The WebMCP tools you provide to agents can be used to hijack them
Add WebMCP to your website and you give visiting AI agents a set of named tools to invoke. These same tools can be used to turn the agents against the people who sent them. Chrome’s developer page now includes the security advisories for WebMCP, and much of it is written for the websites that provide … Read more