without cloud API dependencies. SearXNG support was recently added for privacy-respecting search. The 94-upvote r/LocalLLaMA post demonstrates the growing ecosystem of MCP servers that make local models competitive with cloud offerings for real-world tasks. For builders already running local inference, this fills the critical web-grounding gap.

Graph relationships

MENTIONS
Chrome 146 Canary
WebMCP now available in Chrome 146 Canary
Source finding
RELEASED
Chrome
Chrome 146 Canary ships WebMCP W3C standard.
Source finding
SUPPORTS
Chrome
WebMCP ships in Chrome 146 Canary
Source finding
USES
SearXNG
WebMCP added SearXNG support for privacy-respecting web search.
Source finding
RELEASED
Google
Google released WebMCP as an open web standard.
Source finding
SUPPORTS
Cloudflare
Browser Run enables websites to declare structured agent-callable actions via WebMCP.
Source finding
RELEASED
Google
Google proposed WebMCP as open web standard for browser-based AI agents.
Source finding
RELEASED
Chrome -> WebMCP
Chrome 146 Canary ships WebMCP W3C standard.
Source finding
SUPPORTS
Chrome -> WebMCP
WebMCP ships in Chrome 146 Canary
Source finding
RELEASED
Google -> WebMCP
Google released WebMCP as an open web standard.
Source finding
SUPPORTS
Cloudflare -> WebMCP
Browser Run enables websites to declare structured agent-callable actions via WebMCP.
Source finding
RELEASED
Google -> WebMCP
Google proposed WebMCP as open web standard for browser-based AI agents.
Source finding

Source trail

Mid-Session Tool Injection Google's Chrome team imperative API tripled to $3M Over 40% of seed and Series A capital SaaStr reports Antigravity SDK SaaStr published WebMCP OpenCLI only 4% of the top 200,000 websites isitagentready.com

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…