WebMCP Connects AI Agents To Actions Inside Websites via @sejournal, @MattGSouthern
All Paid Media PPC News Social MediaAdvertising Video Advertising Columns Ask A PPC ExpertNEW PPC Pulse Webinar ChatGPT Ads Or GEO: What To Buy, What To Earn Audit where ChatGPT places your brand, then get the rule for when Ads win, when GEO wins, and when running both beats either one. Digital Marketing All Digital Marketing Analytics & Data Ecommerce Lead Generation Content Marketing Social Platforms Google YouTube Reddit LinkedIn TikTokNEW WordPress Other CMS Platforms Webinar ChatGPT Ads Or GEO: What To Buy, What To Earn Audit where ChatGPT places your brand, then get the rule for when Ads win, when GEO wins, and when running both beats either one. SEJ Live Webinars Rundowns PodcastNEW Ebooks All Resources Webinar Where AI Gets Its Answers In Your Industry Google rankings don't show which sources AI cites. Get the breakdown by engine and industry, plus the steps to earn a place in it. SEJ STAFF Matt G. Southern 3 seconds ago ⋅ 9 min read SEJ STAFF Matt G. Southern Senior News Writer at Search Engine Journal Bio Follow In May, Google shared guidance for making websites usable by both AI agents and people. WebMCP was one of several technologies Google pointed to, though it still looked like a browser experiment. Now, in August, we have more concrete updates. Shopify said WebMCP tools were live on every Liquid storefront. The very next day, Cloudflare introduced a developer preview that adds a WebMCP bridge right at the network edge. On Aug. 25, OpenAI added Site tools to ChatGPT’s built-in desktop browser. For eligible users, ChatGPT Work and Codex can discover and use tools provided by the current page. Ilya Grigorik, a Distinguished Engineer at Shopify, explained that ChatGPT’s browser can use site-provided tools on Shopify storefronts to browse merchant catalogs and assemble shopping carts. While this doesn’t mean it’s being used everywhere just yet, it does create a useful link between sites that offer tools and an AI system that can actually use them. One of the key points to consider is control. WebMCP gives a website the ability to guide an agent’s behavior, but the current implementations also involve commerce platforms, infrastructure providers, and agent companies. The site owner may not be the only party shaping that interface. Chrome announced an early WebMCP preview on Feb. 10 and opened a Chrome 149 origin trial on June 9. The proposal already had a draft specification, demos, and browser testing, but it still lacked a platform-wide site deployment and an agent client people could use. Shopify supplied the sites, OpenAI supplied the client, and Cloudflare showed how an infrastructure provider can add the interface without changing code at the site’s origin. Additionally, OpenAI kicked off a 10-day WebMCP Challenge with support from Google Chrome, Shopify, Cloudflare, Netlify, Vercel, and Render. While this doesn’t mean widespread adoption yet, it shows that several companies are exploring this idea. Browser agents usually work with interfaces made for people. They look at a screenshot or page layout, understand what each control does, and then imitate clicks and typing just like a user would. However, each step in that process can be prone to little mishaps. For example, a button label might change, an unexpected pop-up could show up, or a custom date picker might appear, all of which can momentarily disrupt the flow. WebMCP gives the page another route. A website can register a named tool with the browser, along with a description and structured input schema. An agent can discover the tool, send the required details, and receive structured data. Chrome’s comparison between WebMCP and MCP describes the relationship as follows: “Instead of your application being a guest within an agent, the agent is a guest on your platform.” ChatGPT might rely on standard browser functions if a page doesn’t have a suitable Site tool. Shopify provides 10 WebMCP tools on every Liquid storefront, and they are also available on storefronts using its Hydrogen developer preview. Shopify’s proceed_to_checkout tool takes the shopper to checkout with the current cart, but it doesn’t complete the purchase. All interactions happen within the customer’s active tab. Any updates to the cart are immediately reflected, and navigation will take the customer to the page the agent has chosen. Shopify explains that the agent chooses the right tool based on what the customer requests. This creates a second layer of control. WebMCP lets a website declare its available actions, but Shopify selected the initial actions and descriptions across its platform. While this setup can make things easier for merchants, it also means that the agent-facing version of a hosted storefront might start with default settings set by the platform, rather than personalized preferences from each merchant. Shopify’s published