Issues

• Fire toolactivated after invoking execute

  webmachinelearning/webmcp#332 · Filter by author beaufortfrancois opened on Oct 1, 2026
  1

  

• Scope of consequentialHint for high-risk read tools

  webmachinelearning/webmcp#331 · Filter by author beaufortfrancois opened on Sep 30, 2026
  5

• Allow pages to send messages to agents

  webmachinelearning/webmcp#329 · Filter by author Idan-Levin opened on Sep 30, 2026

• Signaling tool stability to agents

  Agenda+needs-agent-feedback
  webmachinelearning/webmcp#328 · Filter by author domfarolino opened on Sep 29, 2026
  2

• Define specific errors for tool execution failures

  backwards-compatibility concerns
  webmachinelearning/webmcp#323 · Filter by author domfarolino opened on Sep 26, 2026
  1

  

• Prevent WebMCP from becoming a browser-dependent substitute for remote MCP

  webmachinelearning/webmcp#322 · Filter by author AdamCoulterOz opened on Sep 26, 2026
  1

• Host-controlled WebMCP access between iframes

  enhancement
  webmachinelearning/webmcp#317 · Filter by author sparkinson opened on Sep 23, 2026
  1

• Guidance for sensitive form fields (credentials, card data, national IDs) in declarative and imperative tools

  declarativesecurity-tracker
  webmachinelearning/webmcp#316 · Filter by author prasanna-gyde opened on Sep 23, 2026
  1

• Mitigations for profound privacy and security issues seem to be missing?

  Agenda+beyond-scope: agents-on-the-webprivacy-needs-resolution
  webmachinelearning/webmcp#313 · Filter by author npdoty opened on Sep 21, 2026
  5

• Keeping the agent in-sync with the page's context

  Agenda+enhancement
  webmachinelearning/webmcp#312 · Filter by author yoavweiss opened on Sep 17, 2026
  5

• Clarify caller lifecycle for non-autosubmit declarative tools

  declarative
  webmachinelearning/webmcp#307 · Filter by author rgarcia opened on Sep 9, 2026

• §6.4: add page-enforced write boundaries as a mitigation for agent over-reach

  documentationsecurity-tracker
  webmachinelearning/webmcp#298 · Filter by author minjikim89 opened on Sep 6, 2026
  5

• Model-aware tool definitions

  webmachinelearning/webmcp#297 · Filter by author nartmadi opened on Sep 5, 2026

• A user agent that both invokes tools and automates the page can complete the page's own human-approval step

  webmachinelearning/webmcp#288 · Filter by author Sidharth1999 opened on Sep 3, 2026
  7

• Include aria-label as part of the Declarative API's toolparamdescription sources

  declarative
  webmachinelearning/webmcp#286 · Filter by author sawyer-stripe opened on Sep 2, 2026
  2

• No structured way to signal a tool's refusal, distinct from success or a schema-validation error

  backwards-compatibility concernsenhancement
  webmachinelearning/webmcp#282 · Filter by author AshrafAhmed9 opened on Sep 2, 2026
  7

• Define accessibility requirements for WebMCP user-agent UI

  a11y-tracker
  webmachinelearning/webmcp#277 · Filter by author mlmrx opened on Sep 1, 2026
  3

• Preserve language and direction for declarative tool descriptions

  declarativei18n-tracker
  webmachinelearning/webmcp#276 · Filter by author mlmrx opened on Sep 1, 2026

• WebMCP internationalization review checklist

  Agenda+i18n-tracker
  webmachinelearning/webmcp#273 · Filter by author anssiko opened on Aug 31, 2026
  3

• WebMCP accessibility review checklist

  a11y-trackerAgenda+
  webmachinelearning/webmcp#272 · Filter by author anssiko opened on Aug 31, 2026
  3

• Turn awareness

  backlog
  webmachinelearning/webmcp#267 · Filter by author yoavweiss opened on Aug 28, 2026
  1

• WebMCP loses important context when tools appear or disappear

  webmachinelearning/webmcp#262 · Filter by author heyitischris-web opened on Aug 26, 2026
  6

• Agent-Scoped Cookies

  beyond-scope: agents-on-the-web
  webmachinelearning/webmcp#257 · Filter by author Idan-Levin opened on Aug 23, 2026
  2

• Origin Trial research note: observations on tool exposure, validation, and context cost

  webmachinelearning/webmcp#256 · Filter by author SeCuReDmE-main-dev opened on Aug 22, 2026
  9

• Tool collections: coarse-grained grouping with progressive disclosure

  enhancement
  webmachinelearning/webmcp#255 · Filter by author sdras opened on Aug 22, 2026
  12