Skip to the text

Tools, Not ClicksBuilding Agent-Ready Websites with WebMCP

Maxim Salnikov · v2.0.2

Part I · Why the Web Needs an Agent Interface

Ch 1The Agentic Web Arrives
Ch 2From APIs to Tools: A Short History
Ch 3MCP in Practice
Ch 4Enter WebMCP

Part II · The WebMCP API in Depth

Ch 5Registering Tools with document.modelContext
Ch 6Annotations, Lifecycle and Errors
Ch 7Frames, Origins and Page-Embedded Agents
Ch 8The Declarative API: Forms as Tools

Part III · Building Agent-Ready Apps

Ch 9Your First WebMCP App, End to End
Ch 10WebMCP in Frameworks
Ch 11Designing Tools Agents Can Actually Use

Part IV · Trust: Security, Privacy and Consent

Ch 12Threat Models for Tool-Exposing Pages
Ch 13Privacy, Consent and the Human in the Loop

Part V · Shipping and the Ecosystem

Ch 14Testing, Debugging and Evals
Ch 15Browser Support and the Standards Road

Part VI · Strategy and the Future

Ch 16Product and Business Implications
Ch 17The Road Ahead

Appendices

App AAPI Quick Reference (IDL, Attributes, Events, Errors)
App BGlossary
App CResources and Further Reading
App DMigration Notes: navigator.modelContext and provideContext() to document.modelContext

Back matter

About the Author

Release history Get the PDF For publishers: contact Maxim Salnikov

Tools, Not Clicks

Part IV

Trust: Security, Privacy and Consent

Chapter 12Threat Models for Tool-Exposing Pages
Chapter 13Privacy, Consent and the Human in the Loop

PreviousChapter 11: Designing Tools Agents Can Actually Use NextChapter 12: Threat Models for Tool-Exposing Pages

© 2026 Maxim Salnikov. All rights reserved. Free to read online; the text may not be republished without permission.

Second edition, November 2026 · Version 2.0.2 · Tested with Chrome 156 and the WebMCP draft of 27 October 2026 · Release history

Get the PDF · For publishers: contact Maxim Salnikov · Demo code (MIT)