{
  "entry": {
    "kind": "webmcp",
    "slug": "latch-webmcp",
    "name": "Latch",
    "vendor": "Latch",
    "description": "Latch is a one-script WebMCP integration for existing sites. Rather than asking developers to hand-author tool definitions, it inspects the page for recognisable search handlers, cart actions, and form submissions and automatically registers matching WebMCP tools. The pitch is agent-readiness without a rewrite.\n\nAutomatic registration is the risk. A hand-written tool surface is a deliberate list of what agents may do; an inferred one is whatever the scanner happened to recognise, which can include destructive form handlers nobody intended to publish. Latch declares browser control and outbound network access. If you deploy it, audit the resulting tool list the way you would audit a newly generated API — with the Inspector or Radar — before assuming the surface matches your intent.",
    "website": "https://latch.dev",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "community",
    "capabilities": [
      "browser:control",
      "network:outbound"
    ],
    "packaging": null,
    "configFiles": null,
    "category": "integration",
    "updatedAt": "2026-09-02",
    "risk": {
      "score": 40,
      "band": "medium",
      "signals": [
        {
          "id": "trust-community",
          "kind": "trust",
          "label": "Established community project",
          "contribution": -10
        }
      ],
      "dangerousCombos": []
    },
    "dangerousCombos": []
  }
}