youtube
Are your WebMCP tools secure against unintended actions or prompt injections
Learn how to build safer tools to protect your web applications and user data. Discover how to add annotations directly to your tool definitions, like consequentialHint for high-stakes operations, readOnlyHint to reduce permission pop-ups, and untrustedContentHint to safeguard against indirect prompt injections by indicate that tool outputs contain untrusted content that requires data spotlighting.
You can inspect all of these security hints directly inside Chrome DevTools.
Resources:
WebMCP example agentic extension on GitHub →
Tips for safer WebMCP tools →
Security demo →
Agent security for WebMCP →
WebMCP documentation →
WebMCP and agents →
Subscribe to Chrome for Developers →
#Chrome #ChromeforDevelopers #WebMCP #ChromeDevTools
Speakers: Kasper Kulikowski, Maud Nalpas
Products Mentioned: WebMCP, Chrome DevTools
|
2026/10/30
youtube
