{
  "entry": {
    "kind": "webmcp",
    "slug": "webmcp-page-agent",
    "name": "WebMCP Page Agent",
    "vendor": "GoogleChromeLabs",
    "description": "A Gemini-powered controller that accepts natural language and drives whatever WebMCP tools the current page has registered. It is the reference demonstration of the full loop: a page publishes tools, a model reads them, the user types an intent, the model calls tools until the intent is satisfied.\n\nThis is the clearest illustration of why WebMCP belongs in a risk catalog. The agent's context includes page content, and page content is attacker-influenceable on any site that renders user input. The controller declares browser control and outbound network access. Anything that can get text in front of this agent is one injection away from calling the page's tools with arguments of its choosing — inside a session that is already authenticated.",
    "website": "https://github.com/GoogleChromeLabs/webmcp",
    "repository": "https://github.com/GoogleChromeLabs/webmcp",
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "official",
    "capabilities": [
      "browser:control",
      "network:outbound"
    ],
    "packaging": null,
    "configFiles": null,
    "category": "reference-app",
    "updatedAt": "2026-09-02",
    "risk": {
      "score": 10,
      "band": "low",
      "signals": [
        {
          "id": "trust-official",
          "kind": "trust",
          "label": "Published by the vendor",
          "contribution": -40
        }
      ],
      "dangerousCombos": []
    },
    "dangerousCombos": []
  }
}