WebMCP Security: Why Every Browser Session Is About to Carry More Power

WebMCP, a browser API in Chrome, enables websites to expose structured actions to browser agents, removing friction that previously limited what agents could accomplish within authenticated user sessions. Security teams face a growing challenge distinguishing human activity from agent activity in audit logs, since agents can now operate reliably through existing user credentials without separate authentication.