BREAKING
Chrome Publishes WebMCP Security Guidance
Two Core Security Documents
Layered Defense Against Prompt Injection
1
Defense in depth
↓
2
Prioritize user instructions
↓
3
untrustedContentHint
↓
4
readOnlyHint
WebMCP vs Screen Scraping
WebMCP
W3C Draft
●
Structured tools via API
●
Faster, more reliable
Old approach
Legacy
●
Screenshot analysis
●
DOM scraping
WebMCP Rollout Timeline
1
Chrome 146 Canary preview
↓
2
Security guidance Jun 2026
↓
3
Chrome 149 origin trial
A First Step for the Agentic Web
AI NEWS BLITZ
Chrome has released its first security guidance for developers building WebMCP agents.