Before You Add WebMCP: the Security Problem Nobody's Selling You
WebMCP lets a web page hand tools to AI agents, and most coverage sells it as your website becoming an API. The spec, WebKit, and even ChatGPT say something the pitch leaves out: an agent cannot verify what a page tool does, and it runs with your users logged-in session. I shipped both sides of WebMCP on Agentailor, red-teamed them, and deleted one. Here is what that taught me.
WebMCP• 17 min read