Specification feature · interfaces
WebMCP security annotationsWebMCP draft 2026-08-26
Communicate read-only and untrusted-content hints across the site-to-agent boundary.
Terminology basis: WebMCP draft 2026-08-26. WebMCP draft 2026-08-26
WebMCP security annotations: 1 supported, 0 partial, 0 unsupported, 30 unreviewed across 31 cataloged products.
Current evidence by product
Can my agent use WebMCP security annotations?
Read across for the answer. 1 of 31 current product columns have reviewed evidence; unreviewed does not mean unsupported.
Web
9 productsDesktop
13 productsCLI
9 productsDefinition and scope
What this capability means
Communicate read-only and untrusted-content hints across the site-to-agent boundary.
WebMCP is a draft Community Group Report, not a W3C Standard. Positive implementation cells must retain origin-trial, version, permissions, and agent-integration qualifiers.
Traceable compatibility
Assertion ledger
Documentation evidence only. No runtime conformance test is implied.
- Target
- Chrome 153 WebMCP origin-trial documentation · dated-documentation
- Environment
- preview-enabled
- Observed
- 2026-08-28
- origin-trialWebMCP is an experimental origin trial and local testing requires the enable-webmcp-testing flag
- policyannotations are advisory hints to the consuming agent; they do not by themselves enforce read-only behavior or sanitize untrusted output
- WebMCP Draft Community Group Reportdocumented · reviewed 2026-08-28
- Chrome for Developers — WebMCP Imperative APIdocumented · reviewed 2026-08-28
- Chrome for Developers — WebMCP tool securitydocumented · reviewed 2026-08-28
- 1. Evidence checked 2026-08-28: Chrome's origin-trial documentation exposes `readOnlyHint` and `untrustedContentHint` in registered and discovered WebMCP tools and publishes handling guidance for both hints.
No sourced issues are attached to this row.
- WebMCP Draft Community Group Report documented · W3C Web Machine Learning Community Group · reviewed 2026-08-28
- Chrome for Developers — WebMCP Imperative API documented · Google Chrome · reviewed 2026-08-28
- Chrome for Developers — WebMCP tool security documented · Google Chrome · reviewed 2026-08-28
Found a wrong or incomplete result?
Name the exact product, describe what happened, add the date, and link public evidence when available. A community report starts a review. It does not change the support state by itself.