Back to Devoured - July 23, 2026
DEVOURED
The State of WebMCP

The State of WebMCP

Tech Spronta
WebMCP is a promising web standard that allows AI agents to call site functions, but it currently lacks mainstream adoption and active users.
What: WebMCP lets sites register typed JavaScript tools so AI agents can execute actions directly rather than scraping the DOM. The API recently shifted from `navigator.modelContext` to `document.modelContext`, and Chrome 150 has deprecated the former.
Why it matters: Google and Microsoft are attempting to standardize how browsers interact with AI to avoid the brittleness of screen-scraping or computer vision, but the ecosystem is currently in a 'waiting period' for mainstream agents to implement the protocol.
Takeaway: Add a `document.modelContext` fallback to your implementation if you are experimenting with WebMCP today, as the spec is still in active flux.
Deep dive
  • API Instability: The recent move of the registration API indicates the standard is still early and carries significant migration debt for early adopters.
  • Functional Goal: WebMCP replaces fragile DOM-parsing with explicitly defined tools that expose clear JSON schemas to AI models.
  • Security: Tools execute with the user's session state, meaning they require strict authorization and confirmation mechanisms to prevent unauthorized actions.
  • Declarative Future: The spec is moving toward form-annotation attributes, which will allow agents to fill forms without requiring custom JavaScript.
  • Adoption Status: No mainstream agents (Claude, ChatGPT, Perplexity) currently consume WebMCP tools; Google Gemini in Chrome is expected to be the first.
Decoder
  • DOM (Document Object Model): The tree-like structure of a web page that browsers use to render content; agents traditionally 'scrape' this to extract data.
  • Origin Trial: A feature that developers can enable on their production sites to test a browser capability before it is released to the general public.
Original article

The State of WebMCP: July 2026

WebMCP in July 2026 is a standard with everything except users. The spec has Google and Microsoft engineers as editors, a live origin trial in Chrome, a Lighthouse audit category waiting for it, and a draft the editors updated two days ago. It also has close to zero deployment on real websites, and not one mainstream AI agent that calls the tools.

The short version

  1. WebMCP lets a web page register typed JavaScript functions that browser AI agents can call, instead of forcing agents to scrape the DOM or click around with computer vision.
  2. The spec is a W3C Community Group draft co-edited by Google and Microsoft. It isn’t on the standards track yet.
  3. Chrome is running a public origin trial from Chrome 149 through 156. Edge ships support behind a flag. Firefox and Safari are watching.
  4. Site adoption is close to zero, and no mainstream agent consumes the tools yet. Google says Gemini in Chrome will be the first.
  5. The API moved from navigator.modelContext to document.modelContext in the 21 July spec draft, and Chrome 150 deprecates the old location. Early adopters already carry migration debt.
  6. Lighthouse gained agentic-browsing audits in May. They sit at “Not Applicable” on most sites today, which is why the next twelve months are the window.

What WebMCP is

An AI agent that wants to book a table on your site today has two options. It can parse your DOM and guess which button does what, or it can take screenshots and click coordinates. Both are slow, brittle and expensive, and both break the day you ship a redesign.

WebMCP gives the page a third option: tell the agent what it can do. A site registers tools in JavaScript, each with a name, a natural-language description and a JSON schema for inputs. The browser exposes those tools to whatever agent is driving, the agent calls them like functions, and your existing frontend code does the work.

const modelContext = document.modelContext ?? navigator.modelContext;

await modelContext.registerTool({
  name: "search-products",
  description: "Search the product catalogue and return matching items",
  inputSchema: {
    type: "object",
    properties: {
      query: { type: "string", description: "Search phrase" },
      maxResults: { type: "number" }
    },
    required: ["query"]
  },
  execute: async ({ query, maxResults = 10 }) => {
    const results = await searchCatalogue(query, maxResults);
    return { content: [{ type: "text", text: JSON.stringify(results) }] };
  }
});

You’ll need that feature-detection line at the top. The spec moved the API from navigator to document to reflect that tools belong to a specific page, and Chrome deprecated navigator.modelContext in Chrome 150 while the origin trial still ships it. Framework maintainers are mid-migration; Angular has an open issue tracking the move. If you’re implementing this month, you’re writing the fallback.

Three design decisions matter more than the syntax:

  • The browser is the middleman. The page never speaks MCP directly. As Microsoft’s Patrick Brosset clarified, WebMCP borrows only MCP’s tool primitives; the browser handles protocol and transport.
  • Tools run in the page, as the user. An agent calling your tools inherits the logged-in session, which is what makes them useful and what makes them dangerous.
  • A declarative variant is coming for forms. The explainer describes HTML attributes that annotate existing forms so agents can fill them without custom JavaScript. The spec section for it is still marked TODO, but Lighthouse already audits the attributes, which tells you where Google expects this to land.

How we got here

WebMCP has two parents. The scrappy one is MCP-B, Alex Nahas’s 2025 open-source project that put MCP servers inside the browser tab and proved sites could expose tools to extensions. The institutional one arrived on 28 August 2025, when Patrick Brosset proposed WebMCP from the Microsoft Edge team, and Google joined as co-author shortly after.

