use-webmcp-tool ↗

use-webmcp-tool is a community-maintained WebMCP tool from npm. Anomity scores its risk at 40 out of 100 (medium).

A small React hook that registers a WebMCP tool when a component mounts, keeps its schema current as props change, and unregisters it on unmount. It makes the tool surface a function of the rendered UI, which is the right default: tools disappear when the screen that backs them does.

The capability surface is browser control, inherited from the API it wraps. The design consideration it surfaces is scoping. Because registration is tied to component lifecycle, a tool mounted inside an authenticated route is only present while that route is rendered — a meaningfully tighter surface than registering everything globally at page load. Prefer that pattern; a permanently-registered `deleteProject` tool is reachable from every page an agent wanders onto.

Why this entry scored 40 out of 100

This profile starts at the catalog's neutral base of 50. Because the entry is community-maintained, trust adjusts the score by -10. The entry declares no high-risk capabilities on its own, so capabilities add nothing. It matches no dangerous capability combinations. The clamped result is 40, placing it in the medium band.

See the full scoring formula →