WebMCP documentation does not address whether merchants can turn off individual tools or edit their descriptions. Cloudflare’s developer preview makes it easy for websites to turn on WebMCP right from the Cloudflare dashboard, without needing to change their site’s original code. Once it’s activated, Cloudflare adds one line to each HTML response at the edge, referencing a same-origin bridge script. The bridge checks for browser support and registers the selected tool packs. In the current preview, the tools run inside the visitor’s browser rather than on Cloudflare’s servers. Shopify installs a uniform set of tools across hosted stores, while Cloudflare provides a bridge without modifying the original code. In both cases, the agent-facing layer comes partly from a company between the site owner and the agent. The current WebMCP documentation describes an in-browser interaction layer, not a ranking, indexing, or citation feature. The tools become available after a compatible agent opens the page, while existing discovery systems determine how the agent or user reaches the site. This makes WebMCP a bit different from many AI search discussions, because a site can be friendly to agents without necessarily being easier for users to find. WebMCP is designed for a different purpose than MCP; for instance, a remote MCP server can offer tools even without an open webpage, whereas WebMCP tools are temporary and tied to the current tab. These systems can work well together: a user might find a merchant through a search, visit its site, and then allow an agent to use the available tools. For SEO professionals, it’s helpful to keep in mind that WebMCP is mainly relevant once a user or agent has reached the site. It focuses on what can be done afterward, rather than on the page’s ranking or citations. Chrome highlights two main risks: malicious tool definitions that hide instructions in their name, parameters, or description, and responses that can return contaminated content, including embedded instructions from third-party data. Even without WebMCP, Chrome’s security guidance acknowledges these risks. While the protocol offers a structured way for agents to interact with tools, it can’t prevent prompt-injection issues that are inherent to the web. OpenAI views website-provided tool definitions and results as untrusted. Every Site tool call goes through a safety review, with standard rules applied to purchases, messages, deletions, and permission changes. Users also have the option to turn off Site tools in ChatGPT’s browser settings. While these checks are helpful in reducing risks, they don’t guarantee that a website or its output is completely trustworthy. SEJ has already highlighted Chrome’s warning that WebMCP tools could manipulate agents. The new controls introduced by OpenAI add an extra layer of protection, but they don’t promise to fully solve the issue. The W3C Web Machine Learning Community Group has published the WebMCP specification. It is not a W3C Standard and is not on the W3C Standards Track. OpenAI documents WebMCP support through Site tools in ChatGPT’s desktop app. The WebMCP implementation tracker lists origin trials for Chrome 149 and Edge 150, along with experimental support through Brave Leo. According to Benjamin VanderSloot on Github, Mozilla’s standards position is neutral and according to Mike Wyrzykowski on Github, WebKit opposes the proposal and lists concerns involving API design, duplication, internationalization, portability, privacy, security, use cases, and venue. The implementation tracker does not list WebMCP support for Firefox or Safari. The majority of existing support is focused on Chromium-based browsers and the OpenAI desktop application. OpenAI’s Site tools require the latest ChatGPT desktop app, ChatGPT Work or Codex, and GPT-5.6 Sol or Terra. They’re unavailable with GPT-5.6 Luna and in Enterprise or Edu workspaces. Availability also depends on rollout and the tools provided by the current page. Shopify’s tools require a compatible WebMCP agent and browser environment. OpenAI and Chrome highlight WebMCP as faster and more reliable than simulated browser actions. However, the official materials reviewed for this draft don’t include specific performance comparisons. Neither the OpenAI nor the Shopify sources provide figures for site tool calls, completed tasks, error rates, checkout starts, purchases, or changes in conversion rates. They also don’t clarify what merchants can see in their analytics or how agent-assisted sales are attributed. Cloudflare Radar tracks detected WebMCP adoption across successfully scanned domains. It doesn’t measure tool calls, completed tasks, or business outcomes.
Source: Search Engine Journal
This article has been carefully curated and reformatted for educational and informational purposes. Full credit goes to the original publisher.
📚 Visit more helpful articles on Joab Peters Blog
No comments