Supply and demand, out of sync

A protocol needs two sides. Sites must register tools, and agents must call them. In July 2026 the supply side is warming up while the demand side hasn’t arrived.

Browsers are ahead. Chrome’s origin trial means any site can register a token and expose tools on production traffic today. Edge’s support sits behind a flag, and Microsoft co-authoring the spec makes deeper Edge integration a matter of when. Firefox and Safari sit in the discussion threads without commitments, which matters less than it sounds while the consuming agents are all Chromium-adjacent anyway.

Agents are behind. As of the most recent independent audit in May, no mainstream agent client calls modelContext tools. Claude, ChatGPT Agent, Perplexity and Gemini all still read pages the old way. Google says Gemini in Chrome will consume WebMCP tools, and when it ships it’ll be the first mainstream consumer and the reference implementation for everyone else.

Compare the server-side protocol it borrows from. MCP proper is thriving: roughly 97 million monthly SDK downloads, thousands of servers, and a specification release candidate due 28 July. Buyers already pay for agent-to-tool infrastructure at scale; the browser leg is the part still waiting for proof.

Adoption, measured honestly

No vendor or analyst publishes a measured adoption number, so writers reach for “approximately zero” and they’re right. What exists today:

  • Named pilots. At I/O, Google listed Expedia, Booking.com, Shopify, Credit Karma, TurboTax, Redfin, Etsy, Instacart and Target as origin-trial participants.
  • A checker cottage industry. webmcp-checker.com launched within days of the Chrome 146 preview, a 19-point validator extension followed in March, and at least three more single-page checkers ship the same audit.
  • Serious libraries, thin platforms. The WebMCP-org npm packages descend from the MCP-B work and are maintained. React hooks from MCPCat track the spec.
  • Our own crawls agree. We’re wiring WebMCP detection into Spronta’s rendered crawls, and across the sites we’ve checked so far, registered tools round to zero outside demos and the checker sites themselves.

Lighthouse is the quiet forcing function

Since May, Lighthouse ships an agentic-browsing category with three WebMCP audits, and most SEO teams haven’t noticed.

Audit What it checks
webmcp-registered-tools Inventory of tools the page exposes
webmcp-form-coverage Forms missing declarative tool attributes
webmcp-schema-validity Malformed tool schemas and unnamed inputs

Security is the sleeper issue

WebMCP tools execute in the page with the user’s session. The spec gates access behind a permissions policy and secure contexts, added requestUserInteraction() so tools can force a human confirmation, and Chrome publishes tool security guidance. Those gates cover the browser’s side of the problem, and none of them stops a deceived model from calling a legitimate tool.

What you should do about it

Think in three layers. Agent readiness is a stack, and WebMCP is only the top of it. The base is readable: clean markup, working llms.txt, content that survives without JavaScript. The middle is queryable: structured data an agent can fetch without parsing your marketing pages. The top is actionable: WebMCP tools for search, forms and transactions.

If agent traffic already converts for you, join the origin trial now. Ship one or two tools where structure beats scraping by the widest margin: site search, availability lookups, a lead form. Write the document.modelContext fallback, keep schemas boring, and put a human confirmation on anything that spends money.

If you run a normal B2B marketing site, you’ve got a year of runway and no reason to waste it rebuilding. Spend it on the boring layers: fix what blocks agents today, annotate your forms when the declarative spec lands, and re-run Lighthouse each Chrome release so the audit flip never surprises you.

Frequently asked questions

What is WebMCP?

WebMCP (Web Model Context Protocol) is a proposed web standard that lets a page register typed JavaScript tools which browser AI agents can call directly, instead of scraping the DOM or driving the page with computer vision. A site describes each tool with a name, a natural-language description and a JSON schema, and the browser exposes those tools to the agent.

Is WebMCP a W3C standard?

No. WebMCP is a Draft Community Group Report from the W3C Web Machine Learning Community Group, edited by engineers from Google and Microsoft. It isn't on the W3C standards track, and the API surface is still changing between drafts.

Which browsers support WebMCP in July 2026?

Chrome runs a public origin trial from Chrome 149 to Chrome 156, so sites can test WebMCP on production traffic. Edge ships experimental support behind a flag. Firefox and Safari participate in spec discussions but haven't committed to implementation.

Do any AI agents use WebMCP today?

No mainstream agent calls WebMCP tools yet. Claude, ChatGPT Agent, Perplexity and Gemini still read pages through the DOM or screenshots. Google says Gemini in Chrome will consume WebMCP tools, which would make it the first mainstream client.

What is the difference between WebMCP and MCP?

MCP is a client-server protocol for connecting AI applications to external tools, and it's widely adopted. WebMCP borrows MCP's tool primitives but runs inside the browser: the page registers tools in JavaScript and the browser handles protocol and transport. A site can offer both a hosted MCP server for headless agents and WebMCP tools for agents that browse.

Should I add WebMCP to my website now?

Measure before you build. Join the origin trial if agent traffic already matters to your business, start with one or two high-value tools such as search or a lead form, and treat every tool as a security boundary. For most sites the near-term win is making content readable and queryable for agents, then adding WebMCP tools as consuming agents ship.

Explore all 56 articles in today's digest

Fresh dev news, AI-digested daily. Never miss a trend at devoured.fyi